Re: gk security issue

[Bruno Richard <bruno.richard@xxxxxxxxxxxxxx>]

thanks and sorry for the disturb...

(it's a shame to miss such section !!!)

Best regards,

Bruno

Le 22 mars 2012 à 16:27, Jan Willamowius a écrit :

Hi Bruno,

the InternalNetwork switch is only meant to be used for the decision
when to proxy a call. You want to use an authentication policy like
FileIPAuth to decide who may use your gatekeeper.
http://www.gnugk.org/gnugk-manual-8.html#ss8.2

Regards,
Jan

Bruno Richard wrote:

Hi all,

I use two clients to get h323 communications via gk : M100 and EVO (http://evo.caltech.edu/evoGate/).

- M100 could registered on the gk, no pb with it.

- but EVO could not.

So if I want to use EVO with gk, I have to set the param :  "AcceptUnregisteredCalls=1".

For obvious security reasons I want to restrict the IP range that can acces my gk.

I thought that I could restrict it with the param InternalNetwork (proxy is enable on my gk)

However even with the config bellow, I can connect to the gk with an EVO client that has the IP 172.16.7....

[Proxy]

Enable=1

ProxyAlways=1

InternalNetwork=192.168.0.0/255.255.0.0

I hope I'm clear !!

Thanks in advance.

Bruno

--
Jan Willamowius, jan@xxxxxxxxxxxxxx, http://www.gnugk.org/

------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here
http://p.sf.net/sfu/sfd2d-msazure
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

---------------------------------------------------------------------
Bruno RICHARD
Division des Systèmes d'Information
Université du Maine
Av. O. MESSIAEN 72085 LE MANS CEDEX 9
email : Bruno.Richard@xxxxxxxxxxxxxx
Tél. : +33 2.43.83.27.79    Fax : +33 2 43 83 38 01 
---------------------------------------------------------------------

------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure

_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/