GNU Gatekeeper 5.2 released

This release that has a rewritten networking implementation (aka
"large-fdset") that allows GnuGk to scale to higher numbers of calls
per server than previous versions.

This new implementation replaces the old hack to extend the select()
system call by using poll() which enables GnuGk to handle huge numbers
of sockets at the same time. The new implementation also works on
Windows, but has been tested mostly on the different Unix versions we
support.

Please note that the relevant configure option when comping GnuGk
source code has changed to --enable-large-fdset. There is no need to
specify a maximum number of sockets any more.

This release also has a few bug fixes, eg. for using LUA scripts with
shared libraries and for memory leaks in the error handling of H.235
password authentication.


Whats new ?

• re-implement LARGE_FDSET using poll(), enable with configure option --enable-large-fdset
• ExternalIP is automatically added to the default domains
• support running LUA scripts that require dynamic libraries
• change default for [TLS] CipherList= to allow elliptical curve ciphers
• BUGFIX(gkauth.h) fix memory leak in H.235 password auth
• BUGFIX(gkacct.cxx) set known, but unavailable accounting parameters to empty string
• BUGFIX(ProxyChannel.cxx) fix setting UDP source IP on Windows when compiled for Vista or higher

You can download it from https://www.gnugk.org/h323download.html

GNU Gatekeeper 4.4 released

GNU Gatekeeper 4.4 was released today. This is mainly a bug fix release
with only 2 new features.

If you use SSH on your status port you are urged to update as soon as
possible and also if you use LUA scripting. Two serious bugs have been
fixed for these features where GnuGk can be crashed remotely.

A new feature is the RequireOneNet policy that allows you to restrict
access to publicly accessible traversal gatekeepers. Now you can easily
define that one end of all calls must terminate in one of your own
networks and prevent abuse of your resources by 3rd parties.

The other new feature is a significant improvement to the MakeCall
command on the status port. It is now able to establish video calls and
supports virtually all endpoints by using GnuGk's call reroute feature.

Changed config switches:

• [Proxy] ProxyForNAT now defaults to OFF
• [CTI::MakeCall] DisableFastStart has been removed, fastStart is now always disabled

You can download the new version from
http://www.gnugk.org/h323download.html

Please see the full change log below.

These know bugs haven't been addressed, yet:

• when GnuGk acts as a H.460.18 client (as client in a H.460.18 traversal zone with another gatekeeper or as child gatekeeper), it currently does not send a keep-alive on the Q.931 TCP connection  during a call
• bandwidth management currently only applies to calls from registered endpoints and ignores unregistered calls completely

Changes from 4.3 to 4.4

• [CTI::MakeCall] TransferMethod can now also be Reroute, DisableFastStart switch removed
• BUGFIX(MakeCall.cxx) fix MakeCall bearer capabilities to support video calls
• BUGFIX(ProxyChannel.cxx) don't send Notify after call Reroute: Polycom RealPresens  starts a flood of Status messages
• BUGFIX(GkStatus.cxx) call ssh_init() and ssh_finalize() only on application start and shutdown
• BUGFIX(ProxyChannel.cxx) fix IP check for IgnoreSignaledPrivateH239IPs= switch
• new accounting/authentication policy RequireOneNet
• pass full RRQ message to LuaAuth
• BUGFIX(ProxyChannel.cxx) when opening a port from a PortRange fails, try next port  regardless of errno
• BUGFIX(lua.cxx) add mutex for LUA interpreter, because it is not thread safe
• added message type parameter in RouteRequest event (ARQ, Setup, LRQ)
• BUGFIX(yasocket.cxx) fix UDP with LARGE_FDSET on Solaris, OpenBSD and NetBSD
• BUGFIX(RasTbl.cxx) fix crash on invalid AliasTypeFilter setting
• changed default setting: [Proxy] ProxyForNAT now defaults to off, if you want to keep the previous behaviour, please set it explicitely

GNU Gatekeeper 4.1

I'm happy to announce the availability of GNU Gatekeeper 4.1.

This is mainly a bug fix release. If you are using GnuGk as a server in
a traversal zone or if you do H.239 presentations with Avaya endpoints,
you are strongly encouraged to update. This version also fixes a memory
leak that mainly affects long running gatekeepers with a lot of RAS
traffic. Some of the bugs were long standing, so if you skipped some
previous releases, this is really a good time to update.

The main new feature in this release is expanded LUA support.
Besides LUA authentication and LUA routing, there is now a LuaAcct
module that allows you to run a script on every accounting event of your
choice. Please see the updated manual for details.

You can download the new version from
https://www.gnugk.org/h323download.html

Please see the full change log below.

My support website https://www.willamowius.com also got a face lift.
Please check it out as well.

Enjoy!


Changes from 4.0 to 4.1

• BUGFIX(ProxyChannel.cxx) fix crash processing Setup
• BUGFIX(RasSrv.cxx) update IP/port of traversal neighbor on every SCI,  not only on IP changes
• new status port command: PrintNeighbors
• BUGFIX(ProxyChannel.cxx) fix H.239 inside multiplePayloadStream from  Avaya XT5000 with H.460.19
• new accounting module: LuaAcct
• LUA: new library "gnugk" to allow access to GnuGk functionality
• BUGFIX(configure) set all detected options in gnugkbuildopts.h on Unix
• BUGFIX(ProxyChannel.cxx) removing H.235 capabilities might have skipped items
• BUGFIX(lua.cxx) initialize all LUA variables for LUA routing
• status port configuration (MaxStatusClients, StatusEventBacklog, StatusEventBacklogRegex) now changable at runtime
• BUGFIX(GkStatus.cxx) fix StatusEventBacklogRegex for patterns that start at the beginning of the event line
• BUGFIX(ProxyChannel.cxx) use RealPresence Group 0-Byte keep-alive for IgnoreSignaledH239PrivateIPs (needs LARGE_FDSET to work)
• new switches to set database connect and read timeout (only used by  MySQL for now)
• new switch to set worker thread idle timeout: [Gatekeeper::Main] WorkerThreadIdleTimeout=
• BUGFIX(gk.cxx) better test for gatekeeper shutdown
• BUGFIX(Routing.cxx) fix fromIP for ARQ and LRQ RouteRequests
• BUGFIX(gkauth.cxx) only call Q.931 checks when activated
• BUGFIX(Routing.cxx) fix RouteRequest from unregistered caller who  doesn't provide any alias
• new switch: [RoutedMode] DisableSettingUDPSourceIP=1