This release includes source code sutitable for (Linux, Windows, MacOS, FreeBsd, NetBSD, OpenBSD and Solaris) and executables for Linux.
In addition to the new GnuGk version, I'm also happy to announce the general availability of the new Web Interface.
In response to the current wave of H.323 spam / hacking GnuGk 3.8 has a number of improvements to security related features:
- endpoint IDs are now completely random and not as easily guessable as they were before
- GnuGk is now using better random numbers in security relevant places
- new authentication modules using LUA scripts called LuaAuth
- new switch [RasSrv::ARQFeatures] CheckSenderIP=1 to make sure ARQs come from the same IP as the initial registration
- FileIPAuth is now able to check ARQ messages
- AliasAuth updated to work with H.460.18 endpoint
- PrefixAuth was extended to support unregistered calls
- SQLAuth can now operate on SrcInfo fields using %{SrcInfo}
- improvements to the addpasswd utility.
Other new non-security related features include:
- The CatchAll policy now rewrites the destination alias which makes it easier to send CatchAll calls to MCU rooms.
- You can now filter out whole capability classes, eg. all video or H.239 capabilities if some of your endpoints have trouble handling them
- A new switch [Gatekeeper::Main] MinH323Version= lets you set the H.323 version GnuGk identifies itself as using (up to the latest version 7). This is mainly to deal with endpoint that switch features when they believe they are talking to older endpoints (which one shouldn't be doing...)
- a number bugs and crashes fixed
