<div dir="ltr"><span style="font-size:12.8px">"I can not use a router or FW or any other thing in front of the freeswitch because the same freeswitch also serves </span><br style="font-size:12.8px"><span style="font-size:12.8px">other services that do not have this restriction."</span><br><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">Could you configure the server to have another sofia profile on an additional IP address (or port if addresses are limited)?</span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">You could then run the restricted service on that extra profile and use a firewall on that address/port (eg iptables) to restrict access to the relevant regions.</span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">Since everything else is on another address/port that iptables wouldn't be restricting it wouldn't affect the other services on the same freeswitch instance.</span></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 26 September 2015 at 07:11, Juan Pablo L. <span dir="ltr"><<a href="mailto:jpablolorenzetti@hotmail.com" target="_blank">jpablolorenzetti@hotmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div dir="ltr">Hi, is there any way on freeswitch to forbid registration (or any connection) from certain regions in the world ? .. <br>what i need to accomplish is to prevent people from connecting from my same country as we have a voip service<br>that is supposed to be accessed only when you are out of the country so i need to validate the UA's ip when registering.<br>I can not use a router or FW or any other thing in front of the freeswitch because the same freeswitch also serves <br>other services that do not have this restriction. This restriction only affects users in one profile only. <br>I m aware that i could capture the registrations using a lua script and i guess from there i could consult<br>a GeoIP database etc etc but that affects all profiles and not only this particular profile of this particular service<br>and that could be a performance hit for the service as a whole so i would like to avoid that.<br><br>thank you!<br> </div></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br></div>