mirrors/coturn
1
0
Fork 0
mirror of https://github.com/coturn/coturn.git synced 2025-11-05 17:31:09 +01:00
Code Issues Projects Releases Wiki Activity

Add warning to config & readme/man

Browse Source 
Add warning about that allow-loopback-peer and empty cli-password is not allowed together.
This commit is contained in:
Mészáros Mihály 2017-12-14 14:03:10 +01:00
parent 5cce82e782
commit 0f11578982
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
README.turnserver
View File

@ -235,6 +235,10 @@ Flags:
Option to suppress STUN functionality, only TURN requests will be processed. Option to suppress STUN functionality, only TURN requests will be processed.
--allow-loopback-peers Allow peers on the loopback addresses (127.x.x.x and ::1). --allow-loopback-peers Allow peers on the loopback addresses (127.x.x.x and ::1).
Allow it only for testing in a development environment!
In production it adds a possible security vulnerability,
and so due to security reasons, it is not allowed
using it together with empty cli-password.
--no-multicast-peers Disallow peers on well-known broadcast addresses --no-multicast-peers Disallow peers on well-known broadcast addresses
(224.0.0.0 and above, and FFXX:*). (224.0.0.0 and above, and FFXX:*).

4
examples/etc/turnserver.conf
View File

@ -575,6 +575,10 @@
# (To avoid any security issue that allowing loopback access may raise, # (To avoid any security issue that allowing loopback access may raise,
# the no-loopback-peers option is replaced by allow-loopback-peers.) # the no-loopback-peers option is replaced by allow-loopback-peers.)
# #
# Allow it only for testing in a development environment!
# In production it adds a possible security vulnerability, so for security reasons
# it is not allowed using it together with empty cli-password.
#
#allow-loopback-peers #allow-loopback-peers
# Flag that can be used to disallow peers on well-known broadcast addresses (224.0.0.0 and above, and FFXX:*). # Flag that can be used to disallow peers on well-known broadcast addresses (224.0.0.0 and above, and FFXX:*).