Hi,

FreeSWITCH will not send a call to an unregistered endpoint. Registration will not expire because of password changing.

Try to reduce expire or flush registration via ESL on password change.

Regards,

Alex

Alex Sibyakin | Support Engineer SignalWire | 228 Hamilton Ave 3rd Floor, Palo Alto, CA 94303 Email: alex@freeswitch.com Website: https://www.signalwire.com



On Fri, May 10, 2019 at 4:09 PM Jose David Jurado Alonso <josedavid@zennio.com> wrote:
Hi,

I have FS configured to only send calls to authenticated endpoints. It works very well in general but there is a case in which it sends the call to unregistered endpoints:
  1. Auth the endpoint and "registration" (ok)
  2. Call to endpoint and call arrives (ok)
  3. Change the endpoint password in FS DB and endpoint "fail registration"
  4. Call to endpoint and call arrives (ERROR, call must be ignored)
The ERROR is because the REGISTER event know that endpoint "fail registration" and yet send the call anyway ignoring the "auth_calls=true" configuration.

If I execute these fs_cli commands between step 3 and 4, the call is not sent (OK for me, expected and desired case):

> sofia profile external flush_inbound_reg all
> sofia profile external flush_inbound_reg reboot
> sofia profile external check_sync

I have not tested if all the commands are necessary or not.

Does anyone know how it can be done to make it work as desired using configuration without having to execute the commands after every password change in an endpoint?

Relevant configuration is:

vars.xml:

  <!-- Internal SIP Profile -->
  <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/>
  <X-PRE-PROCESS cmd="set" data="internal_sip_port=5060"/>
  <X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/>
  <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=false"/>

  <!-- External SIP Profile -->
  <X-PRE-PROCESS cmd="set" data="external_auth_calls=true"/>
  <X-PRE-PROCESS cmd="set" data="external_sip_port=5080"/>
  <X-PRE-PROCESS cmd="set" data="external_tls_port=5081"/>
  <X-PRE-PROCESS cmd="set" data="external_ssl_enable=false"/>

sip_profile "external.xml" (i use it):

    <param name="manage-presence" value="false"/>
    <param name="auth-calls" value="true"/>
    <param name="multiple-registrations" value="true"/>


I use a dynamic directory getting SIP accounts from DB and generate the XML (mod_curl) setting "cacheable=0".

Thanks!

José David Jurado Alonso.

_________________________________________________________________________

The FreeSWITCH project is sponsored by SignalWire https://signalwire.com
Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services.
Build your next product on our scalable cloud platform.

Join our online community to chat in real time https://signalwire.community

Professional FreeSWITCH Services
sales@freeswitch.com
https://freeswitch.com

Official FreeSWITCH Sites
https://freeswitch.com/oss
https://freeswitch.org/confluence
https://cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
https://freeswitch.com