[Freeswitch-users] ACL for ESL issue ?

Pavel my.post at hotmail.com
Mon Sep 14 14:58:57 MSD 2015


Muhammad,
Thanks for your reply. I suppose that Steven's answer is more on topic of my question.
Regards,
Pavel.From: nbhatti at gmail.com
Date: Fri, 11 Sep 2015 20:16:51 +0300
To: freeswitch-users at lists.freeswitch.org
Subject: Re: [Freeswitch-users] ACL for ESL issue ?


You need to create a new ACL in acl.conf.xml and set that ACL in event_socket so you will be allowed to connect. loopback.auto would allow connections only from 127.0.0.1.

Thank you,—Muhammad Naseer Bhatti



On Sep 11, 2015, at 2:58 PM, Pavel <my.post at hotmail.com> wrote:Hello,
 I was trying to enable esl connections from outside of fs host. To do so I've followed https://wiki.freeswitch.org/wiki/Mod_event_socket#Configuration and changed default event_socket.conf.xml
from:
<configuration name="event_socket.conf" description="Socket Client">  <settings>    <param name="nat-map" value="false"/>    <param name="listen-ip" value="::"/>    <param name="listen-port" value="8021"/>    <param name="password" value="ClueCon"/>  </settings></configuration>
to:
<configuration name="event_socket.conf" description="Socket Client">  <settings>    <param name="nat-map" value="false"/>    <param name="listen-ip" value="0.0.0.0"/>    <param name="listen-port" value="8021"/>    <param name="password" value="ClueCon"/>  </settings></configuration>
and issued: reload mod_event_socket.

Trying to telnet to fs host on port 8021 I observe:

Content-Type: text/rude-rejectionContent-Length: 24
Access Denied, go away.Content-Type: text/disconnect-noticeContent-Length: 67
Disconnected, goodbye.See you at ClueCon! http://www.cluecon.com/Connection closed by foreign host.
And in fs log i can see the following:

mod_event_socket.c:2603 IP "someiphere" Rejected by acl "loopback.auto"

But as far as I understand the event_socket.conf.xml doesn't mention any ACL set up against ESL connection ?Would someone please be so kind to point what am I missing ?Thanks.Regards,Pavel.


_________________________________________________________________________Professional FreeSWITCH Consulting Services: consulting at freeswitch.orghttp://www.freeswitchsolutions.comOfficial FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.comFreeSWITCH-users mailing listFreeSWITCH-users at lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-usersUNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services: 
consulting at freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150914/05fa5ff6/attachment-0001.html 


Join us at ClueCon 2016 Aug 8-12, 2016
More information about the FreeSWITCH-users mailing list