On Tue, Jun 24, 2008 at 4:28 PM, Steve Murphy <[EMAIL PROTECTED]> wrote:
> This is just a note that the fixes in the CDRfix4 and CDRfix6 branches
> are getting closer to being merged into 1.4, trunk, and 1.6.x.
>
> If CDR's are important to you, and you ignore this notice, then
> you deserve what you get!
>

Hi murf,

>From some preliminary testing on the CDRfix4 branch it looks like the
CDRs for attended transfers are now correct which is fantastic. For
blind transfers the CDR for the first call leg is still incorrect with
the duration only being recorded up until the point the transfer
occurs.

For people on the list following this bug my company got stung by this
in the last week so there now appear to be some people out there
actively looking for Asterisk systems to exploit. The incident for us
was a user using attended transfers to place free calls through a 1.2
system. In the past we have had normal users stumble across the
problem but in this case it was a directed attempt. So if like us you
are a provider and use Asterisk and are required to support transfers
it would be highly advisable to keep a close eye on things!

Regards,

Greyman.

_______________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

AstriCon 2008 - September 22 - 25 Phoenix, Arizona
Register Now: http://www.astricon.net

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to