VoIP Mailing List Archives
Mailing list archives for the VoIP community |
|
View previous topic :: View next topic |
Author |
Message |
gregor at infomedia.si Guest
|
Posted: Tue Jan 03, 2023 4:03 am Post subject: [Freeswitch-users] Strange ACL behavior |
|
|
I have defined ACL with IPs and if I test IP in CLI with acl xxx.xxx.xxx.xxx aclname, I get true. But when a call is made from this IP, it doesn't get authenticated.
Any ideas why?
BR, Gregor |
|
Back to top |
|
![](templates/subSilver/images/spacer.gif) |
gregor at infomedia.si Guest
|
Posted: Tue Jan 03, 2023 9:10 am Post subject: [Freeswitch-users] Strange ACL behavior |
|
|
Only difference between IPs that are correctly authenticated and this one is that for non working IP I get in log:
fc740b4d-d48d-41c9-b06d-75cc8f23a833 2023-01-02 15:09:48.685609 97.43% [INFO] sofia.c:10462 sofia/external/xxxxxxxxx@xxx.xxx.xxx.186receiving invite from xxx.xxx.xxx.186:5060
there is external instead of internal. One of our gateway is registered to similar IP. For example: non authenticated IP is: xxx.xxx.xxx.186 and gateways is connected to xxx.xxx.xxx.190
Since it is the same subdomain, is it possible that FS thinks that this is from external?
BR, Gregor
On Tue, 3 Jan 2023 at 09:50, Gregor Nanger <gregor@infomedia.si (gregor@infomedia.si)> wrote:
Quote: | I have defined ACL with IPs and if I test IP in CLI with acl xxx.xxx.xxx.xxx aclname, I get true. But when a call is made from this IP, it doesn't get authenticated.
Any ideas why?
BR, Gregor
|
--
Gregor Nanger
CTO
t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485
• Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia
• www.infomedia.si |
|
Back to top |
|
![](templates/subSilver/images/spacer.gif) |
brian at freeswitch.com Guest
|
|
Back to top |
|
![](templates/subSilver/images/spacer.gif) |
gregor at infomedia.si Guest
|
Posted: Wed Jan 04, 2023 6:01 am Post subject: [Freeswitch-users] Strange ACL behavior |
|
|
Well, I double checked. And if I test in CLI with acl it works ok.
Could it be, that FS takes this IP as external as similar IP (same subnet) is used in gateway to register trunk? And since it is external there is no apply_inbound_acl on this profile.
On Wed, 4 Jan 2023 at 02:48, Brian West <brian@freeswitch.com (brian@freeswitch.com)> wrote:
--
Gregor Nanger
CTO
t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485
• Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia
• www.infomedia.si |
|
Back to top |
|
![](templates/subSilver/images/spacer.gif) |
brian at freeswitch.com Guest
|
|
Back to top |
|
![](templates/subSilver/images/spacer.gif) |
gregor at infomedia.si Guest
|
Posted: Wed Jan 04, 2023 5:26 pm Post subject: [Freeswitch-users] Strange ACL behavior |
|
|
No, you've made a good job. I overlooked that invite is coming to port 5080. Although that I lost hours looking at it.
Thank you for your time.
/g
On Wed, 4 Jan 2023 at 18:55, Brian West <brian@freeswitch.com (brian@freeswitch.com)> wrote:
|
|
Back to top |
|
![](templates/subSilver/images/spacer.gif) |
brian at freeswitch.com Guest
|
|
Back to top |
|
![](templates/subSilver/images/spacer.gif) |
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|