[Freeswitch-users] Checking authorisation on external profile

[Russell Treleaven]

Have a look at this
https://freeswitch.org/confluence/display/FREESWITCH/mod_dptools:+respond

On Fri, May 13, 2016 at 10:34 AM, Artur Mega <findmeinwland at gmail.com>
wrote:

> Sergey, kamalio is good, but we wanted to use only freeswitch... We tried
> to play with directory, but it doesnt help (we dynamically generated
> directory with xml curl)
>
> 2016-05-12 20:20 GMT+05:00 Sergey Safarov <s.safarov at gmail.com>:
>
>> You requred to install sip proxy (exmple Kamailio) to route call between
>> two freeswith profiles.
>> Call originated from example.com domain always routed to internal profile
>> Call route from non example.com. domain to example.com.domain routed to
>> external profile
>> All other call must be blocked.
>>
>> чт, 12 мая 2016 г. в 16:44, Artur Mega <findmeinwland at gmail.com>:
>>
>>> I have DNS SRV record (external profile)
>>> _sip._udp.example.com has SRV record 10 100 5080 sip.example.com.
>>>
>>> None authentication calls from other server to sip:1001 at example.com work
>>> fine.
>>> Calls from phones (uses DNS SRV _sip._udp.) with authentication
>>> (incoming/outgoing) not work.
>>>
>>> Then I set SRV DNS record (internal profile)
>>> _sip._udp.example.com has SRV record 10 100 5060 sip.example.com.
>>>
>>> Calls from phones with authentication work.
>>> Sip uri calls without authentication not work.
>>>
>>> I need use one DNS SRV record to all calls.
>>>
>>> 2016-05-07 1:00 GMT+05:00 Michael Jerris <mike at jerris.com>:
>>>
>>>> I suppose you could "auth" all calls, but force context for ones that
>>>> fail via xml curl, but you couldn't not auth calls that are going to fail
>>>> auth before you challenge them, as computers are not psychic knowing the
>>>> future
>>>>
>>>>
>>>> On Friday, May 6, 2016, Artur Mega <findmeinwland at gmail.com> wrote:
>>>>
>>>>> Thanks, Michael for reply
>>>>>
>>>>> Look, let's assume that call will come to internal profile (where
>>>>> authorisation is required). But then unauthorised call wont reach the
>>>>> dialplan, becouse it's not authorised... But i don't wanna drop such call,
>>>>> it must be allowed to go further to special context in dialplan. Desired
>>>>> algorythm is like:
>>>>>
>>>>>     IF incoming call is authenticated THEN forward it to one dialplan
>>>>> ELSE forward it to another dialplan (don't drop) END.
>>>>>
>>>>> Who knows how can it be solved?
>>>>>
>>>>> 2016-05-04 20:14 GMT+05:00 Michael Jerris <mike at jerris.com>:
>>>>>
>>>>>> If a profile doesn't perform authorization, as is the case in the
>>>>>> default external profile, no calls are authorized as we do not attempt to
>>>>>> authorize them.  You can't know if a call is authorized without challenging
>>>>>> them.
>>>>>>
>>>>>>
>>>>>> On May 4, 2016, at 6:40 AM, Artur Mega <findmeinwland at gmail.com>
>>>>>> wrote:
>>>>>>
>>>>>> Good day,
>>>>>>
>>>>>> How can I check incoming call to the External profile? Theoretically,
>>>>>> both authorised and unauthorised users can call via external profile. Tried
>>>>>> to detect authorised users with ${sip_authorised} variable, but it doesn't
>>>>>> help. :(
>>>>>>
>>>>>> --
>>>>>>
>>>>>> Arthur
>>>>>>
>>>>>> _________________________________________________________________________
>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>> consulting at freeswitch.org
>>>>>> http://www.freeswitchsolutions.com
>>>>>>
>>>>>> Official FreeSWITCH Sites
>>>>>> http://www.freeswitch.org
>>>>>> http://confluence.freeswitch.org
>>>>>> http://www.cluecon.com
>>>>>>
>>>>>> FreeSWITCH-users mailing list
>>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>> UNSUBSCRIBE:
>>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>>> http://www.freeswitch.org
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> _________________________________________________________________________
>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>> consulting at freeswitch.org
>>>>>> http://www.freeswitchsolutions.com
>>>>>>
>>>>>> Official FreeSWITCH Sites
>>>>>> http://www.freeswitch.org
>>>>>> http://confluence.freeswitch.org
>>>>>> http://www.cluecon.com
>>>>>>
>>>>>> FreeSWITCH-users mailing list
>>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>> UNSUBSCRIBE:
>>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>>> http://www.freeswitch.org
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>>
>>>>> Arthur
>>>>>
>>>>
>>>>
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:
>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>> http://www.freeswitch.org
>>>>
>>>
>>>
>>>
>>> --
>>>
>>> Arthur
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>
>
> --
>
> Arthur
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20160513/36b93933/attachment.html