Module: kamailio
Branch: master
Commit: 4570fe3550d1c16bfa82999371f1f54c3e36c96e
URL: 
https://github.com/kamailio/kamailio/commit/4570fe3550d1c16bfa82999371f1f54c3e36c96e

Author: Sergey Safarov <[email protected]>
Committer: Sergey Safarov <[email protected]>
Date: 2026-01-05T13:23:33+02:00

pkg/kamailio: kamailio should listen on loopback only by default

fixes GH#4428

---

Added: pkg/kamailio/obs/kamailio-local.cfg
Modified: pkg/kamailio/obs/kamailio.spec

---

Diff:  
https://github.com/kamailio/kamailio/commit/4570fe3550d1c16bfa82999371f1f54c3e36c96e.diff
Patch: 
https://github.com/kamailio/kamailio/commit/4570fe3550d1c16bfa82999371f1f54c3e36c96e.patch

---

diff --git a/pkg/kamailio/obs/kamailio-local.cfg 
b/pkg/kamailio/obs/kamailio-local.cfg
new file mode 100644
index 00000000000..bf2c597de54
--- /dev/null
+++ b/pkg/kamailio/obs/kamailio-local.cfg
@@ -0,0 +1,5 @@
+# According service policy
+# The service MUST NOT listen on a network socket for connections originating 
on a separate physical or virtual machine.
+# 
https://docs.fedoraproject.org/en-US/packaging-guidelines/DefaultServices/#_must_not_listen_for_outside_connections
+listen=udp:lo
+listen=tcp:lo
diff --git a/pkg/kamailio/obs/kamailio.spec b/pkg/kamailio/obs/kamailio.spec
index c062345314e..f38f17cf595 100644
--- a/pkg/kamailio/obs/kamailio.spec
+++ b/pkg/kamailio/obs/kamailio.spec
@@ -1297,6 +1297,7 @@ install -Dpm 0644 pkg/kamailio/obs/kamailio.service 
%{buildroot}%{_unitdir}/kama
 install -Dpm 0644 pkg/kamailio/obs/[email protected] 
%{buildroot}%{_unitdir}/[email protected]
 install -Dpm 0644 pkg/kamailio/obs/kamailio.sysusers 
%{buildroot}%{_sysusersdir}/kamailio.conf
 install -Dpm 0644 pkg/kamailio/obs/kamailio.tmpfiles 
%{buildroot}%{_tmpfilesdir}/kamailio.conf
+install -Dpm 0644 pkg/kamailio/obs/kamailio-local.cfg 
%{buildroot}%{_sysconfdir}/kamailio/kamailio-local.cfg
 
 %if 0%{?suse_version}
 install -d %{buildroot}%{_fillupdir}
@@ -1476,6 +1477,7 @@ rm -rf %{buildroot}
 %dir %attr(-,kamailio,kamailio) %{_sysconfdir}/kamailio
 %config(noreplace) %{_sysconfdir}/kamailio/dictionary.kamailio
 %config(noreplace) %{_sysconfdir}/kamailio/kamailio.cfg
+%config(noreplace) %{_sysconfdir}/kamailio/kamailio-local.cfg
 %config(noreplace) %{_sysconfdir}/kamailio/kamctlrc
 %config(noreplace) %{_sysconfdir}/kamailio/pi_framework.xml
 %config(noreplace) %{_sysconfdir}/kamailio/tls.cfg

_______________________________________________
Kamailio - Development Mailing List -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the 
sender!

Reply via email to