<br><br><div class="gmail_quote">On Mon, May 24, 2010 at 1:45 PM, RR <span dir="ltr"><<a href="mailto:ranjtech@gmail.com">ranjtech@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<span style="font-family: arial,sans-serif; font-size: 13px; border-collapse: collapse;">Hello List,<div><br></div><div>I have tried to read as much as I could and try out a bunch of things but it doesn't seem to be working. The scenario is that we have a FS setup as a call distributor to our internal SIP servers. The calls come into the FS when people call any of the 6000 or so DIDs we own. These DIDs are through various providers who's IP addresses we know (obviously). I want to receive / process only calls from these external IP addresses and nothing else. So I did the following in acl.conf.xml file</div>
<div><br></div><div><div> <list name="DIDProviders" default="deny"></div><div> <node type="allow" cidr="64.XXX.XXX.XXX/32"/></div><div> <node type="allow" cidr="67.XXX.XXX.XXX/30"/></div>
<div> etc...</div><div> </list></div><div><br></div><div>then I went into the $FSHOME/conf/sip_profiles/internal.xml and did the following:</div><div><br></div><div><param name="apply-inbound-acl" value="DIDProviders"/></div>
<div><br></div><div>but I still keep seeing calls from other IPs that are not in the "DIDProviders" list getting through. </div><div><br></div><div>What else do I need to do to prevent this? Should this not be in internal.xml but in external.xml?</div>
</div></span></blockquote><div><br>I have to ask: did you do this at the fs_cli:<br>reloadacl reloadxml<br><br>Need to make sure that your ACLs got reloaded. If so, then the next step is to turn on full console debugging (which is on by default when using fs_cli) and try a call. Capture the complete log for a call and drop it in pastebin. Redact any private information and then paste the link in this thread. We'll take a look.<br>
<br>-MC<br> <br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><span style="font-family: arial,sans-serif; font-size: 13px; border-collapse: collapse;"><div>
<div><br></div><div>TIA</div><div>\RR</div></div></span>
<br>_______________________________________________<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br>