<p>If acl is set, then it won't check the user directory.<br>
The IP in the user directory authorizes without checking the auth.<br>
if you want to check the IP along with the user, then I think you have to do that in the dial plan... I don't think it's built into FS.</p>
<p>-Avi</p>
<div class="gmail_quote">On Jul 28, 2013 5:43 PM, "Seven Du" <<a href="mailto:dujinfang@gmail.com">dujinfang@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
Hi,
</div><div><br></div><div>I know ACL is to block or allow an IP to reg or call. But in practise, if an IP is allowed then it won't check the User directory again so cannot match to the user info stored in the user directory and dialplan route to the public context.</div>
<div><br></div><div><div> <node type="allow" cidr="<a href="http://192.168.1.123/32" target="_blank">192.168.1.123/32</a>"/></div></div><div><br></div><div><br></div><div><div>2013-07-28 22:11:04.647358 [DEBUG] sofia.c:7915 IP 192.168.1.123 Approved by acl "domains[]". Access Granted.</div>
<div>2</div></div><div><br></div><div><br></div><div>If I set the cidr attribute in the user directory, but it seems been parsed to the ACL so it also allows any other users to reg or call from that url. Below is a log that shows Access Granted when I actually set the cidr to 1000 but calling with 1001. FS doesn't challenge 1001.</div>
<div><br></div><div><br></div>
<div><div><div>2013-07-28 22:07:14.347320 [DEBUG] sofia.c:7915 IP 192.168.1.123 Approved by acl "domains[<a href="mailto:1000@192.168.1.123" target="_blank">1000@192.168.1.123</a>]". Access Granted.</div>
<div>2013-07-28 22:07:14.347320 [DEBUG] sofia.c:8045 Authenticating user <a href="mailto:1000@192.168.1.123" target="_blank">1000@192.168.1.123</a></div></div><div><br></div><div>Is it a problem?</div><div><br></div><div>
Is it possible to check the ip *and* the user? e.g. user 1000 can only reg from ip IP with password 1234.</div><div><br></div><div>Thanks.</div><div><br></div><div><br></div><div>-- </div><div>Seven Du</div><div><span style="font-size:10pt"><a href="http://www.freeswitch.org.cn" target="_blank">http://www.freeswitch.org.cn</a></span></div>
<div><a href="http://about.me/dujinfang" target="_blank">http://about.me/dujinfang</a></div><div><div><a href="http://www.dujinfang.com" target="_blank">http://www.dujinfang.com</a></div></div><div><br></div><div>Sent with <a href="http://www.sparrowmailapp.com/?sig" target="_blank">Sparrow</a></div>
<div><br></div></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div>