Module: kamailio
Branch: 6.0
Commit: 6413ceac061fc8cef59802128fa7b3cc43938144
URL: 
https://github.com/kamailio/kamailio/commit/6413ceac061fc8cef59802128fa7b3cc43938144

Author: Sergey Safarov <[email protected]>
Committer: Sergey Safarov <[email protected]>
Date: 2026-01-05T13:36:57+02:00

pkg/kamailio: kamailio should listen on loopback only by default

fixes GH#4428

(cherry picked from commit 4570fe3550d1c16bfa82999371f1f54c3e36c96e)

---

Added: pkg/kamailio/obs/kamailio-local.cfg
Modified: pkg/kamailio/obs/kamailio.spec

---

Diff:  
https://github.com/kamailio/kamailio/commit/6413ceac061fc8cef59802128fa7b3cc43938144.diff
Patch: 
https://github.com/kamailio/kamailio/commit/6413ceac061fc8cef59802128fa7b3cc43938144.patch

---

diff --git a/pkg/kamailio/obs/kamailio-local.cfg 
b/pkg/kamailio/obs/kamailio-local.cfg
new file mode 100644
index 00000000000..bf2c597de54
--- /dev/null
+++ b/pkg/kamailio/obs/kamailio-local.cfg
@@ -0,0 +1,5 @@
+# According service policy
+# The service MUST NOT listen on a network socket for connections originating 
on a separate physical or virtual machine.
+# 
https://docs.fedoraproject.org/en-US/packaging-guidelines/DefaultServices/#_must_not_listen_for_outside_connections
+listen=udp:lo
+listen=tcp:lo
diff --git a/pkg/kamailio/obs/kamailio.spec b/pkg/kamailio/obs/kamailio.spec
index e394c97ad16..100c7fd1511 100644
--- a/pkg/kamailio/obs/kamailio.spec
+++ b/pkg/kamailio/obs/kamailio.spec
@@ -1316,6 +1316,7 @@ install -Dpm 0644 pkg/kamailio/obs/kamailio.service 
%{buildroot}%{_unitdir}/kama
 install -Dpm 0644 pkg/kamailio/obs/[email protected] 
%{buildroot}%{_unitdir}/[email protected]
 install -Dpm 0644 pkg/kamailio/obs/kamailio.sysusers 
%{buildroot}%{_sysusersdir}/kamailio.conf
 install -Dpm 0644 pkg/kamailio/obs/kamailio.tmpfiles 
%{buildroot}%{_tmpfilesdir}/kamailio.conf
+install -Dpm 0644 pkg/kamailio/obs/kamailio-local.cfg 
%{buildroot}%{_sysconfdir}/kamailio/kamailio-local.cfg
 
 %if 0%{?suse_version}
 install -d %{buildroot}%{_fillupdir}
@@ -1495,6 +1496,7 @@ rm -rf %{buildroot}
 %dir %attr(-,kamailio,kamailio) %{_sysconfdir}/kamailio
 %config(noreplace) %{_sysconfdir}/kamailio/dictionary.kamailio
 %config(noreplace) %{_sysconfdir}/kamailio/kamailio.cfg
+%config(noreplace) %{_sysconfdir}/kamailio/kamailio-local.cfg
 %config(noreplace) %{_sysconfdir}/kamailio/kamctlrc
 %config(noreplace) %{_sysconfdir}/kamailio/pi_framework.xml
 %config(noreplace) %{_sysconfdir}/kamailio/tls.cfg

_______________________________________________
Kamailio - Development Mailing List -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the 
sender!

Reply via email to