Per your suggestion, I changed the following in the conf/autoload_configs/acl.conf.xml file:
<list name="domains" default="deny">
<node type="allow" domain="10.10.3.10"/>
<node type="allow" domain="10.10.3.11"/>
10.10.3.10 and 10.10.3.11 are the ip addresses of our internal servers. However, the calls still fail with the 407 Proxy Authentication Required message.
I get the following log output when I issue the command, reloadacl:
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:954 Created ip list rfc1918.auto default (deny)
freeswitch@internal> 2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 10.0.0.0/8 (allow) [] to list rfc1918.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 172.16.0.0/12 (allow) [] to list rfc1918.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 192.168.0.0/16 (allow) [] to list rfc1918.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:962 Created ip list wan.auto default (allow)
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 10.0.0.0/8 (deny) [] to list wan.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 172.16.0.0/12 (deny) [] to list wan.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 192.168.0.0/16 (deny) [] to list wan.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:970 Created ip list nat.auto default (deny)
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:972 Adding 10.10.3.12/255.255.255.128 (deny) to list nat.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 10.0.0.0/8 (allow) [] to list nat.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 172.16.0.0/12 (allow) [] to list nat.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 192.168.0.0/16 (allow) [] to list nat.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:981 Created ip list loopback.auto default (deny)
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 127.0.0.0/8 (allow) [] to list loopback.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:987 Created ip list localnet.auto default (deny)
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:990 Adding 10.10.3.12/255.255.255.128 (allow) to list localnet.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:1015 Created ip list domains default (deny)
2010-04-09 12:06:31.259954 [WARNING] switch_core.c:1046 Cannot locate domain 10.10.3.10
2010-04-09 12:06:31.259954 [WARNING] switch_core.c:1046 Cannot locate domain 10.10.3.11
Am I doing something incorrectly?
Actually, I did purchase a license and installed it today. One call establishes at 729. When I hang up the phone and try again, it’s 711.
Make sure that the encoder/decoder isn't still in use prior to trying the second call. After you hang up, do a "show channels" and see if the call is still "up" or not. Also, do "g729_status" to see if the encoder or decoder is in use. Keep doing "g729_status" until the 'coders are not in use. If there is a long delay then open up a JIRA ticket on
jira.freeswitch.org.
The Proxy Authentication Required is being sent by FreeSwitch to the internal PBX. I have registration disabled on the FreeSwitch gateway and the internal server.
By default the SIP profile will challenge if the IP address of the caller is not in the ACL. Open conf/autoload_configs/acl.conf.xml and locate the "domains" node. Add your PBX's IP address. You'll see an example in the comments. Once you're done editing, save the file and then go to the fs_cli and do:
reloadacl reloadxml
Then make a call from PBX to FS and it should go through.
-MC