<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Hello,</div><div><div><br></div><div> I have installed freeSwitch 1.1beta from the git repository (FreeSWITCH-mod_sofia/1.1.beta1-git-d2edcad 2012-03-31 23-42-27 +0000). My SIP provider (Netelip) is defined in conf/directory/default/example.conf.xml:</div><div><br></div><div><div><font class="Apple-style-span" face="Courier"><include></font></div><div><font class="Apple-style-span" face="Courier"> <user id="$${default_provider}"></font></div><div><font class="Apple-style-span" face="Courier"> <gateways></font></div><div><font class="Apple-style-span" face="Courier"> <gateway name="$${default_provider}"></font></div><div><font class="Apple-style-span" face="Courier"><span class="Apple-tab-span" style="white-space:pre"> </span><param name="username" value="$${default_provider_username}"/></font></div><div><font class="Apple-style-span" face="Courier"><span class="Apple-tab-span" style="white-space:pre"> </span><param name="password" value="$${default_provider_password}"/></font></div><div><font class="Apple-style-span" face="Courier"><span class="Apple-tab-span" style="white-space:pre"> </span><param name="from-user" value="$${default_provider_username}"/></font></div><div><font class="Apple-style-span" face="Courier"><span class="Apple-tab-span" style="white-space:pre"> </span><param name="from-domain" value="$${default_provider_from_domain}"/></font></div><div><font class="Apple-style-span" face="Courier"><span class="Apple-tab-span" style="white-space:pre"> </span><param name="expire-seconds" value="600"/></font></div><div><font class="Apple-style-span" face="Courier"><span class="Apple-tab-span" style="white-space:pre"> </span><param name="register" value="$${default_provider_register}"/></font></div><div><font class="Apple-style-span" face="Courier"><span class="Apple-tab-span" style="white-space:pre"> </span><param name="retry-seconds" value="30"/></font></div><div><font class="Apple-style-span" face="Courier"><span class="Apple-tab-span" style="white-space:pre"> </span><param name="extension" value="$${default_provider_contact}"/></font></div><div><font class="Apple-style-span" face="Courier"><span class="Apple-tab-span" style="white-space:pre"> </span><param name="auth-calls" value="false"/></font></div><div><font class="Apple-style-span" face="Courier"><span class="Apple-tab-span" style="white-space:pre"> </span><!--<param name="contact-params" value="domain_name=$${domain}"/>--></font></div><div><font class="Apple-style-span" face="Courier"><span class="Apple-tab-span" style="white-space:pre"> </span><param name="context" value="public"/></font></div><div><font class="Apple-style-span" face="Courier"> </gateway></font></div><div><font class="Apple-style-span" face="Courier"> </gateways></font></div><div><font class="Apple-style-span" face="Courier"> <params></font></div><div><font class="Apple-style-span" face="Courier"> <param name="password" value="$${default_provider_password}"/></font></div><div><font class="Apple-style-span" face="Courier"> </params></font></div><div><font class="Apple-style-span" face="Courier"> </user></font></div><div><font class="Apple-style-span" face="Courier"></include></font></div></div><div><br></div><div><span class="Apple-tab-span" style="white-space:pre"> </span>and doesn't authenticate inbound calls (insecure=invite in asterisk language). When I receive an inbound call, I receive the following error:</div><div><br></div><div><div><font class="Apple-style-span" face="Courier">freeswitch@internal> </font></div><div><font class="Apple-style-span" face="Courier">recv 1000 bytes from udp/[194.140.135.80]:5060 at 23:23:10.163377:</font></div><div><font class="Apple-style-span" face="Courier"> ------------------------------------------------------------------------</font></div><div><font class="Apple-style-span" face="Courier"> INVITE <a href="sip:34810101189@sukmad.dyndns-home.com">sip:34810101189@sukmad.dyndns-home.com</a> SIP/2.0</font></div><div><font class="Apple-style-span" face="Courier"> Via: SIP/2.0/UDP 194.140.135.80:5060;branch=z9hG4bK6bb16a10;rport</font></div><div><font