<![CDATA[FOP2 listen security hole?]]>I setup FOP2 so a manager could listen to her sales agents. It works, as expected, but if she clicks on an agent who is not on call (box is green) and then she hits listen, we end up listening on a seemingly random phone conversation in the system.

I have the lastest version of FOP2, PBX in A Flash version 1.6 with 2.8 FreePBX.

Any ideas on how to fix it?

Bob Roswell
<!-- e --><a href="mailto:broswell@syssrc.com">broswell@syssrc.com</a><!-- e -->
(410) 771-5544 ext 4336

]]>http://localhost:4567/topic/555/fop2-listen-security-holeRSS for NodeTue, 27 Oct 2026 14:25:44 GMTThu, 28 Oct 2010 00:27:15 GMT60<![CDATA[Reply to FOP2 listen security hole? on Thu, 28 Oct 2010 03:07:41 GMT]]>It is not a security hole per se, but the actual behavior of chanspy. You can also hop on calls, etc. The next fop2 release will have the option to pass parameters to chanspy, so you can previously set spygroup for particular extensions and limit the scope to just that group. Or use the e() option for Asterisk 1.6 to enforce channel names.

]]>http://localhost:4567/post/2425http://localhost:4567/post/2425Thu, 28 Oct 2010 03:07:41 GMT