monast

[Tzafrir Cohen]

On Sun, Nov 23, 2008 at 10:07:57PM +0200, Tzafrir Cohen wrote:
> Hi
> 
> I heard some good things about monast:
> 
> http://monast.sourceforge.net/ 
> "The Asterisk Monitor Web Panel
> 
> Monast is a monitoring interface which acts as an operator panel for
> Asterisk to display extensions status and calls details going through
> your IP-PBX. It uses reverse AJAX calls, PHP and Python to originate, to
> transfer and to hangup calls, to manage queues and conference rooms.
> Licenced under BSD"
> 
> It seems to be progressing fast recently. So I decided to give it a
> small test.

I later updated the package to 0.7 that included basic daemonizing
support. The init.d script now works. The package is now rather usable.
I decided it was a good idea to upload it to pkg-voip for further work.

Upon further reivew I noticed that the daemon allows unauthenticated
connections from anywhere, and that allows sending any command through
the manager interface to Asterisk.


The upstream author quickly responded by changing the default bind
address from a hard-wired 0.0.0.0 to 12.0.0.1, and reading it from the
config file. This closes the huge issue. But we're still left with the
issue of local users.

The author did not sound willing to tackle that issue. I'm not usre he
sees it as much of an issue. As I have no immediate need for it now,
I'll just drop it. If anybody else wants to take it further: feel free.

-- 
               Tzafrir Cohen
icq#16849755              jabber:tzafrir.cohen at xorcom.com
+972-50-7952406           mailto:tzafrir.cohen at xorcom.com
http://www.xorcom.com  iax:guest at local.xorcom.com/tzafrir