Skip to content
This repository has been archived by the owner on Mar 22, 2023. It is now read-only.

Add allowed and denied peer to turnserver.conf #233

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Add allowed and denied peer to turnserver.conf #233

wants to merge 1 commit into from

Commits on Feb 11, 2021

  1. Add allowed and denied peer to turnserver.conf 

    Following [1] and [2] the TURN-Server can be used to access the network behind the TURN-Server or the server can be abused to relay attacks in the internet. To workaround those problems `denied-peer-ip` and `allowed-peer-ip` setting should be used.

[1] https://www.rtcsec.com/post/2020/04/how-we-abused-slacks-turn-servers-to-gain-access-to-internal-services/
[2] https://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection/
    @symptog
    symptog committed Feb 11, 2021
    Configuration menu
    Copy the full SHA
    f9b077f View commit details
    Browse the repository at this point in the history