[Freeswitch-users] Checking authorisation on external profile

[Sergey Safarov]

You requred to install sip proxy (exmple Kamailio) to route call between
two freeswith profiles.
Call originated from example.com domain always routed to internal profile
Call route from non example.com. domain to example.com.domain routed to
external profile
All other call must be blocked.

чт, 12 мая 2016 г. в 16:44, Artur Mega <findmeinwland at gmail.com>:

> I have DNS SRV record (external profile)
> _sip._udp.example.com has SRV record 10 100 5080 sip.example.com.
>
> None authentication calls from other server to sip:1001 at example.com work
> fine.
> Calls from phones (uses DNS SRV _sip._udp.) with authentication
> (incoming/outgoing) not work.
>
> Then I set SRV DNS record (internal profile)
> _sip._udp.example.com has SRV record 10 100 5060 sip.example.com.
>
> Calls from phones with authentication work.
> Sip uri calls without authentication not work.
>
> I need use one DNS SRV record to all calls.
>
> 2016-05-07 1:00 GMT+05:00 Michael Jerris <mike at jerris.com>:
>
>> I suppose you could "auth" all calls, but force context for ones that
>> fail via xml curl, but you couldn't not auth calls that are going to fail
>> auth before you challenge them, as computers are not psychic knowing the
>> future
>>
>>
>> On Friday, May 6, 2016, Artur Mega <findmeinwland at gmail.com> wrote:
>>
>>> Thanks, Michael for reply
>>>
>>> Look, let's assume that call will come to internal profile (where
>>> authorisation is required). But then unauthorised call wont reach the
>>> dialplan, becouse it's not authorised... But i don't wanna drop such call,
>>> it must be allowed to go further to special context in dialplan. Desired
>>> algorythm is like:
>>>
>>>     IF incoming call is authenticated THEN forward it to one dialplan
>>> ELSE forward it to another dialplan (don't drop) END.
>>>
>>> Who knows how can it be solved?
>>>
>>> 2016-05-04 20:14 GMT+05:00 Michael Jerris <mike at jerris.com>:
>>>
>>>> If a profile doesn't perform authorization, as is the case in the
>>>> default external profile, no calls are authorized as we do not attempt to
>>>> authorize them.  You can't know if a call is authorized without challenging
>>>> them.
>>>>
>>>>
>>>> On May 4, 2016, at 6:40 AM, Artur Mega <findmeinwland at gmail.com> wrote:
>>>>
>>>> Good day,
>>>>
>>>> How can I check incoming call to the External profile? Theoretically,
>>>> both authorised and unauthorised users can call via external profile. Tried
>>>> to detect authorised users with ${sip_authorised} variable, but it doesn't
>>>> help. :(
>>>>
>>>> --
>>>>
>>>> Arthur
>>>>
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:
>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>> http://www.freeswitch.org
>>>>
>>>>
>>>>
>>>>
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:
>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>> http://www.freeswitch.org
>>>>
>>>
>>>
>>>
>>> --
>>>
>>> Arthur
>>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>
>
> --
>
> Arthur
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20160512/6ec29406/attachment.html