Преглед изворни кода

Add warning to config & readme/man

Add warning about that allow-loopback-peer and empty cli-password is not allowed together.
Mészáros Mihály пре 7 година
родитељ
комит
0f11578982
2 измењених фајлова са 8 додато и 0 уклоњено
  1. 4 0
      README.turnserver
  2. 4 0
      examples/etc/turnserver.conf

+ 4 - 0
README.turnserver

@@ -235,6 +235,10 @@ Flags:
 			Option to suppress STUN functionality, only TURN requests will be processed.
 
 --allow-loopback-peers	Allow peers on the loopback addresses (127.x.x.x and ::1).
+             Allow it only for testing in a development environment! 
+             In production it adds a possible security vulnerability, 
+             and so due to security reasons, it is not allowed 
+             using it together with empty cli-password.
 
 --no-multicast-peers	Disallow peers on well-known broadcast addresses 
 			(224.0.0.0 and above, and FFXX:*).

+ 4 - 0
examples/etc/turnserver.conf

@@ -575,6 +575,10 @@
 # (To avoid any security issue that allowing loopback access may raise,
 # the no-loopback-peers option is replaced by allow-loopback-peers.)
 #
+# Allow it only for testing in a development environment! 
+# In production it adds a possible security vulnerability, so for security reasons 
+# it is not allowed using it together with empty cli-password. 
+#
 #allow-loopback-peers
 
 # Flag that can be used to disallow peers on well-known broadcast addresses (224.0.0.0 and above, and FFXX:*).