On Thu, Dec 24, 2009 at 12:31 PM, Lars Zeb <larclap@yahoo.com> wrote:
Thanks for the reply, Michael.
I tried the digest authentication using the cidr and copying the conf/sip_profiles/internal.xml from the distribution, where
<param name="apply-inbound-acl" value=”domains”/>
As a result, one endpoint could not register and another was unauthorized.
http://pastebin.freeswitch.org/11634
Then I went changed the context in internal.xml from public to default and
<param name="apply-inbound-acl" value="192.168.10.0/24<http://192.168.0.0/24>"/> <param name="apply-register-acl" value="192.168.10.0/24<http://192.168.0.0/24> "/>
And the phones registered OK. So my confusion persists.
Like Brian said in his post, if you let someone in via ACL then there is no directory lookup which means the call is essentially from an anonymous/unidentified party and thus the reason for having the context set to "public" even on the internal profile. This is one of the topics that I intend to cover in the wiki article. -MC