<div dir="ltr">You requred to install sip proxy (exmple Kamailio) to route call between two freeswith profiles.<br>Call originated from <a href="http://example.com">example.com</a> domain always routed to internal profile<br>Call route from non <a href="http://example.com">example.com</a>. domain to example.com.domain routed to external profile<br>All other call must be blocked.</div><br><div class="gmail_quote"><div dir="ltr">чт, 12 мая 2016 г. в 16:44, Artur Mega &lt;<a href="mailto:findmeinwland@gmail.com">findmeinwland@gmail.com</a>&gt;:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-size:small"><div style="color:rgb(0,0,0);font-family:&#39;Times New Roman&#39;;font-size:14.16px">I have DNS SRV record (external profile)</div><div style="color:rgb(0,0,0);font-family:&#39;Times New Roman&#39;;font-size:14.16px">_sip._<span style="color:rgb(0,90,149)"><a href="http://udp.example.com/" style="color:rgb(0,90,149);text-decoration:none" target="_blank">udp.example.com</a></span> has SRV record 10 100 5080 <span style="color:rgb(0,90,149)"><a href="http://sip.example.com/" style="color:rgb(0,90,149);text-decoration:none" target="_blank">sip.example.com</a></span>.<br></div><br style="color:rgb(0,0,0);font-family:&#39;Times New Roman&#39;;font-size:14.16px"><div style="color:rgb(0,0,0);font-family:&#39;Times New Roman&#39;;font-size:14.16px">None authentication calls from other server to <span style="color:rgb(0,90,149)"><a href="mailto:sip%3A1001@example.com" style="color:rgb(0,90,149);text-decoration:none" target="_blank">sip:1001@example.com</a></span> work fine.</div><div style="color:rgb(0,0,0);font-family:&#39;Times New Roman&#39;;font-size:14.16px">Calls from phones (uses DNS SRV _sip._udp.) with authentication (incoming/outgoing) not work.</div><br style="color:rgb(0,0,0);font-family:&#39;Times New Roman&#39;;font-size:14.16px"><div style="color:rgb(0,0,0);font-family:&#39;Times New Roman&#39;;font-size:14.16px">Then I set SRV DNS record (internal profile)</div><div style="color:rgb(0,0,0);font-family:&#39;Times New Roman&#39;;font-size:14.16px">_sip._<span style="color:rgb(0,90,149)"><a href="http://udp.example.com/" style="color:rgb(0,90,149);text-decoration:none" target="_blank">udp.example.com</a></span> has SRV record 10 100 5060 <span style="color:rgb(0,90,149)"><a href="http://sip.example.com/" style="color:rgb(0,90,149);text-decoration:none" target="_blank">sip.example.com</a></span>.</div><br style="color:rgb(0,0,0);font-family:&#39;Times New Roman&#39;;font-size:14.16px"><div style="color:rgb(0,0,0);font-family:&#39;Times New Roman&#39;;font-size:14.16px"><div>Calls from phones with authentication work.</div><div>Sip uri calls without authentication not work.</div></div><br style="color:rgb(0,0,0);font-family:&#39;Times New Roman&#39;;font-size:14.16px"><div style="color:rgb(0,0,0);font-family:&#39;Times New Roman&#39;;font-size:14.16px">I need use one DNS SRV record to all calls.</div></div></div><div class="gmail_extra"><br><div class="gmail_quote">2016-05-07 1:00 GMT+05:00 Michael Jerris <span dir="ltr">&lt;<a href="mailto:mike@jerris.com" target="_blank">mike@jerris.com</a>&gt;</span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I suppose you could &quot;auth&quot; all calls, but force context for ones that fail via xml curl, but you couldn&#39;t not auth calls that are going to fail auth before you challenge them, as computers are not psychic knowing the future<div><div><span></span><br><br>On Friday, May 6, 2016, Artur Mega &lt;<a href="mailto:findmeinwland@gmail.com" target="_blank">findmeinwland@gmail.com</a>&gt; wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-size:small">Thanks, Michael for reply<br><br>Look, let&#39;s assume that call will come to internal profile (where authorisation is required). But then unauthorised call wont reach the dialplan, becouse it&#39;s not authorised... But i don&#39;t wanna drop such call, it must be allowed to go further to special context in dialplan. Desired algorythm is like:<br><br>    IF incoming call is authenticated THEN forward it to one dialplan ELSE forward it to another dialplan (don&#39;t drop) END.<br><br>Who knows how can it be solved?</div></div><div class="gmail_extra"><br><div class="gmail_quote">2016-05-04 20:14 GMT+05:00 Michael Jerris <span dir="ltr">&lt;<a>mike@jerris.com</a>&gt;</span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">If a profile doesn&#39;t perform authorization, as is the case in the default external profile, no calls are authorized as we do not attempt to authorize them.  You can&#39;t know if a call is authorized without challenging them.<div><br></div><div><br><div><blockquote type="cite"><div><div><div>On May 4, 2016, at 6:40 AM, Artur Mega &lt;<a>findmeinwland@gmail.com</a>&gt; wrote:</div><br></div></div><div><div><div><div dir="ltr"><div class="gmail_default" style="font-size:small">Good day,</div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="font-size:small">How can I check incoming call to the External profile? Theoretically, both authorised and unauthorised users can call via external profile. Tried to detect authorised users with ${sip_authorised} variable, but it doesn&#39;t help. :(</div><div><br></div>-- <br><div><div dir="ltr"><div><div><br>Arthur</div></div></div></div>
</div></div></div>
_________________________________________________________________________<br>Professional FreeSWITCH Consulting Services: <br><a>consulting@freeswitch.org</a><br><a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br><br>Official FreeSWITCH Sites<br><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br><a href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.org</a><br><a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br><br>FreeSWITCH-users mailing list<br><a>FreeSWITCH-users@lists.freeswitch.org</a><br><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a></div></blockquote></div><br></div></div><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a>consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a>FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div><div dir="ltr"><div><div><br>Arthur</div></div></div></div>
</div>
</blockquote>
</div></div><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div><div dir="ltr"><div><div><br>Arthur</div></div></div></div>
</div>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a></blockquote></div>