class="Apple-style-span" face="Courier"> From: "916495242" <<a href="sip:916495242@194.140.135.80">sip:916495242@194.140.135.80</a>>;tag=as7a2a97e5</font></div><div><font class="Apple-style-span" face="Courier"> To: <<a href="sip:34810101189@sukmad.dyndns-home.com">sip:34810101189@sukmad.dyndns-home.com</a>></font></div><div><font class="Apple-style-span" face="Courier"> Contact: <<a href="sip:916495242@194.140.135.80">sip:916495242@194.140.135.80</a>></font></div><div><font class="Apple-style-span" face="Courier"> Call-ID: <a href="mailto:6c47a4064ef8d0641da415d2121e3226@194.140.135.80">6c47a4064ef8d0641da415d2121e3226@194.140.135.80</a></font></div><div><font class="Apple-style-span" face="Courier"> CSeq: 102 INVITE</font></div><div><font class="Apple-style-span" face="Courier"> User-Agent: Netelip</font></div><div><font class="Apple-style-span" face="Courier"> Max-Forwards: 70</font></div><div><font class="Apple-style-span" face="Courier"> Date: Fri, 13 Apr 2012 23:23:51 GMT</font></div><div><font class="Apple-style-span" face="Courier"> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO</font></div><div><font class="Apple-style-span" face="Courier"> Supported: replaces</font></div><div><font class="Apple-style-span" face="Courier"> Content-Type: application/sdp</font></div><div><font class="Apple-style-span" face="Courier"> Content-Length: 425</font></div><div><font class="Apple-style-span" face="Courier"> </font></div><div><font class="Apple-style-span" face="Courier"> v=0</font></div><div><font class="Apple-style-span" face="Courier"> o=root 1249 1249 IN IP4 194.140.135.80</font></div><div><font class="Apple-style-span" face="Courier"> s=session</font></div><div><font class="Apple-style-span" face="Courier"> c=IN IP4 194.140.135.80</font></div><div><font class="Apple-style-span" face="Courier"> t=0 0</font></div><div><font class="Apple-style-span" face="Courier"> m=audio 16474 RTP/AVP 8 0 97 3 18 4 101</font></div><div><font class="Apple-style-span" face="Courier"> a=rtpmap:8 PCMA/8000</font></div><div><font class="Apple-style-span" face="Courier"> a=rtpmap:0 PCMU/8000</font></div><div><font class="Apple-style-span" face="Courier"> a=rtpmap:97 iLBC/8000</font></div><div><font class="Apple-style-span" face="Courier"> a=fmtp:97 mode=30</font></div><div><font class="Apple-style-span" face="Courier"> a=rtpmap:3 GSM/8000</font></div><div><font class="Apple-style-span" face="Courier"> a=rtpmap:18 G729/8000</font></div><div><font class="Apple-style-span" face="Courier"> a=fmtp:18 annexb=no</font></div><div><font class="Apple-style-span" face="Courier"> a=rtpmap:4 G723/8000</font></div><div><font class="Apple-style-span" face="Courier"> a=fmtp:4 annexa=no</font></div><div><font class="Apple-style-span" face="Courier"> a=rtpmap:101 telephone-event/8000</font></div><div><font class="Apple-style-span" face="Courier"> a=fmtp:101 0-16</font></div><div><font class="Apple-style-span" face="Courier"> a=silenceSupp:off - - - -</font></div><div><font class="Apple-style-span" face="Courier"> a=ptime:20</font></div><div><font class="Apple-style-span" face="Courier"> a=sendrecv</font></div><div><font class="Apple-style-span" face="Courier"> ------------------------------------------------------------------------</font></div><div><font class="Apple-style-span" face="Courier">send 382 bytes to udp/[194.140.135.80]:5060 at 23:23:10.164409:</font></div><div><font class="Apple-style-span" face="Courier"> ------------------------------------------------------------------------</font></div><div><font class="Apple-style-span" face="Courier"> SIP/2.0 100 Trying</font></div><div><font class="Apple-style-span" face="Courier"> Via: SIP/2.0/UDP 194.140.135.80:5060;branch=z9hG4bK6bb16a10;rport=5060</font></div><div><font class="Apple-style-span" face="Courier"> From: "916495242" <<a href="sip:916495242@194.140.135.80">sip:916495242@194.140.135.80</a>>;tag=as7a2a97e5</font></div><div><font class="Apple-style-span" face="Courier"> To: <<a href="sip:34810101189@sukmad.dyndns-home.com">sip:34810101189@sukmad.dyndns-home.com</a>></font></div><div><font class="Apple-style-span" face="Courier"> Call-ID: <a href="mailto:6c47a4064ef8d0641da415d2121e3226@194.140.135.80">6c47a4064ef8d0641da415d2121e3226@194.140.135.80</a></font></div><div><font class="Apple-style-span" face="Courier"> CSeq: 102 INVITE</font></div><div><font class="Apple-style-span" face="Courier"> User-Agent: FreeSWITCH-mod_sofia/1.1.beta1-git-d2edcad 2012-03-31 23-42-27 +0000</font></div><div><font class="Apple-style-span" face="Courier"> Content-Length: 0</font></div><div><font class="Apple-style-span" face="Courier"> </font></div><div><font class="Apple-style-span" face="Courier"> ------------------------------------------------------------------------</font></div><div><font class="Apple-style-span" face="Courier">2012-04-14 01:23:10.162331 [DEBUG] sofia.c:7598 IP 194.140.135.80 Rejected by acl "domains". Falling back to Digest auth.</font></div><div><font class="Apple-style-span" face="Courier">send 871 bytes to udp/[194.140.135.80]:5060 at 23:23:10.166026:</font></div><div><font class="Apple-style-span" face="Courier"> ------------------------------------------------------------------------</font></div><div><b><font class="Apple-style-span" color="#af170f" face="Courier"> SIP/2.0 407 Proxy Authentication Required</font></b></div><div><font class="Apple-style-span" face="Courier"> Via: SIP/2.0/UDP 194.140.135.80:5060;branch=z9hG4bK6bb16a10;rport=5060</font></div><div><font class="Apple-style-span" face="Courier"> From: "916495242" <<a href="sip:916495242@194.140.135.80">sip:916495242@194.140.135.80</a>>;tag=as7a2a97e5</font></div><div><font class="Apple-style-span" face="Courier"> To: <<a href="sip:34810101189@sukmad.dyndns-home.com">sip:34810101189@sukmad.dyndns-home.com</a>>;tag=SaBHcvmm7evNF</font></div><div><font class="Apple-style-span" face="Courier"> Call-ID: <a href="mailto:6c47a4064ef8d0641da415d2121e3226@194.140.135.80">6c47a4064ef8d0641da415d2121e3226@194.140.135.80</a></font></div><div><font class="Apple-style-span" face="Courier"> CSeq: 102 INVITE</font></div><div><font class="Apple-style-span" face="Courier"> User-Agent: FreeSWITCH-mod_sofia/1.1.beta1-git-d2edcad 2012-03-31 23-42-27 +0000</font></div><div><font class="Apple-style-span" face="Courier"> Accept: application/sdp</font></div><div><font class="Apple-style-span" face="Courier"> Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE</font></div><div><font class="Apple-style-span" face="Courier"> Supported: timer, precondition, path, replaces</font></div><div><font class="Apple-style-span" face="Courier"> Allow-Events: talk, hold, presence, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer</font></div><div><font class="Apple-style-span" face="Courier"> Proxy-Authenticate: Digest realm="194.140.135.80", nonce="bc1571d4-0957-4609-a887-7c3359b9ae9c", algorithm=MD5, qop="auth"</font></div><div><font class="Apple-style-span" face="Courier"> Content-Length: 0</font></div></div><div><br></div><div><span class="Apple-tab-span" style="white-space: pre; "> </span>I have read in forums that the solution to this problem is to add the IP to the acl.conf.xml, like this:</div><div><br></div><div><div><font class="Apple-style-span" face="Courier"> <list name="domains" default="deny"></font></div><div><font class="Apple-style-span" face="Courier"> <!-- domain= is special it scans the domain from the directory to build the ACL --></font></div><div><font class="Apple-style-span" face="Courier"> <node type="allow" domain="$${domain}"/></font></div><div><font class="Apple-style-span" face="Courier"> <!-- use cidr= if you wish to allow ip ranges to this domains acl. --></font></div><div><font class="Apple-style-span" face="Courier"> <b><node type="allow" cidr="194.140.135.80/24"/> </b></font></div><div><font class="Apple-style-span" face="Courier"> </list></font></div></div><div><br></div><div><span class="Apple-tab-span" style="white-space: pre; "> </span>But my SIP provider have a dynamic IP, and it's behind a NAT. If my SIP provider will use any IP, ¿Where can I do this without enabling all IPs to enter calls in my system?</div></div><div><br></div><div><br></div><div>Thanks in advance,</div><div><br></div><div>Regards.</div></body></html>