[Freeswitch-users] ACL not working

[Diego Viola]

If I turn internal_auth_calls to false it blocks... but why I can't do it
with internal_auth_calls=true?

On Tue, Apr 21, 2009 at 8:45 PM, Diego Viola <diego.viola at gmail.com> wrote:

> This alone should be able to block inbound calls right?:
>
> internal.xml:
>
>     <param name="apply-inbound-acl" value="domains"/>
>
> acl.conf.xml:
>
>     <list name="domains" default="deny">
>       <node type="allow" domain="$${domain}"/>
>     </list>
>
> vars.xml:
>
>   <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/>
>
>
>
> On Tue, Apr 21, 2009 at 8:04 PM, Diego Viola <diego.viola at gmail.com>wrote:
>
>> I was just trying to deny everything, and I got confused at what the
>> "default" in the <list> made, but I got it now.
>>
>> So I have     <list name="domains" default="deny"> and that alone denies
>> the registration, which is what I want, but I can still make calls.
>>
>> And I have this:     <param name="apply-inbound-acl" value="domains"/>
>>
>> Shouldn't the "domains" which is defaulted to "deny" block the inbound
>> calls?
>>
>> Thanks, I hope this doesn't make anyone nervous, just trying to learn :)
>>
>> Regards,
>>
>> Diego
>>
>>
>>
>>
>> On Tue, Apr 21, 2009 at 5:34 PM, Michael Collins <msc at freeswitch.org>wrote:
>>
>>>
>>>
>>> On Tue, Apr 21, 2009 at 1:15 PM, Diego Viola <diego.viola at gmail.com>wrote:
>>>
>>>> Nope, I just wanted to allow 1 ip, 192.168.0.100.
>>>
>>>
>>> Then why have a deny for this address? Don't you want something like
>>> this?
>>> <node type="allow" cidr="192.168.0.100/32"/>
>>>  -MC
>>>
>>>
>>>>
>>>>
>>>> Diego
>>>>
>>>> On Tue, Apr 21, 2009 at 9:27 AM, Brian West <brian at freeswitch.org>wrote:
>>>>
>>>>> Do you want to allow these IP ranges?
>>>>> /b
>>>>>
>>>>> On Apr 21, 2009, at 6:08 AM, Diego Viola wrote:
>>>>>
>>>>>         <node type="deny" cidr="192.168.0.100/32"/>
>>>>>         <node type="deny" cidr="192.168.0.0/24"/>
>>>>>
>>>>>
>>>>>   Brian West
>>>>> brian at freeswitch.org
>>>>>
>>>>> -- Meet us at ClueCon!  http://www.cluecon.com
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> Freeswitch-users mailing list
>>>>> Freeswitch-users at lists.freeswitch.org
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>> UNSUBSCRIBE:
>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>> http://www.freeswitch.org
>>>>>
>>>>>
>>>>
>>>> _______________________________________________
>>>> Freeswitch-users mailing list
>>>> Freeswitch-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:
>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>> http://www.freeswitch.org
>>>>
>>>>
>>>
>>> _______________________________________________
>>> Freeswitch-users mailing list
>>> Freeswitch-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20090421/8a68fea3/attachment-0002.html