<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" id="owaParaStyle"></style>
</head>
<body fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Thank you for your response, Michael.
<div><br>
</div>
<div>Pardon my ignorance on ACL's, but I'm unclear how that works in this scenario. When I read the Confluence page regarding ACL's, I read their application to be allowing access to the system. <span style="font-size: 10pt;">In my case, I'm trying to convince
FS to offer up the external IP, regardless of what the actual IP address is.</span></div>
<div><br>
</div>
<div>Is there more doc than https://freeswitch.org/confluence/display/FREESWITCH/ACL<a href="https://freeswitch.org/confluence/display/FREESWITCH/ACL" target="_blank" style="font-size: 10pt;">https://freeswitch.org/confluence/display/FREESWITCH/ACL</a> that
I can refer to? </div>
<div><br>
</div>
<div>Again, thank you for your help and sorry if these are dumb questions.</div>
<div><br>
</div>
<div>Dan</div>
<div><br>
</div>
<div><br>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div id="divRpF840390" style="direction: ltr;"><font face="Tahoma" size="2" color="#000000"><b>From:</b> freeswitch-users-bounces@lists.freeswitch.org [freeswitch-users-bounces@lists.freeswitch.org] on behalf of Michael Jerris [mike@jerris.com]<br>
<b>Sent:</b> Monday, November 02, 2015 4:36 PM<br>
<b>To:</b> FreeSWITCH Users Help<br>
<b>Subject:</b> Re: [Freeswitch-users] FreeSWITCH behind an Nginx proxy<br>
</font><br>
</div>
<div></div>
<div>there are acls for this yes. check out the ones that refer to nat<span></span><br>
<br>
On Monday, November 2, 2015, Dan Edwards <<a href="mailto:DEdwards@vertical.com" target="_blank">DEdwards@vertical.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div>
<div style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt">
<div style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt">We're trying to build a system that allows WebSocket SIP traffic through an Nginx proxy to FreeSWITCH and I'm having trouble getting the proper IP address offered in the SDP.
<div><br>
</div>
<div>I added ext-rtp-ip and ext-sip-ip to the profile, but if I come in via the Nginx proxy, FS always offers the local address. I made some code changes to FS to catch the X-Forwarded-For header on the initial WebSocket connect, thinking I could substitute
the forwarded-for IP address for the Nginx address, but this did not correct the problem.</div>
<div><br>
</div>
<div>To be clear, if I run Nginx on 172.1.1.1 and FS on 172.1.1.2, when I come in via Nginx, FS sees the SIP IP as 172.1.1.1 and offers 172.1.1.2 as the RTP address. If I come in via a port-forward, FS offers what I have in 'ext-rtp-ip' as the IP address.</div>
<div><br>
</div>
<div>Is there a way to force FS to always offer ext-rtp-ip, even if the address is local or does this require a code change? If it requires a code change, where does this logic exist?</div>
<div><br>
</div>
<div>Thank you,</div>
<div>Dan</div>
<div><br>
</div>
<div><br>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</div>
</body>
</html>