mirror of https://github.com/asterisk/asterisk
git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@353 65c4cc65-6c06-0410-ace0-fbb531ad65f31.0
Mark Spencer
24 years ago
parent
7c6bbd795c
commit
44407ad3da
@ -0,0 +1,38 @@
|
|||||||
|
==== Security Notes with Asterisk ====
|
||||||
|
|
||||||
|
PLEASE READ THE FOLLOWING IMPORTANT SECURITY RELATED INFORMATION.
|
||||||
|
IMPROPER CONFIGURATION OF ASTERISK COULD ALLOW UNAUTHORIZED USE OF YOUR
|
||||||
|
FACILITIES, POTENTIALLY INCURRING SUBSTANTIAL CHARGES.
|
||||||
|
|
||||||
|
First and foremost remember this:
|
||||||
|
|
||||||
|
USE THE EXTENSION CONTEXTS TO ISOLATE OUTGOING OR TOLL SERVICES FROM ANY
|
||||||
|
INCOMING CONNECTIONS.
|
||||||
|
|
||||||
|
You should consider that if any channel, incoming line, etc can enter an
|
||||||
|
extension context that it has the capability of accessing any extension
|
||||||
|
within that context.
|
||||||
|
|
||||||
|
Therefore, you should NOT allow access to outgoing or toll services in
|
||||||
|
contexts that are accessible (especially without a password) from incoming
|
||||||
|
channels, be they IAX channels, FX or other trunks, or even untrusted
|
||||||
|
stations within you network. In particular, never ever put outgoing toll
|
||||||
|
services in the "default" context. To make things easier, you can include
|
||||||
|
the "default" context within other private contexts by using:
|
||||||
|
|
||||||
|
include => default
|
||||||
|
|
||||||
|
in the appropriate section. A well designed PBX might look like this:
|
||||||
|
|
||||||
|
[longdistance]
|
||||||
|
exten => _91NXXNXXXXXX,1,Dial,Tor/g2/BYEXTENSION
|
||||||
|
include => local
|
||||||
|
|
||||||
|
[local]
|
||||||
|
exten => _9NXXNXXX,1,Dial,Tor/g2/BYEXTENSION
|
||||||
|
include => default
|
||||||
|
|
||||||
|
[default]
|
||||||
|
exten => 6123,Dial,Tor/1
|
||||||
|
|
||||||
|
|
||||||
@ -0,0 +1,89 @@
|
|||||||
|
/*
|
||||||
|
* Asterisk -- A telephony toolkit for Linux.
|
||||||
|
*
|
||||||
|
* App to transmit an image
|
||||||
|
*
|
||||||
|
* Copyright (C) 1999, Mark Spencer
|
||||||
|
*
|
||||||
|
* Mark Spencer <markster@linux-support.net>
|
||||||
|
*
|
||||||
|
* This program is free software, distributed under the terms of
|
||||||
|
* the GNU General Public License
|
||||||
|
*/
|
||||||
|
|
||||||
|
#include <asterisk/file.h>
|
||||||
|
#include <asterisk/logger.h>
|
||||||
|
#include <asterisk/channel.h>
|
||||||
|
#include <asterisk/pbx.h>
|
||||||
|
#include <asterisk/module.h>
|
||||||
|
#include <asterisk/translate.h>
|
||||||
|
#include <asterisk/image.h>
|
||||||
|
#include <string.h>
|
||||||
|
#include <stdlib.h>
|
||||||
|
#include <pthread.h>
|
||||||
|
|
||||||
|
static char *tdesc = "Image Transmission Application";
|
||||||
|
|
||||||
|
static char *app = "SendImage";
|
||||||
|
|
||||||
|
static char *synopsis = "Send an image file";
|
||||||
|
|
||||||
|
static char *descrip =
|
||||||
|
" SendImage(filename): Sends an image on a channel. If the channel\n"
|
||||||
|
"does not support image transport, and there exists a step with\n"
|
||||||
|
"priority n + 101, then execution will continue at that step.\n"
