<div dir="ltr">You need this:<div>    &lt;param name=&quot;apply-inbound-acl&quot; value=&quot;domains&quot;/&gt;<br></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On 5 May 2014 17:13, Victor Chukalovskiy <span dir="ltr">&lt;<a href="mailto:victor.chukalovskiy@gmail.com" target="_blank">victor.chukalovskiy@gmail.com</a>&gt;</span> wrote:<br>

<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
<br>
Coming from wholesale background, my FS&#39;s run without any registrations.<br>
So far everything was ACL-based using &quot;apply-inbound-acl&quot; and I did not<br>
use any directory entries.<br>
<br>
The only problem with this is that once I have all IPs together in one<br>
big ALC, I can&#39;t identify which customer the call came from. E.g. need<br>
to set my_channel_variable=customer1 if a call came from particular IPs<br>
and my_channel_variable=customer2 if a call came from other IPs.<br>
<br>
So I&#39;m trying to move ACL logic into directory by means of defining a<br>
user with cidr attribute. So far, no matter what I do FS challenges<br>
INVITE with &quot;407&quot; even-though the INVITE comes from the IP that is<br>
included in CIDR attribute for a user. I suppose for whatever reason<br>
switch does not match INVITEs against CIDR&#39;s in the directory. Please<br>
help me with that. WiKi is written from a somewhat different logic /<br>
perspective, so it&#39;s hard to apply.<br>
<br>
My SIP profile is:<br>
<br>
&lt;profile name=&quot;test&quot;&gt;<br>
   &lt;gateways&gt;<br>
   &lt;/gateways&gt;<br>
   &lt;domains&gt;<br>
   &lt;/domains&gt;<br>
   &lt;settings&gt;<br>
     &lt;param name=&quot;parse-invite-tel-params&quot; value=&quot;true&quot;/&gt;<br>
     &lt;param name=&quot;user-agent-string&quot; value=&quot;test&quot;/&gt;<br>
     &lt;param name=&quot;debug&quot; value=&quot;0&quot;/&gt;<br>
     &lt;param name=&quot;sip-trace&quot; value=&quot;no&quot;/&gt;<br>
     &lt;param name=&quot;log-auth-failures&quot; value=&quot;true&quot;/&gt;<br>
     &lt;param name=&quot;rfc2833-pt&quot; value=&quot;101&quot;/&gt;<br>
     &lt;param name=&quot;sip-port&quot; value=&quot;5060&quot;/&gt;<br>
     &lt;param name=&quot;dialplan&quot; value=&quot;XML&quot;/&gt;<br>
     &lt;param name=&quot;context&quot; value=&quot;test&quot;/&gt;<br>
     &lt;param name=&quot;country&quot; value=&quot;e164&quot;/&gt;<br>
     &lt;param name=&quot;dtmf-duration&quot; value=&quot;2000&quot;/&gt;<br>
     &lt;param name=&quot;inbound-codec-prefs&quot; value=&quot;$${default_codec_prefs}&quot;/&gt;<br>
     &lt;param name=&quot;outbound-codec-prefs&quot; value=&quot;$${default_codec_prefs}&quot;/&gt;<br>
     &lt;param name=&quot;caller-id-type&quot; value=&quot;none&quot;/&gt;<br>
     &lt;param name=&quot;rtp-timer-name&quot; value=&quot;soft&quot;/&gt;<br>
     &lt;param name=&quot;rtp-ip&quot; value=&quot;192.168.1.2&quot;/&gt;<br>
     &lt;param name=&quot;sip-ip&quot; value=&quot;192.168.1.2&quot;/&gt;<br>
     &lt;param name=&quot;manage-presence&quot; value=&quot;false&quot;/&gt;<br>
     &lt;param name=&quot;manage-shared-appearance&quot; value=&quot;false&quot;/&gt;<br>
     &lt;param name=&quot;inbound-codec-negotiation&quot; value=&quot;greedy&quot;/&gt;<br>
     &lt;param name=&quot;disable-transcoding&quot; value=&quot;true&quot;/&gt;<br>
     &lt;param name=&quot;manual-redirect&quot; value=&quot;false&quot;/&gt;<br>
     &lt;param name=&quot;disable-transfer&quot; value=&quot;true&quot;/&gt;<br>
     &lt;param name=&quot;disable-register&quot; value=&quot;false&quot;/&gt;<br>
     &lt;param name=&quot;auth-calls&quot; value=&quot;true&quot;/&gt;<br>
     &lt;param name=&quot;rtp-timeout-sec&quot; value=&quot;300&quot;/&gt;<br>
     &lt;param name=&quot;rtp-hold-timeout-sec&quot; value=&quot;1800&quot;/&gt;<br>
     &lt;param name=&quot;pass-callee-id&quot; value=&quot;false&quot;/&gt;<br>
   &lt;/settings&gt;<br>
&lt;/profile&gt;<br>
<br>
<br>
Thanks!<br>
-Victor<br>
<br>
<br>
<br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</blockquote></div><br></div>