Softphone Embedded in web page
May 27, 2008
Hello List,
Mexuar Communications have a softphone solution - Corraleta.
Corraleta is a java applet so the size of the softphone is tiny at 125kb,
there is no software to download, its platform independent and you can
customise the front end so instead of a button you can design a keypad to
make it have the look and feel of a phone.
More info can be found on the blog http:\\mexuarapps(dot)blogspot(dot)com
Any readers wishing to try out Corraleta we can cut a test licence. Please
contact me off list.
Thanks for reading.
Regards,
Charles.
Charles Woods
Sales & Marketing Dir.
Mexuar Communications Ltd
Tel +44 (0)161 866 0028
Mobile +44 (0)7894 338260
www.mexuar.com
500$ Prize to Jabberd2 Bounty Fixers – Programmers? This one is for you.
May 23, 2008
Found on the jadmin list today.. get to work!
I'm offering a $500 bounty (and a Chesspark t-shirt) to anyone who can
fix the memory leak(s) in the session manager component of jabberd2.
You can find more info here:http://metajack.wordpress.com/2008/05/22/want-500-help-us-fix-jabberd2/
jack.
New Asterisk Solution claims to support Microsoft Exchange 2007 and MS Office Comm Server 2007… reallllly?
May 23, 2008
Yup, it appears so, however keep in mind this was some spam sent to a user of the biz list, so who really knows till someone tests it out. If you're reading this ICS, and want to send us a development box, we'd love to test it and review it for you :)
well, here is the first windows solution that I have seen via SPAM.
while the spam msg claimed:
ics offers the enterprise customer a key component in the unified telephony network - the TopGate & VS1000 gateway - which connects the existing legacy telephony PBX with microsoft exchange server 2007 & MS office communications server 2007
http://www.icstel.com/trunkgw.htmlanyone else see this?
daveChttp://www.icstel.com/topgate.html
Top-Gate Specifications
Interfaces
RJ21FXS RJ21 POTS: 1 (24FXS); 2 (48FXS)
FXO RJ21 POTS: 1 (16FX0);
RJ21 POTS Connector
Champ 50
Ethernet Interface Connector
RJ-45 or 10/100 Base-T, with auto sensing
Voice Processing
Voice Codec
G.711, G.729, G .723.1, GSM, and iLBC
Echo Cancellation
G. 168; 0-128ms
Jitter Buffer
Dynamic
Calling Control
Calling/Called Number Mapping; Line Hunt
Fax Processing
T.30, T.38 Fax Relay
Gateway Configuration
Web based user Interface; Text based configuration
Remote Provisioning
Through HTTP/WEB mode
Signaling
Off hook Detection
FXS loop start and DDI
VoIP Protocols
SIP and MGCP;
Supports gateway-gateway direct routing and gateway- gatekeeper assisted routing mode
DTMF
DTMF Digits Transmit: RFC2833, INFO (SIP)
Max Line Length
3000 meters
Environmental Requirements
Ringing Voltage
60 V RMS
Input Voltage
110~240 AC; 50~60Hz; input current 1AMP
Power Consumption
70 W (Max.)
Dimension (H x W x D)
4.4 x 44 x 44 cm; in one rack unit tall chassis
Weight
10kg
Operating Environmental
0 to 40°C, Non-Condensing Humidity 10% to 95%
Non-Operating Environmental
-10 to 60°C
Meet you at Asterisk-tag in Berlin!
May 22, 2008
Friends,
Next week in Berlin there will be a high density of Asterisk users and
developers. Asterisk-tag is organised again and this year Mark
Spencer, Kevin Fleming and myself will be speaking on Monday. On
Tuesday, I will run a workshop on Asterisk and SIP, followed by a
workshop on SER held by Daniel Mierla and Elena Modroiu. A very good
oppurtunity to meet developers, ask questions and discuss cool ideas.
http://www.asterisk-tag.org/wiki/Hauptseite
See you in Berlin!
/O
/home/putnopvut/asa/AST-2008-007/AST-2008-007: AST-2008-007 Cryptographic keys generated by OpenSSL on Debian-based systems compromised
May 22, 2008
Asterisk Project Security Advisory - AST-2008-007
+------------------------------------------------------------------------+
| Product | Asterisk |
|--------------------+---------------------------------------------------|
| Summary | Asterisk installations using cryptographic keys |
| | generated by Debian-based systems may be using a |
| | vulnerable implementation of OpenSSL |
|--------------------+---------------------------------------------------|
| Nature of Advisory | Compromised cryptographic keys |
|--------------------+---------------------------------------------------|
| Susceptibility | Users of RSA for IAX2 authentication and users of |
| | DUNDi |
|--------------------+---------------------------------------------------|
| Severity | Critical |
|--------------------+---------------------------------------------------|
| Exploits Known | None specific to Asterisk, but OpenSSL exploits |
| | are circulating |
|--------------------+---------------------------------------------------|
| Reported On | 13 May 2008 |
|--------------------+---------------------------------------------------|
| Reported By | Luciano Bello |
|--------------------+---------------------------------------------------|
| Posted On | May 16, 2008 |
|--------------------+---------------------------------------------------|
| Last Updated On | May 22, 2008 |
|--------------------+---------------------------------------------------|
| Advisory Contact | Mark Michelson < mmichelson AT digium DOT com > |
|--------------------+---------------------------------------------------|
| CVE Name | CVE-2008-0166 |
+------------------------------------------------------------------------+
+------------------------------------------------------------------------+
| Description | The Debian team recently announced that cryptographic |
| | keys generated by their OpenSSL package were created |
| | using a random number generator with predictable |
| | results. This affects Debian's stable and unstable |
| | distributions, as well as Debian-derived systems such as |
| | Ubuntu. See the links in the "Links" session of this |
| | advisory for more information about the vulnerability. |
| | |
| | Asterisk is not directly affected by this vulnerability; |
| | however, Asterisk's 'astgenkey' script uses OpenSSL in |
| | order to generate cryptographic keys. Therefore, |
| | Asterisk users who use RSA for authentication of IAX2 |
| | calls and who use DUNDi may be using compromised keys. |
| | This vulnerability affects any such installation whose |
| | cryptographic keys were generated on a Debian-based |
| | system, even if the Asterisk installation itself is not |
| | on a Debian-based system. |
+------------------------------------------------------------------------+
+------------------------------------------------------------------------+
| Resolution | Since this is not a vulnerability in Asterisk itself but |
| | in a tool that Asterisk uses, there will be no new |
| | releases made; however, users who are affected by the |
| | Debian OpenSSL vulnerability are strongly encouraged to |
| | upgrade their package of OpenSSL to an uncompromised |
| | version (version 0.9.8c-4 or later) and regenerate all |
| | keys used by Asterisk. |
+------------------------------------------------------------------------+
+------------------------------------------------------------------------+
| Affected Versions |
|------------------------------------------------------------------------|
| Product | Release Series | |
|-----------------------------------+----------------+-------------------|
| Asterisk Open Source | 1.0.x | N/A |
|-----------------------------------+----------------+-------------------|
| Asterisk Open Source | 1.2.x | N/A |
|-----------------------------------+----------------+-------------------|
| Asterisk Open Source | 1.4.x | N/A |
|-----------------------------------+----------------+-------------------|
| Asterisk Business Edition | A.x.x | N/A |
|-----------------------------------+----------------+-------------------|
| Asterisk Business Edition | B.x.x | N/A |
|-----------------------------------+----------------+-------------------|
| Asterisk Business Edition | C.x.x | N/A |
|-----------------------------------+----------------+-------------------|
| AsteriskNOW | pre-release | N/A |
|-----------------------------------+----------------+-------------------|
| Asterisk Appliance Developer Kit | 0.x.x | N/A |
|-----------------------------------+----------------+-------------------|
| s800i (Asterisk Appliance) | 1.0.x | N/A |
+------------------------------------------------------------------------+
+------------------------------------------------------------------------+
| Corrected In |
|------------------------------------------------------------------------|
| Product | Release |
|------------------------------------+-----------------------------------|
| N/A | N/A |
|------------------------------------+-----------------------------------|
|------------------------------------+-----------------------------------|
+------------------------------------------------------------------------+
+------------------------------------------------------------------------+
| Links | http://www.debian.org/security/2008/dsa-1571 |
| | |
| | http://wiki.debian.org/SSLkeys |
+------------------------------------------------------------------------+
+------------------------------------------------------------------------+
| Asterisk Project Security Advisories are posted at |
| http://www.asterisk.org/security |
| |
| This document may be superseded by later versions; if so, the latest |
| version will be posted at |
| http://downloads.digium.com/pub/security/AST-2008-007.pdf and |
| http://downloads.digium.com/pub/security/AST-2008-007.html |
+------------------------------------------------------------------------+
+------------------------------------------------------------------------+
| Revision History |
|------------------------------------------------------------------------|
| Date | Editor | Revisions Made |
|-------------------+----------------------+-----------------------------|
| May 15, 2008 | Mark Michelson | Initial advisory |
+------------------------------------------------------------------------+
Asterisk Project Security Advisory - AST-2008-007
Copyright (c) 2008 Digium, Inc. All Rights Reserved.
Permission is hereby granted to distribute and publish this advisory in its
original, unaltered form.
ejabberd 2.0.1 released
May 21, 2008
Hello,
ejabberd 2.0.1 is a maintenance release version. You can download it from:
http://www.process-one.net/en/ejabberd/downloads
The release note is available on:
http://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_201
Cheers,
--
Mickaël Rémond
http://www.process-one.net/
New release of Thirdlane PBX and Thirdlane PBX Manager GUI
May 21, 2008
Third Lane Technologies is proud to announce the release of version 6.0 of Thirdlane PBX software appliance and Thirdlane PBX Manager GUI – the open GUI for Asterisk management.
Both SMB and multi-tenant (MTE) versions have a lot of new features, enhancements and fixes - please visit our website, register, get a free download at http://www.thirdlane.com/product/download and give it a shot!
Full press release is here http://www.thirdlane.com/news, for those interested in the detailed change log it is posted in the forum http://www.thirdlane.com/forum/thirdlane-pbx-6-0-57-is-available
Thanks to all our customers and partners for valuable suggestions and contributions!
Alex



