[Freeswitch-users] Proxy traffic security

Antonio potxoka at gmail.com
Fri Jun 10 13:37:49 MSD 2011


Hi,

Thank you very much for the reply, I will look at this solution.

Best regards
Anto

El 09/06/11 16:17, Steven Ayre escribió:
> You can create an ACL listing proxy IPs then set the proxy-acl 
> parameter on the SIP profile.call
>
> If your proxy can add a X-AUTH-IP header to the INVITE containing the 
> caller's IP then FS will use that IP to check against ACLs instead of 
> the IP received from, if the IP received from is on the proxy ACL. 
> That way you can still authenticate callers with ACLs behind a proxy, 
> although you're trusting your proxy to set that header correctly. The 
> proxy-acl setting means only your proxy can set the X-AUTH-IP header, 
> it'll be ignored on calls from any other IP.
>
> -Steve




More information about the FreeSWITCH-users mailing list