You can create an ACL listing proxy IPs then set the proxy-acl parameter on the SIP profile.call<br><br>If your proxy can add a X-AUTH-IP header to the INVITE containing the caller's IP then FS will use that IP to check against ACLs instead of the IP received from, if the IP received from is on the proxy ACL. That way you can still authenticate callers with ACLs behind a proxy, although you're trusting your proxy to set that header correctly. The proxy-acl setting means only your proxy can set the X-AUTH-IP header, it'll be ignored on calls from any other IP.<br>
<br>-Steve<br><br><br><div class="gmail_quote">On 8 June 2011 23:13, Antonio <span dir="ltr"><<a href="mailto:potxoka@gmail.com">potxoka@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hello<br>
<br>
I have a FreeSwitch configured as a gateway, the proxy makes the user<br>
authentication and other functions. All servers have public ip's, and I<br>
have doubts to security. I had thought to put the proxy ip's in acl. Is<br>
it safe this scenario? Can it be improved? Should we also put the sip<br>
providers? Thanks.<br>
<br>
Greetings<br>
<br>
_______________________________________________<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</blockquote></div><br><div style="visibility: hidden; left: -5000px; position: absolute; z-index: 9999; padding: 0px; margin-left: 0px; margin-top: 0px; overflow: hidden; word-wrap: break-word; color: black; font-size: 10px; text-align: left; line-height: 130%;" id="avg_ls_inline_popup">
</div>