<div dir="ltr"><div><div><div><div>Hi Steven,<br><br></div>Thanks, that makes a lot of sense.<br></div>I tried to limit few users to specific cidr (/32), but it seems like it's the wrong way of doing it, and I should try to use it in the dialplan, and see if the IP address is the one I'm expecting to have for that call.<br><br></div>Again, thank you<br><br></div>Ido<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Sep 9, 2014 at 9:45 PM, Steven Ayre <span dir="ltr"><<a href="mailto:steveayre@gmail.com" target="_blank">steveayre@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Registration is completely separate to making a call. Registration tells FS where to send calls to you, and has no effect on calls from you. They have separate authentication. Registration is not required in order to make a call.<div><br></div><div>In short the fact you're registering ok doesn't tell you anything about how your call will be processed, so ignore the registration and just debug the outgoing call part.</div><div><br></div><div>I would suggest you avoid authenticating from as one user from an IP that's already matching the cidr of another. The cidr will bypass the password authentication. Ordinarily authentication uses a challenge/response mechanism - you send INVITE, it replies 401 with challenge, you resend INVITE with the response. If you match a cidr you're not going to get the 401, so you'll authenticate as the cidr user not password user.</div><div><br></div><div>If that behaviour is intermittent, perhaps the challenge response is reusing the authentication challenge from the REGISTER you just did, but since it's time-limited will only do it for a limited amount of time so the behaviour would change after a while.</div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On 9 September 2014 12:11, ik <span dir="ltr"><<a href="mailto:idokan@gmail.com" target="_blank">idokan@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr"><div><div><div><div><div>Found the reason for the problem, but I do not understand it.<br><br></div>By using - <anti-action application="info" /> on the wrong context, I found out that acl_token is set to a different user, that has in it's configuration a cidr of the same IP address of my soft-phone.<br><br></div>So even tough Freeswitch know that I'm 3002, it decided that I'm user 2002 (that points to that context), because of the cidr.<br></div>When I removed the cidr configuration inside the <user> and moved it to the acl.xml.conf , it start to enter the proper context.<br><br></div>The thing is, that it's not always happening, only sometimes.<br><br></div>Ido<br></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Sep 8, 2014 at 9:23 PM, ik <span dir="ltr"><<a href="mailto:idokan@gmail.com" target="_blank">idokan@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div><div>Hello,<br><br></div>I have a weird issue with freeswitch (Version 1.4.8 git 1fe89f5 2014-08-21 18:57:58Z 64bit) sometimes.<br></div><div>It also happens to me on Freeswitch 1.2.<br></div>It ignores the extension's user_context, defined like so:<br><variable name="user_context" value="testing" /><br><br><include><br> <user id="3002"><br> <params><br> <param name="password" value="******" /><br> </params><br> <variables><br> <variable name="accountcode" value="3002" /><br> <!-- <variable name="user_context" value="bridging_capture" /> --><br> <variable name="user_context" value="testing" /><br> <variable name="effective_caller_id_name" value="Desktop machine" /><br> <variable name="effective_caller_id_number" value="3002" /><br> </variables><br> </user><br></include><br><br></div>When I do list_users, i can see it:<br>3002|testing|XXX.XXX.XXX.XXX|default|error/user_not_registered||Desktop machine|3002<br><br></div><div>(and when it is registered I can see it registered)<br></div><div><br></div>And when the user is registered I see it also:<br>2014-09-08 18:05:25.397965 [DEBUG] sofia_reg.c:3013 event_add_header -> 'record_stereo' = 'true'<br>2014-09-08 18:05:25.397965 [DEBUG] sofia_reg.c:3013 event_add_header -> 'default_gateway' = '<a href="http://example.com" target="_blank">example.com</a>'<br>2014-09-08 18:05:25.397965 [DEBUG] sofia_reg.c:3013 event_add_header -> 'default_areacode' = '918'<br>2014-09-08 18:05:25.397965 [DEBUG] sofia_reg.c:3013 event_add_header -> 'transfer_fallback_extension' = 'operator'<br>2014-09-08 18:05:25.397965 [DEBUG] sofia_reg.c:3013 event_add_header -> 'accountcode' = '3002'<br>2014-09-08 18:05:25.397965 [DEBUG] sofia_reg.c:3013 event_add_header -> 'user_context' = 'testing'<br>2014-09-08 18:05:25.397965 [DEBUG] sofia_reg.c:3013 event_add_header -> 'effective_caller_id_name' = 'Desktop machine'<br>2014-09-08 18:05:25.397965 [DEBUG] sofia_reg.c:3013 event_add_header -> 'effective_caller_id_number' = '3002'<br><br></div>However, when I dial the extension, it enter a different context:<br>2014-09-08 18:05:38.897955 [INFO] mod_dialplan_xml.c:558 Processing 3001 <3002>->3000 in context external_dialer<br><br>xml_locate dialplan<br> <context name="testing"><br> <extension name="shout"><br> <condition field="destination_number" expression="^(300\d)$"><br> <action application="answer"></action><br> <action application="playback" data="shout://<a href="http://208.53.164.178:80" target="_blank">208.53.164.178:80</a>"></action><br> </condition><br> </extension><br> </context><br><br><br></div><div>It usually happens after a while, when first it enters the proper context, and later it starts to go somewhere else. even on ./freeswitch -stop and ./freeswitch -ncwait it goes to the wrong context.<br><br></div><div><br></div><div>Am I doing something wrong, or missing something ?<br><br>Thanks, <br>Ido<br></div></div>
</blockquote></div><br></div>
</div></div><br></div></div>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br></div>