[Freeswitch-users] Restrict SIP registration

[Steven Ayre]

Remember that the User-Agent can be changed by the caller, they can send
anything they choose. Don't authenticate on it alone.


On 4 December 2013 11:46, Peter Steinbach <lists at telefaks.de> wrote:

>  Hello Andrew,
>
> if you manage your SIP registrations via xml_curl instead of a static
> dialplan, you have the variable "sip_user_agent" (e.g.
> sip_user_agent=Aastra%206739i/3.2.2.2044) available in the params, and then
> you can restrict the registrations based on the content in this variable.
>
>
> Best regards
> Peter
>
>
>
> On 12/04/13 10:33, Andrew Cassidy wrote:
>
> IPtables string matching is probably the easiest way (assuming no tls on
> these clients)
>
>
> http://www.netfilter.org/documentation/HOWTO/netfilter-extensions-HOWTO-3.html#ss3.18
>
>
> On 4 December 2013 07:52, mehroz <mehroz.ashraf85 at gmail.com> wrote:
>
>> Hi All,
>>
>> We already know that we can allow/deny a SIP end point to get registered
>> to
>> FreeSWITCH on the basis of IP , but what about if we want it to filter
>> "User-Agent" field in REGISTER packets to be the key for registration.
>>
>> Since , we can also use TLS based registration but some soft phones does
>> not
>> have that capability. In that case , is there any way of passing only
>> specified USER AGENT SIP client?
>>
>> Thanks
>>
>>
>>
>> --
>> View this message in context:
>> http://freeswitch-users.2379917.n2.nabble.com/Restrict-SIP-registration-tp7596017.html
>> Sent from the freeswitch-users mailing list archive at Nabble.com.
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>
>
>  --
> *Andrew Cassidy BSc (Hons) MBCS SSCA*
> Managing Director
>
>
> *T <info at cassidywebservices.co.uk> *03300 100 960  *F
> <info at cassidywebservices.co.uk> *03300 100 961
> *E <info at cassidywebservices.co.uk> *andrew at cassidywebservices.co.uk
> *W <info at cassidywebservices.co.uk> *www.cassidywebservices.co.uk
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:consulting at freeswitch.orghttp://www.freeswitchsolutions.com
>
> FreeSWITCH-powered IP PBX: The CudaTel Communication Server
>
> Official FreeSWITCH Siteshttp://www.freeswitch.orghttp://wiki.freeswitch.orghttp://www.cluecon.com
>
> FreeSWITCH-users mailing listFreeSWITCH-users at lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org
>
>
>
> --
> With kind regards
> Peter Steinbach
>
> Telefaks Services GmbHmailto:lists <lists> (att) telefaks.de
> Internet: www.telefaks.de
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20131204/d0b329e5/attachment-0001.html