|
||||||
|
"Otherwise, execution will continue at the next priority level.\n"
|
||||||
|
"SendImage only returns 0 if the image was sent correctly or if\n"
|
||||||
|
"the channel does not support image transport, and -1 otherwise.\n";
|
||||||
|
|
||||||
|
STANDARD_LOCAL_USER;
|
||||||
|
|
||||||
|
LOCAL_USER_DECL;
|
||||||
|
|
||||||
|
static int sendimage_exec(struct ast_channel *chan, void *data)
|
||||||
|
{
|
||||||
|
int res = 0;
|
||||||
|
struct localuser *u;
|
||||||
|
if (!data || !strlen((char *)data)) {
|
||||||
|
ast_log(LOG_WARNING, "SendImage requires an argument (filename)\n");
|
||||||
|
return -1;
|
||||||
|
}
|
||||||
|
LOCAL_USER_ADD(u);
|
||||||
|
if (!ast_supports_images(chan)) {
|
||||||
|
/* Does not support transport */
|
||||||
|
if (ast_exists_extension(chan, chan->context, chan->exten, chan->priority + 101, chan->callerid))
|
||||||
|
chan->priority += 100;
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
res = ast_send_image(chan, data);
|
||||||
|
LOCAL_USER_REMOVE(u);
|
||||||
|
return res;
|
||||||
|
}
|
||||||
|
|
||||||
|
int unload_module(void)
|
||||||
|
{
|
||||||
|
STANDARD_HANGUP_LOCALUSERS;
|
||||||
|
return ast_unregister_application(app);
|
||||||
|
}
|
||||||
|
|
||||||
|
int load_module(void)
|
||||||
|
{
|
||||||
|
return ast_register_application(app, sendimage_exec, synopsis, descrip);
|
||||||
|
}
|
||||||
|
|
||||||
|
char *description(void)
|
||||||
|
{
|
||||||
|
return tdesc;
|
||||||
|
}
|
||||||
|
|
||||||
|
int usecount(void)
|
||||||
|
{
|
||||||
|
int res;
|
||||||
|
STANDARD_USECOUNT(res);
|
||||||
|
return res;
|
||||||
|
}
|
||||||
|
|
||||||
|
char *key()
|
||||||
|
{
|
||||||
|
return ASTERISK_GPL_KEY;
|
||||||
|
}
|
||||||
@ -0,0 +1,137 @@
|
|||||||
|
/*
|
||||||
|
* Asterisk -- A telephony toolkit for Linux.
|
||||||
|
*
|
||||||
|
* App to transmit a URL
|
||||||
|
*
|
||||||
|
* Copyright (C) 1999, Mark Spencer
|
||||||
|
*
|
||||||
|
* Mark Spencer <markster@linux-support.net>
|
||||||
|
*
|
||||||
|
* This program is free software, distributed under the terms of
|
||||||
|
* the GNU General Public License
|
||||||
|
*/
|
||||||
|
|
||||||
|
#include <asterisk/file.h>
|
||||||
|
#include <asterisk/logger.h>
|
||||||
|
#include <asterisk/channel.h>
|
||||||
|
#include <asterisk/pbx.h>
|
||||||
|
#include <asterisk/module.h>
|
||||||
|
#include <asterisk/translate.h>
|
||||||
|
#include <asterisk/image.h>
|
||||||
|
#include <string.h>
|
||||||
|
#include <stdlib.h>
|
||||||
|
#include <pthread.h>
|
||||||
|
|
||||||
|
static char *tdesc = "Send URL Applications";
|
||||||
|
|
||||||
|
static char *app = "SendURL";
|
||||||
|
|
||||||
|
static char *synopsis = "Send a URL";
|
||||||
|
|
||||||
|
static char *descrip =
|
||||||
|
" SendURL(URL[|option]): Requests client go to URL. If the client\n"
|
||||||
|
"does not support html transport, and there exists a step with\n"
|
||||||
|
"priority n + 101, then execution will continue at that step.\n"
|
||||||
|
"Otherwise, execution will continue at the next priority level.\n"
|
||||||
|
"SendURL only returns 0 if the URL was sent correctly or if\n"
|
||||||
|
