<div dir="ltr">You requred to install sip proxy (exmple Kamailio) to route call between two freeswith profiles.<br>Call originated from <a href="http://example.com">example.com</a> domain always routed to internal profile<br>Call route from non <a href="http://example.com">example.com</a>. domain to example.com.domain routed to external profile<br>All other call must be blocked.</div><br><div class="gmail_quote"><div dir="ltr">чт, 12 мая 2016 г. в 16:44, Artur Mega <<a href="mailto:findmeinwland@gmail.com">findmeinwland@gmail.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-size:small"><div style="color:rgb(0,0,0);font-family:'Times New Roman';font-size:14.16px">I have DNS SRV record (external profile)</div><div style="color:rgb(0,0,0);font-family:'Times New Roman';font-size:14.16px">_sip._<span style="color:rgb(0,90,149)"><a href="http://udp.example.com/" style="color:rgb(0,90,149);text-decoration:none" target="_blank">udp.example.com</a></span> has SRV record 10 100 5080 <span style="color:rgb(0,90,149)"><a href="http://sip.example.com/" style="color:rgb(0,90,149);text-decoration:none" target="_blank">sip.example.com</a></span>.<br></div><br style="color:rgb(0,0,0);font-family:'Times New Roman';font-size:14.16px"><div style="color:rgb(0,0,0);font-family:'Times New Roman';font-size:14.16px">None authentication calls from other server to <span style="color:rgb(0,90,149)"><a href="mailto:sip%3A1001@example.com" style="color:rgb(0,90,149);text-decoration:none" target="_blank">sip:1001@example.com</a></span> work fine.</div><div style="color:rgb(0,0,0);font-family:'Times New Roman';font-size:14.16px">Calls from phones (uses DNS SRV _sip._udp.) with authentication (incoming/outgoing) not work.</div><br style="color:rgb(0,0,0);font-family:'Times New Roman';font-size:14.16px"><div style="color:rgb(0,0,0);font-family:'Times New Roman';font-size:14.16px">Then I set SRV DNS record (internal profile)</div><div style="color:rgb(0,0,0);font-family:'Times New Roman';font-size:14.16px">_sip._<span style="color:rgb(0,90,149)"><a href="http://udp.example.com/" style="color:rgb(0,90,149);text-decoration:none" target="_blank">udp.example.com</a></span> has SRV record 10 100 5060 <span style="color:rgb(0,90,149)"><a href="http://sip.example.com/" style="color:rgb(0,90,149);text-decoration:none" target="_blank">sip.example.com</a></span>.</div><br style="color:rgb(0,0,0);font-family:'Times New Roman';font-size:14.16px"><div style="color:rgb(0,0,0);font-family:'Times New Roman';font-size:14.16px"><div>Calls from phones with authentication work.</div><div>Sip uri calls without authentication not work.</div></div><br style="color:rgb(0,0,0);font-family:'Times New Roman';font-size:14.16px"><div style="color:rgb(0,0,0);font-family:'Times New Roman';font-size:14.16px">I need use one DNS SRV record to all calls.</div></div></div><div class="gmail_extra"><br><div class="gmail_quote">2016-05-07 1:00 GMT+05:00 Michael Jerris <span dir="ltr"><<a href="mailto:mike@jerris.com" target="_blank">mike@jerris.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I suppose you could "auth" all calls, but force context for ones that fail via xml curl, but you couldn't not auth calls that are going to fail auth before you challenge them, as computers are not psychic knowing the future<div><div><span></span><br><br>On Friday, May 6, 2016, Artur Mega <<a href="mailto:findmeinwland@gmail.com" target="_blank">findmeinwland@gmail.com</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-size:small">Thanks, Michael for reply<br><br>Look, let's assume that call will come to internal profile (where authorisation is required). But then unauthorised call wont reach the dialplan, becouse it's not authorised... But i don't wanna drop such call, it must be allowed to go further to special context in dialplan. Desired algorythm is like:<br><br> IF incoming call is authenticated THEN forward it to one dialplan ELSE forward it to another dialplan (don't drop) END.<br><br>Who knows how can it be solved?</div></div><div class="gmail_extra"><br><div class="gmail_quote">2016-05-04 20:14 GMT+05:00 Michael Jerris <span dir="ltr"><<a>mike@jerris.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">If a profile doesn't perform authorization, as is the case in the default external profile, no calls are authorized as we do not attempt to authorize them. You can't know if a call is authorized without challenging them.<div><br></div><div><br><div><blockquote type="cite"><div><div><div>On May 4, 2016, at 6:40 AM, Artur Mega <<a>findmeinwland@gmail.com</a>> wrote:</div><br></div></div><div><div><div><div dir="ltr"><div class="gmail_default" style="font-size:small">Good day,</div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="font-size:small">How can I check incoming call to the External profile? Theoretically, both authorised and unauthorised users can call via external profile. Tried to detect authorised users with ${sip_authorised} variable, but it doesn't help. :(</div><div><br></div>-- <br><div><div dir="ltr"><div><div><br>Arthur</div></div></div></div>
</div></div></div>
_________________________________________________________________________<br>Professional FreeSWITCH Consulting Services: <br><a>consulting@freeswitch.org</a><br><a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br><br>Official FreeSWITCH Sites<br><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br><a href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.org</a><br><a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br><br>FreeSWITCH-users mailing list<br><a>FreeSWITCH-users@lists.freeswitch.org</a><br><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a></div></blockquote></div><br></div></div><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a>consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a>FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div><div dir="ltr"><div><div><br>Arthur</div></div></div></div>
</div>
</blockquote>
</div></div><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div><div dir="ltr"><div><div><br>Arthur</div></div></div></div>
</div>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a></blockquote></div>