<HTML><HEAD></HEAD>
<BODY
style="WORD-WRAP: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space"
dir=ltr>
<DIV dir=ltr>
<DIV style="FONT-FAMILY: 'Calibri'; COLOR: #000000; FONT-SIZE: 12pt">
<DIV>Brian, thanks for the input, I have researched this exhaustively to be sure
I don’t. We ran an extensive search on the system and could not find this
IP address anywhere on the system, but yet they could make calls. This is
an IP address from russia, they hit the network for around $20k in October then
out of the blue they started being blocked, I am really worried they will find
another hole in the system, if there is indeed one.</DIV>
<DIV> </DIV>
<DIV>Darcy</DIV>
<DIV
style="FONT-STYLE: normal; DISPLAY: inline; FONT-FAMILY: 'Calibri'; COLOR: #000000; FONT-SIZE: small; FONT-WEIGHT: normal; TEXT-DECORATION: none">
<DIV style="FONT: 10pt tahoma">
<DIV> </DIV>
<DIV style="BACKGROUND: #f5f5f5">
<DIV style="font-color: black"><B>From:</B> <A title=brian@freeswitch.org
href="mailto:brian@freeswitch.org">Brian West</A> </DIV>
<DIV><B>Sent:</B> Friday, December 02, 2011 5:06 PM</DIV>
<DIV><B>To:</B> <A title=freeswitch-users@lists.freeswitch.org
href="mailto:freeswitch-users@lists.freeswitch.org">FreeSWITCH Users Help</A>
</DIV>
<DIV><B>Subject:</B> Re: [Freeswitch-users] acl validation</DIV></DIV></DIV>
<DIV> </DIV></DIV>
<DIV
style="FONT-STYLE: normal; DISPLAY: inline; FONT-FAMILY: 'Calibri'; COLOR: #000000; FONT-SIZE: small; FONT-WEIGHT: normal; TEXT-DECORATION: none">do
you have a cidr=91.212.226.30 tag on a user in your directory?
<DIV> </DIV>
<DIV>/b</DIV>
<DIV>
<DIV> </DIV>
<DIV>
<DIV>On Dec 2, 2011, at 4:01 PM, Darcy wrote:</DIV><BR
class=Apple-interchange-newline>
<BLOCKQUOTE type="cite"><SPAN
style="WIDOWS: 2; TEXT-TRANSFORM: none; TEXT-INDENT: 0px; BORDER-COLLAPSE: separate; FONT: medium helvetica; WHITE-SPACE: normal; ORPHANS: 2; LETTER-SPACING: normal; WORD-SPACING: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px"
class=Apple-style-span>Looking through my call log, I see the following item
in the log, this IP is not in the acl Domain List, it is not a
profile and it is not registered on the switch, Is there something I am
missing on this that needs to be set. These guys are attempting calls to
Jamaica.<BR><BR>2011-10-31 09:11:31.801420 [DEBUG] sofia.c:5798 IP
91.212.226.30 Approved by acl "domains[]". Access Granted.<BR><BR><list
name="domains"
default="deny"><BR>
<node type="allow" cidr="xxx.xxx.xx.xx/32"/><BR>I have 5 more entries
like so in this
switch.<BR>
etc.<BR>
</list></SPAN></BLOCKQUOTE></DIV>
<DIV> </DIV></DIV>
<P>
<HR>
_________________________________________________________________________<BR>Professional
FreeSWITCH Consulting
Services:<BR>consulting@freeswitch.org<BR>http://www.freeswitchsolutions.com<BR><BR>FreeSWITCH-powered
IP PBX: The CudaTel Communication
Server<BR>http://www.cudatel.com<BR><BR>Official FreeSWITCH
Sites<BR>http://www.freeswitch.org<BR>http://wiki.freeswitch.org<BR>http://www.cluecon.com<BR><BR>FreeSWITCH-users
mailing
list<BR>FreeSWITCH-users@lists.freeswitch.org<BR>http://lists.freeswitch.org/mailman/listinfo/freeswitch-users<BR>UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users<BR>http://www.freeswitch.org<BR></DIV></DIV></DIV></BODY></HTML>