<div dir="ltr">There is a separate apply-inbound-acl and apply-register-acl<br><br>And yest the point of apply-inbound-acl is that all matches from that ip will be allowed in blindly.<br>it's the opposite of doing Digest auth.<br>
<br>There is still a way to associate an a ip range with a user so when you are let in over<br>acl it will still set all the user settings. it's the special domain acl that was recently added that <br>scans each user in your directory for a cidr= attr and adds it to the domains acl<br>
then you can apply-inbound-acl=domains<br><br>It is possible to get asterisk to register to FS with normal digest auth it's just a little tricky because asterisk<br>does not like domain based authentication which is actually the normal way to do it. They hacked in support for it<br>
way late in the development timeline and it's kinda hard to figure out, I still forget how to do it sometimes.<br>it's something to do with a special syntax in the register line.<br><br><br><br><br><br><br><div class="gmail_quote">
On Tue, Sep 30, 2008 at 2:41 AM, Noah Silverman <span dir="ltr"><<a href="mailto:noah@allresearch.com">noah@allresearch.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi,<br>
<br>
As some of you are probably aware, I've had a really hard time getting<br>
asterisk to work with FS.<br>
<br>
The effective_caller_id_number and the accountcode were not getting<br>
logged or passed through on outgoing calls.<br>
<br>
I finally solved the problem, but attribute it to some unexpected<br>
behavior of the acl setting. I'm curious as to whether this is the<br>
intended behavior, or a bug.<br>
<br>
In my sip profile, I had apply-inbound-acl set to a list that<br>
contained the IP of my asterisk box. Apparently, when this happens,<br>
FS was allowing ANY call from my asterisk box without registration.<br>
Subsequently, since FS was just blindly accepting the call with no<br>
registration, it didn't match anything in the directory and no<br>
accountcode or caller-id was set.<br>
<br>
By simply removing the inbound-acl setting, I was able to have<br>
everything working perfectly.<br>
<br>
My understanding was that the goal of the inbound-acl was to limit<br>
which IP FS would accept SIP requests from. I was not aware that it<br>
would then accept any call blindly without any associated user.<br>
Interesting....<br>
<br>
If any of the FS developers are interested in the exact configuration<br>
file that I'm using, please contact me directly and I'll forward the<br>
file to you.<br>
<br>
-Noah<br>
<br>
_______________________________________________<br>
Freeswitch-users mailing list<br>
<a href="mailto:Freeswitch-users@lists.freeswitch.org">Freeswitch-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</blockquote></div><br><br clear="all"><br>-- <br>Anthony Minessale II<br><br>FreeSWITCH <a href="http://www.freeswitch.org/">http://www.freeswitch.org/</a><br>ClueCon <a href="http://www.cluecon.com/">http://www.cluecon.com/</a><br>
<br>AIM: anthm<br><a href="mailto:MSN%3Aanthony_minessale@hotmail.com">MSN:anthony_minessale@hotmail.com</a><br>GTALK/JABBER/<a href="mailto:PAYPAL%3Aanthony.minessale@gmail.com">PAYPAL:anthony.minessale@gmail.com</a><br>
IRC: <a href="http://irc.freenode.net">irc.freenode.net</a> #freeswitch<br><br>FreeSWITCH Developer Conference<br><a href="mailto:sip%3A888@conference.freeswitch.org">sip:888@conference.freeswitch.org</a><br><a href="http://iax:guest@conference.freeswitch.org/888">iax:guest@conference.freeswitch.org/888</a><br>
<a href="mailto:googletalk%3Aconf%2B888@conference.freeswitch.org">googletalk:conf+888@conference.freeswitch.org</a><br>pstn:213-799-1400<br>
</div>