[Free-RTC] kamaillio script for federated communications

[johnc]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I've been interested for some time in federated secure communications
systems and in particular voice systems. I am a firm believer in the
right to privacy. I am appalled but not entirely surprised by the
latest revelations concerning PRISM.

I recently updated  Daniel-Constantin Mierla's:

http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour

for kamailio 4 + jitsi, see below:

https://www.johncahill.net/wiki/index.php/Skype_like_conferencing_System

This config allows for TLS+ZRTP encrypted calls to be made between
jitsi clients connected to different kamailio servers.

I would like some feedback on how to improve this config. I will flag
up some failings straight away:

* Inter-domain peer to peer presence sharing doesn't work. Only
intra-domain presence sharing.
* TLS is enforced crudely by an iptables based firewall only allowing
communications on port TCP 5061 TLS
* The config uses DNS to establish the transport available on the
remote proxy. It doesn't use DNSSEC to do this.

I will add any improvements to to my wiki and please feel free to cut
paste + share.

I would like to share working recipes in a similar way to that done by
Daniel Pocock and others on this list. Thanks, you work has inspired me.

Cheers,
John
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=DEhO
-----END PGP SIGNATURE-----