kenmirrors/asterisk
1
0
Fork 0
mirror of https://github.com/asterisk/asterisk.git synced 2025-09-05 20:20:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

chan_sip: Add security event for calls to invalid extension.

Browse Source 
Log a message to security events when an INVITE is received to an
invalid extension.

ASTERISK-25869 #close

Change-Id: I0da40cd7c2206c825c2f0d4e172275df331fcc8f
This commit is contained in:
Corey Farrell
2016-10-06 02:29:21 -04:00
parent 7377927b18
commit e3bd95f55c
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
CHANGES
View File

@@ -21,6 +21,11 @@ Core
Asterisk is compiled with the LOW_MEMORY compile time option enabled because Asterisk is compiled with the LOW_MEMORY compile time option enabled because
the cache code does not exist. the cache code does not exist.
chan_sip
------------------
* Calls to invalid extensions are now reported as an ACL failure security event
"no_extension_match".
res_pjsip res_pjsip
------------------ ------------------
* The "identify_by" on endpoints can now be set to "ip" to restrict an endpoint * The "identify_by" on endpoints can now be set to "ip" to restrict an endpoint

1
channels/chan_sip.c
View File

@@ -26405,6 +26405,7 @@ static int handle_request_invite(struct sip_pvt *p, struct sip_request *req, str
ast_log(LOG_NOTICE, "Call from '%s' (%s) to extension" ast_log(LOG_NOTICE, "Call from '%s' (%s) to extension"
" '%s' rejected because extension not found in context '%s'.\n", " '%s' rejected because extension not found in context '%s'.\n",
S_OR(p->username, p->peername), ast_sockaddr_stringify(&p->recv), decoded_exten, p->context); S_OR(p->username, p->peername), ast_sockaddr_stringify(&p->recv), decoded_exten, p->context);
sip_report_failed_acl(p, "no_extension_match");
} }
break; break;
case SIP_GET_DEST_REFUSED: case SIP_GET_DEST_REFUSED: