VoIP is so exciting

Back to VoIP testing.

I (re)tested SJPhone 1.65 at home. It is a very good softphone.

But it has a annoying drawback: it can only register to one account at a time. I currently have freephonie.net, VoXaLot (eu), and FreeWorldDialup account. I only can register one !

So, I cannot use my enum number if I am always (almost always) registered through FWD. Too bad.

I tried gtalk, but it cannot send Video (works fine with audio, but my friends tell audio quality is worst than skype).

The solution is a Linux one (but I have not tested it yet): Ekiga. Multiple account registration, video, audio, SIP+H323 ! wonderful. But I do not use Linux at home (FreeBSD or Windows ...)

So, the ultimate solution is an Asterisk SOHO box dedicated to VoIP management.

I received an email (through sip-implementors ML) which announce pingtel opens a new SIP testing PBX gateway. Good thing. Not only for SIP implementors, but also for Security developer who needs to check that their control are not too rigorous. Good initiative.

Centralized private music server

I was looking for a personal music server.

I have my own MP3 (ripped from MY CD). I wanted to listen from my work computer, or at home.

I searched for a simple solution... and I found it:

sockso. This little server has a web interface, with a flash embedded (or not) music player, and support for M3U playlists access.

I tried it for a week, and it works fine (unless some minor problems with UTF-8 and ISO8859-1 accent character in song filename).

http://sockso.pu-gh.com/

Web Review : 15/05/2008

25 years to fix a bug ?

yes it is possible: http://www.osnews.com/story/19731

A (french ?) postfix manager: http://www.artica.fr/index.php

It looks good ! especially if you do not want to spend hours to configure manually postifx, fetchmail and so on.

I prefer my own configuration, but I admit that sometimes, 10 minutes setup is good ;-)

FreeBSD vs Linux

Good troll ...



then ...

FreeBSD tip

Because I spent more than 5 minutes wondering why portsnap does not work correctly, I prefer to write the tip for anyone.

If you want to launch 'portsnap fetch' through an authenticated proxy, do not use:

HTTP_PROXY=http://user:passwd@ip:port/

but use

HTTP_PROXY=http://ip:port/

and

HTTP_PROXY_AUTH=basic:*:user:passwd

in your environment.

Stop global warming

I didn't know that link. One of my friend added it to its blog:
http://www.blueman.com/land/archive/earth/

Great !!


(while reading my mailbox, i read that: Quarterly VoIP vulnerability summary
You may discover that:
- old Cisco 7940/7960 phones still have security issues
- recent phones (snom ...) still have big security issues ..

I am afraid by the situation ;-)
)

Web Review : 14/04/2008

Almost one month from my last web review. I was very busy building my house :-)

So, what are the coolest project I have found:

- MathGL : something nice. It allows to generate nice graph, in 2D, 3D. The most interesting feature (well, not the most, but an interesting feature, sure) is the MGL scripting language, which allow a shell script to generate a JPG/EPS/SVG/PNG/anyOtherFormat graphic. [http://mathgl.sourceforge.net/index.html]

- GreenSQL : it may be very interesting for security. It is a MySQL application level gateway. It does for MySQL what a web filtering proxy do for HTTP. I took a look at the demo. If it work as presented, It is a very interesting project ! [http://www.greensql.net/]

- Because security is only a protection, you have to make backups. And if possible, automatic backup. This project seems to do the right job, local or network (through ssh).. zbackup-mysql [http://www.zmanda.com/backup-mysql.html]

- On a previous post, I talk about insecurity of VoIP clear voice stream. Give someone Dtmf2num, and dial your bank count access code with your prefered VoIP phone. You may be surprised ;-) dtmf2num

- Two of my friends will be very interested by the following: SMART [http://smart.conformix.com/]. This is a tool to manager security policy and its associated workflow. It looks cute ... (as long as security is cute ...)

- For those who are developing cross application (by cross, I mean Linux/Window*), check that: I'm a cross .... You should enjoy this one !

That's all folks !!