|

»

»

GNU Gatekeeper Users

GnuGK

View: New views

3 Messages — Rating Filter: Alert me

	GnuGK by Scheithauer, Lars (FH) :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message Some parts of this message have been removed. Learn more about Nabble's security policy. Hello everyone, we plan to run GnuGK in the DMZ of our universities network. The general usecase is absolutely basic: internal users should be allowed to call out and call other internal users, outside users should be allowed to call internal users. This could be easily determined by an IP-based ACL. My question is, if outside users are by default denied to call other outside users, since I couldn’t think of any scenario, in which this would be plausible (and we of course wouldn’t want to pay the traffic for those). Do I have to secure this, too? If so, which ACL-module should be used (SQL does provide destination-based ACLs, but AFAIK doesn’t understand netmasks, which would make the process of keeping the tables up to date a hell)? Best Regards, Lars ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________________ Posting: mailto:Openh323gk-users@... Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/
	Re: GnuGK by Willamowius :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message Hi Lars, sure you handle networks with netmasks in SQL. Here are a few examples in MySQL: http://209.85.129.132/search?q=cache:KGH20NPBfq4J:fo0bar.livejournal.com/185275.html But you could also use the 'vqueue' routing policy and write a small script in any programming language to handle this. Regards, Jan Scheithauer, Lars (FH) wrote: > Hello everyone, > > > > we plan to run GnuGK in the DMZ of our universities network. The general > usecase is absolutely basic: internal users should be allowed to call > out and call other internal users, outside users should be allowed to > call internal users. This could be easily determined by an IP-based ACL. > > > > My question is, if outside users are by default denied to call other > outside users, since I couldn't think of any scenario, in which this > would be plausible (and we of course wouldn't want to pay the traffic > for those). Do I have to secure this, too? If so, which ACL-module > should be used (SQL does provide destination-based ACLs, but AFAIK > doesn't understand netmasks, which would make the process of keeping the > tables up to date a hell)? > > > > Best Regards, > > Lars > -- Jan Willamowius, jan@..., http://www.gnugk.org/ ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________________ Posting: mailto:Openh323gk-users@... Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/
	Re: GnuGK by Scheithauer, Lars (FH) :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message Hi Jan, I'll check that out, thanks! Regards, Lars -----Ursprüngliche Nachricht----- Von: Jan Willamowius [mailto:jan@...] Gesendet: Donnerstag, 29. Oktober 2009 15:47 An: openh323gk-users@... Betreff: Re: [Openh323gk-users] GnuGK Hi Lars, sure you handle networks with netmasks in SQL. Here are a few examples in MySQL: http://209.85.129.132/search?q=cache:KGH20NPBfq4J:fo0bar.livejournal.com/185275.html But you could also use the 'vqueue' routing policy and write a small script in any programming language to handle this. Regards, Jan Scheithauer, Lars (FH) wrote: > Hello everyone, > > > > we plan to run GnuGK in the DMZ of our universities network. The general > usecase is absolutely basic: internal users should be allowed to call > out and call other internal users, outside users should be allowed to > call internal users. This could be easily determined by an IP-based ACL. > > > > My question is, if outside users are by default denied to call other > outside users, since I couldn't think of any scenario, in which this > would be plausible (and we of course wouldn't want to pay the traffic > for those). Do I have to secure this, too? If so, which ACL-module > should be used (SQL does provide destination-based ACLs, but AFAIK > doesn't understand netmasks, which would make the process of keeping the > tables up to date a hell)? > > > > Best Regards, > > Lars > -- Jan Willamowius, jan@..., http://www.gnugk.org/ ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________________ Posting: mailto:Openh323gk-users@... Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/ ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________________ Posting: mailto:Openh323gk-users@... Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/