[Freeswitch-users] Filtering UA's IP

[jpablolorenzetti at hotmail.com]

Thank you very much.


Sent by Outlook for Android





On Sat, Sep 26, 2015 at 1:49 AM -0700, "Giovanni Maruzzelli" <gmaruzz at gmail.com> wrote:
On Sep 26, 2015 9:08 AM, "Juan Pablo L." <jpablolorenzetti at hotmail.com>
wrote:
>
> Re-reading the instructions it seems that i misunderstood, and it seems
that it is possible to use lua
> on a particular profile without affecting the other profiles by
manipulating the parameters
> <param name="dialplan" value="XML"/>
> <param name="context" value="default"/>
>
> If i change those parameters i  can make this particular profile use lua
for user lookups/etc, and leave the other
> profiles using XML statically.
>
> is this what you meant by the freeswitch only solution right ?

Yep

About proxy servers, you can use kamailio or opensips, they have geoip
modules.

-giovanni

>
> ________________________________
> From: jpablolorenzetti at hotmail.com
> To: freeswitch-users at lists.freeswitch.org
> Date: Sat, 26 Sep 2015 06:47:31 +0000
>
> Subject: Re: [Freeswitch-users] Filtering UA's IP
>
> Giovanni, thank  you for your prompt answers,
>
> 1. do you have any suggestion for the proxy solution you mention ? what
proxy can i use ?
> 2. for the freeswitch only solution, any way to make lua capture the
registration only for this particular profile? as oppossed to capture all
registration for
> all profiles ?
>
> thank you!
> ________________________________
> Date: Sat, 26 Sep 2015 08:23:25 +0200
> From: gmaruzz at gmail.com
> To: freeswitch-users at lists.freeswitch.org
> Subject: Re: [Freeswitch-users] Filtering UA's IP
>
> You can.put a sip proxy in front of FreeSWITCH. You can also have the
proxy running only on the address-port of the profile you want to protect.
>
> Otoh, for a freeswitch only solution, lua is very much performing, and a
query on indexed table for geoip is not much taxing, and has to be made
anyway (eg, in proxy case too).
>
> sent from my mobile,
> Giovanni Maruzzelli
> cell: +39 347 266 56 18
>
> On Sep 26, 2015 8:12 AM, "Juan Pablo L." <jpablolorenzetti at hotmail.com>
wrote:
>>
>> Hi, is there any way on freeswitch to forbid registration (or any
connection) from certain regions in the world ? ..
>> what i need to accomplish is to prevent people from connecting from my
same country as we have a voip service
>> that is supposed to be accessed only when you are out of the country so
i need to validate the UA's ip when registering.
>> I can not use a router or FW or any other thing in front of the
freeswitch because the same freeswitch  also serves
>> other services that do not have this  restriction. This restriction only
affects users in one profile only.
>> I m aware that i could capture the registrations using a lua script and
i guess from there i could consult
>> a GeoIP database etc etc but that affects all profiles and not only this
particular profile of this particular service
>> and that could be a performance hit for the service as a whole so i
would like to avoid that.
>>
>> thank you!
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>
>
> _________________________________________________________________________
Professional FreeSWITCH Consulting Services: consulting at freeswitch.org
http://www.freeswitchsolutions.com Official FreeSWITCH Sites
http://www.freeswitch.org http://confluence.freeswitch.org
http://www.cluecon.com FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:
http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
>
> _________________________________________________________________________
Professional FreeSWITCH Consulting Services: consulting at freeswitch.org
http://www.freeswitchsolutions.com Official FreeSWITCH Sites
http://www.freeswitch.org http://confluence.freeswitch.org
http://www.cluecon.com FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:
http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150926/91503421/attachment-0001.html 
-------------- next part --------------
_________________________________________________________________________
Professional FreeSWITCH Consulting Services: 
consulting at freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org