"the channel does not support HTML transport, and -1 otherwise.\n"
|
||||||
|
"If the option 'wait' is specified, execution will wait for an\n"
|
||||||
|
"acknowledgement that the URL has been loaded before continuing\n"
|
||||||
|
"and will return -1 if the peer is unable to load the URL\n";
|
||||||
|
|
||||||
|
STANDARD_LOCAL_USER;
|
||||||
|
|
||||||
|
LOCAL_USER_DECL;
|
||||||
|
|
||||||
|
static int sendurl_exec(struct ast_channel *chan, void *data)
|
||||||
|
{
|
||||||
|
int res = 0;
|
||||||
|
struct localuser *u;
|
||||||
|
char tmp[256];
|
||||||
|
char *options;
|
||||||
|
int option_wait=0;
|
||||||
|
struct ast_frame *f;
|
||||||
|
if (!data || !strlen((char *)data)) {
|
||||||
|
ast_log(LOG_WARNING, "SendURL requires an argument (URL)\n");
|
||||||
|
return -1;
|
||||||
|
}
|
||||||
|
strncpy(tmp, (char *)data, sizeof(tmp));
|
||||||
|
strtok(tmp, "|");
|
||||||
|
options = strtok(NULL, "|");
|
||||||
|
if (options && !strcasecmp(options, "wait"))
|
||||||
|
option_wait = 1;
|
||||||
|
LOCAL_USER_ADD(u);
|
||||||
|
if (!ast_channel_supports_html(chan)) {
|
||||||
|
/* Does not support transport */
|
||||||
|
if (ast_exists_extension(chan, chan->context, chan->exten, chan->priority + 101, chan->callerid))
|
||||||
|
chan->priority += 100;
|
||||||
|
LOCAL_USER_REMOVE(u);
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
res = ast_channel_sendurl(chan, tmp);
|
||||||
|
if (res > -1) {
|
||||||
|
if (option_wait) {
|
||||||
|
for(;;) {
|
||||||
|
/* Wait for an event */
|
||||||
|
res = ast_waitfor(chan, -1);
|
||||||
|
if (res < 0)
|
||||||
|
break;
|
||||||
|
f = ast_read(chan);
|
||||||
|
if (!f) {
|
||||||
|
res = -1;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
if (f->frametype == AST_FRAME_HTML) {
|
||||||
|
switch(f->subclass) {
|
||||||
|
case AST_HTML_LDCOMPLETE:
|
||||||
|
res = 0;
|
||||||
|
ast_frfree(f);
|
||||||
|
goto out;
|
||||||
|
break;
|
||||||
|
case AST_HTML_NOSUPPORT:
|
||||||
|
/* Does not support transport */
|
||||||
|
if (ast_exists_extension(chan, chan->context, chan->exten, chan->priority + 101, chan->callerid))
|
||||||
|
chan->priority += 100;
|
||||||
|
res = 0;
|
||||||
|
goto out;
|
||||||
|
break;
|
||||||
|
default:
|
||||||
|
ast_log(LOG_WARNING, "Don't know what to do with HTML subclass %d\n", f->subclass);
|
||||||
|
};
|
||||||
|
}
|
||||||
|
ast_frfree(f);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
out:
|
||||||
|
LOCAL_USER_REMOVE(u);
|
||||||
|
return res;
|
||||||
|
}
|
||||||
|
|
||||||
|
int unload_module(void)
|
||||||
|
{
|
||||||
|
STANDARD_HANGUP_LOCALUSERS;
|
||||||
|
return ast_unregister_application(app);
|
||||||
|
}
|
||||||
|
|
||||||
|
int load_module(void)
|
||||||
|
{
|
||||||
|
return ast_register_application(app, sendurl_exec, synopsis, descrip);
|
||||||
|
}
|
||||||
|
|
||||||
|
char *description(void)
|
||||||
|
{
|
||||||
|
return tdesc;
|
||||||
|
}
|
||||||
|
|
||||||
|
int usecount(void)
|
||||||
|
{
|
||||||
|
int res;
|
||||||
|
STANDARD_USECOUNT(res);
|
||||||
|
return res;
|
||||||
|
}
|
||||||
|
|
||||||
|
char *key()
|
||||||
|
{
|
||||||
|
return ASTERISK_GPL_KEY;
|
||||||
|
}
|
||||||
Loading…
Reference in new issue