[Freeswitch-users] Filtering UA's IP

[Juan Pablo L.]

Thank you Steven, that is exactly what i m going to do, i was just confused but i m clear now how to make it work. i  appreciate your feedback.

From: steveayre at gmail.com
Date: Sat, 26 Sep 2015 20:54:50 +0100
To: freeswitch-users at lists.freeswitch.org
Subject: Re: [Freeswitch-users] Filtering UA's IP

"I can not use a router or FW or any other thing in front of the freeswitch because the same freeswitch  also serves other services that do not have this  restriction."

Could you configure the server to have another sofia profile on an additional IP address (or port if addresses are limited)?
You could then run the restricted service on that extra profile and use a firewall on that address/port (eg iptables) to restrict access to the relevant regions.
Since everything else is on another address/port that iptables wouldn't be restricting it wouldn't affect the other services on the same freeswitch instance.
On 26 September 2015 at 07:11, Juan Pablo L. <jpablolorenzetti at hotmail.com> wrote:



Hi, is there any way on freeswitch to forbid registration (or any connection) from certain regions in the world ? .. 
what i need to accomplish is to prevent people from connecting from my same country as we have a voip service
that is supposed to be accessed only when you are out of the country so i need to validate the UA's ip when registering.
I can not use a router or FW or any other thing in front of the freeswitch because the same freeswitch  also serves 
other services that do not have this  restriction. This restriction only affects users in one profile only. 
I m aware that i could capture the registrations using a lua script and i guess from there i could consult
a GeoIP database etc etc but that affects all profiles and not only this particular profile of this particular service
and that could be a performance hit for the service as a whole so i would like to avoid that.

thank you!
 		 	   		  

_________________________________________________________________________

Professional FreeSWITCH Consulting Services:

consulting at freeswitch.org

http://www.freeswitchsolutions.com



Official FreeSWITCH Sites

http://www.freeswitch.org

http://confluence.freeswitch.org

http://www.cluecon.com



FreeSWITCH-users mailing list

FreeSWITCH-users at lists.freeswitch.org

http://lists.freeswitch.org/mailman/listinfo/freeswitch-users

UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users

http://www.freeswitch.org



_________________________________________________________________________
Professional FreeSWITCH Consulting Services: 
consulting at freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150926/12c2a238/attachment.html