diff --git a/README.turnserver b/README.turnserver index 7c82e9b0..df513443 100644 --- a/README.turnserver +++ b/README.turnserver @@ -235,6 +235,10 @@ Flags: Option to suppress STUN functionality, only TURN requests will be processed. --allow-loopback-peers Allow peers on the loopback addresses (127.x.x.x and ::1). + Allow it only for testing in a development environment! + In production it adds a possible security vulnerability, + and so due to security reasons, it is not allowed + using it together with empty cli-password. --no-multicast-peers Disallow peers on well-known broadcast addresses (224.0.0.0 and above, and FFXX:*). diff --git a/examples/etc/turnserver.conf b/examples/etc/turnserver.conf index cb02525d..8f0cc688 100644 --- a/examples/etc/turnserver.conf +++ b/examples/etc/turnserver.conf @@ -575,6 +575,10 @@ # (To avoid any security issue that allowing loopback access may raise, # the no-loopback-peers option is replaced by allow-loopback-peers.) # +# Allow it only for testing in a development environment! +# In production it adds a possible security vulnerability, so for security reasons +# it is not allowed using it together with empty cli-password. +# #allow-loopback-peers # Flag that can be used to disallow peers on well-known broadcast addresses (224.0.0.0 and above, and FFXX:*).