repro: Split firewall service as sip and sips

- Since SIP is a generic protocol implemented by various servers, the
  firewall service must describe the protocol instead of the
  application.  This is similar to the way firewalld handles
  http/https.  This also make the service descriptions more acceptable
  by upstream.

- Split unencrypted and encrypted services so that one can enabled
  without the other (a possibility with SIP).

- Add 5061/UDP for SIP over DTLS and DCCP.
This commit is contained in:
Sunil Mohan Adapa 2016-01-27 16:28:22 +05:30
parent b7e44eb429
commit 5805351f50
No known key found for this signature in database
GPG Key ID: 36C361440C9BC971
4 changed files with 15 additions and 9 deletions

View File

@ -1,8 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<service>
<short>repro SIP proxy</short>
<description>repro is a SIP proxy server. It provides authentication, authorization, and call routing features.</description>
<port protocol="udp" port="5060"/>
<port protocol="tcp" port="5060"/>
<port protocol="tcp" port="5061"/>
</service>

View File

@ -0,0 +1,7 @@
<?xml version="1.0" encoding="utf-8"?>
<service>
<short>SIP</short>
<description>The Session Initiaion Protocol (SIP) is commonly used in Internet telephony for audio/video calls and instant messaging. Enable this if you are running a SIP proxy, registrar, redirector or gateway server over an unencrypted channel.</description>
<port protocol="udp" port="5060"/>
<port protocol="tcp" port="5060"/>
</service>

View File

@ -0,0 +1,7 @@
<?xml version="1.0" encoding="utf-8"?>
<service>
<short>SIP over TLS/DTLS</short>
<description>The Session Initiaion Protocol (SIP) is commonly used in Internet telephony for audio/video calls and instant messaging. Enable this if you are running a SIP proxy, registrar, redirector or gateway server over a channel encrypted using TLS or DTLS.</description>
<port protocol="udp" port="5061"/>
<port protocol="tcp" port="5061"/>
</service>

View File

@ -38,7 +38,7 @@ def init():
global service
service = service_module.Service(
'repro', _('Repro SIP Proxy'),
'repro', _('repro SIP Proxy'), ['sip-plinth', 'sip-tls-plinth'],
is_external=True, enabled=is_enabled())