Hi David,<div><br></div><div>the calls are coming in on port 5060, so I'm assuming it's triggering the internal profile(?) and as mentioned in my email, we have the acl applied in the internal.xml file. Yet we see calls from all sorts of IPs. Anything else we need to look at?</div>
<div><br></div><div>Thanks</div><div>RR<br><br><div class="gmail_quote">On Mon, May 24, 2010 at 6:26 PM, David Ponzone <span dir="ltr"><<a href="mailto:david.ponzone@gmail.com">david.ponzone@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div style="word-wrap:break-word">Well you need to put the ACL in the SIP Profile your providers are sending calls to.<div>
By default, it's port 5080 for external and port 5060 for internal.</div><div><br><div> <span style="border-collapse:separate;color:rgb(0, 0, 0);font-family:Helvetica;font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><div style="word-wrap:break-word">
<span style="border-collapse:separate;color:rgb(0, 0, 0);font-family:Helvetica;font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><div style="word-wrap:break-word">
<div><font face="'Helvetica Neue'"><font color="#1C00FF">David Ponzone </font><font color="#000000" size="3"><span style="font-size:12px">Direction Technique</span></font></font></div><div><font face="'Helvetica Neue'"><font size="3"><span style="font-size:13px">email: <a href="mailto:david.ponzone@ipeva.fr" target="_blank">david.ponzone@ipeva.fr</a></span></font></font></div>
<div><font face="'Helvetica Neue'"><font size="3"><span style="font-size:13px">tel: 01 74 03 18 97</span></font></font></div><div><font face="'Helvetica Neue'"><font size="3"><span style="font-size:13px">gsm: 06 66 98 76 34</span></font></font></div>
<div><font face="'Helvetica Neue'"><br></font></div><div><font color="#1C00FF" face="'Helvetica Neue'">Service Client<span> </span></font><font face="'Helvetica Neue'"><font color="#FF0000">IP</font></font><font color="#1C00FF" face="'Helvetica Neue'">eva</font></div>
<div><font color="#1C00FF" face="'Helvetica Neue'"><span style="color:rgb(0, 0, 0);font-family:Helvetica"><div><font face="'Helvetica Neue'"><font size="3"><span style="font-size:13px">tel: 0811 46 26 26</span></font></font></div>
<div><font face="'Helvetica Neue'" size="3"><span style="font-size:13px"><div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;color:rgb(0, 34, 243)"><span style="text-decoration:underline"><a>www.ipeva.fr</a></span><span style="color:rgb(101, 104, 149)"> - <span style="color:rgb(0, 34, 243);text-decoration:underline"><a>www.ipeva-studio.com</a></span></span></div>
<div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;color:rgb(0, 34, 243)"><span style="text-decoration:underline"><br></span></div><div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;color:rgb(0, 34, 243)">
<span><div style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;text-align:justify;color:rgb(192, 192, 192)"><i>Ce message et toutes les pièces jointes sont confidentiels et établis à l'intention exclusive de ses destinataires. Toute utilisation ou diffusion non autorisée est interdite. Tout message électronique est susceptible d'altération. </i><b><i>IPeva</i></b><i> décline toute responsabilité au titre de ce message s'il a été altéré, déformé ou falsifié. Si vous n'êtes pas destinataire de ce message, merci de le détruire immédiatement et d'avertir l'expéditeur.</i></div>
<div style="text-decoration:underline;text-align:justify"><font color="#C0C0C0"><i><br></i></font></div></span></div></span></font></div></span></font></div></div></span><br></div></span><br> </div><br><div><div>Le 24/05/2010 à 22:45, RR a écrit :</div>
<br><blockquote type="cite"><div><div></div><div class="h5"><span style="font-family:arial, sans-serif;font-size:13px;border-collapse:collapse">Hello List,<div><br></div><div>I have tried to read as much as I could and try out a bunch of things but it doesn't seem to be working. The scenario is that we have a FS setup as a call distributor to our internal SIP servers. The calls come into the FS when people call any of the 6000 or so DIDs we own. These DIDs are through various providers who's IP addresses we know (obviously). I want to receive / process only calls from these external IP addresses and nothing else. So I did the following in acl.conf.xml file</div>
<div><br></div><div><div> <list name="DIDProviders" default="deny"></div><div> <node type="allow" cidr="64.XXX.XXX.XXX/32"/></div><div> <node type="allow" cidr="67.XXX.XXX.XXX/30"/></div>
<div> etc...</div><div> </list></div><div><br></div><div>then I went into the $FSHOME/conf/sip_profiles/internal.xml and did the following:</div><div><br></div><div><param name="apply-inbound-acl" value="DIDProviders"/></div>
<div><br></div><div>but I still keep seeing calls from other IPs that are not in the "DIDProviders" list getting through. </div><div><br></div><div>What else do I need to do to prevent this? Should this not be in internal.xml but in external.xml?</div>
<div><br></div><div>TIA</div><div>\RR</div></div></span></div></div> _______________________________________________<br>FreeSWITCH-users mailing list<br><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br></div></div><br>_______________________________________________<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br></div>