mirror of
https://github.com/freedombox/FreedomBox.git
synced 2026-07-22 11:59:33 +00:00
repro: Split firewall service as sip and sips
- Since SIP is a generic protocol implemented by various servers, the firewall service must describe the protocol instead of the application. This is similar to the way firewalld handles http/https. This also make the service descriptions more acceptable by upstream. - Split unencrypted and encrypted services so that one can enabled without the other (a possibility with SIP). - Add 5061/UDP for SIP over DTLS and DCCP.
This commit is contained in:
parent
b7e44eb429
commit
5805351f50
@ -1,8 +0,0 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<service>
|
||||
<short>repro SIP proxy</short>
|
||||
<description>repro is a SIP proxy server. It provides authentication, authorization, and call routing features.</description>
|
||||
<port protocol="udp" port="5060"/>
|
||||
<port protocol="tcp" port="5060"/>
|
||||
<port protocol="tcp" port="5061"/>
|
||||
</service>
|
||||
7
data/usr/lib/firewalld/services/sip-plinth.xml
Normal file
7
data/usr/lib/firewalld/services/sip-plinth.xml
Normal file
@ -0,0 +1,7 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<service>
|
||||
<short>SIP</short>
|
||||
<description>The Session Initiaion Protocol (SIP) is commonly used in Internet telephony for audio/video calls and instant messaging. Enable this if you are running a SIP proxy, registrar, redirector or gateway server over an unencrypted channel.</description>
|
||||
<port protocol="udp" port="5060"/>
|
||||
<port protocol="tcp" port="5060"/>
|
||||
</service>
|
||||
7
data/usr/lib/firewalld/services/sip-tls-plinth.xml
Normal file
7
data/usr/lib/firewalld/services/sip-tls-plinth.xml
Normal file
@ -0,0 +1,7 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<service>
|
||||
<short>SIP over TLS/DTLS</short>
|
||||
<description>The Session Initiaion Protocol (SIP) is commonly used in Internet telephony for audio/video calls and instant messaging. Enable this if you are running a SIP proxy, registrar, redirector or gateway server over a channel encrypted using TLS or DTLS.</description>
|
||||
<port protocol="udp" port="5061"/>
|
||||
<port protocol="tcp" port="5061"/>
|
||||
</service>
|
||||
@ -38,7 +38,7 @@ def init():
|
||||
|
||||
global service
|
||||
service = service_module.Service(
|
||||
'repro', _('Repro SIP Proxy'),
|
||||
'repro', _('repro SIP Proxy'), ['sip-plinth', 'sip-tls-plinth'],
|
||||
is_external=True, enabled=is_enabled())
|
||||
|
||||
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user