[Freeswitch-users] ACL for ESL issue ?

[Muhammad Naseer Bhatti]

You need to create a new ACL in acl.conf.xml and set that ACL in event_socket so you will be allowed to connect. loopback.auto would allow connections only from 127.0.0.1.

Thank you,
—
Muhammad Naseer Bhatti



> On Sep 11, 2015, at 2:58 PM, Pavel <my.post at hotmail.com> wrote:
> 
> Hello,
>  I was trying to enable esl connections from outside of fs host. To do so I've followed https://wiki.freeswitch.org/wiki/Mod_event_socket#Configuration <https://wiki.freeswitch.org/wiki/Mod_event_socket#Configuration> and changed default event_socket.conf.xml
> from:
> 
> <configuration name="event_socket.conf" description="Socket Client">
>   <settings>
>     <param name="nat-map" value="false"/>
>     <param name="listen-ip" value="::"/>
>     <param name="listen-port" value="8021"/>
>     <param name="password" value="ClueCon"/>
>   </settings>
> </configuration>
> 
> to:
> 
> <configuration name="event_socket.conf" description="Socket Client">
>   <settings>
>     <param name="nat-map" value="false"/>
>     <param name="listen-ip" value="0.0.0.0"/>
>     <param name="listen-port" value="8021"/>
>     <param name="password" value="ClueCon"/>
>   </settings>
> </configuration>
> 
> and issued: 
> reload mod_event_socket.
> 
> Trying to telnet to fs host on port 8021 I observe:
> 
> Content-Type: text/rude-rejection
> Content-Length: 24
> 
> Access Denied, go away.
> Content-Type: text/disconnect-notice
> Content-Length: 67
> 
> Disconnected, goodbye.
> See you at ClueCon! http://www.cluecon.com/ <http://www.cluecon.com/>
> Connection closed by foreign host.
> 
> And in fs log i can see the following:
> 
> mod_event_socket.c:2603 IP "someiphere" Rejected by acl "loopback.auto"
> 
> But as far as I understand the event_socket.conf.xml doesn't mention any ACL set up against ESL connection ?
> Would someone please be so kind to point what am I missing ?
> Thanks.
> Regards,
> Pavel.
> 
> 
> 
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services: 
> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
> 
> Official FreeSWITCH Sites
> http://www.freeswitch.org <http://www.freeswitch.org/>
> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
> http://www.cluecon.com <http://www.cluecon.com/>
> 
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
> http://www.freeswitch.org <http://www.freeswitch.org/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150911/36a38f78/attachment.html