I've tried entering this in acl.conf.xml:


   <list name="domains" default="deny">
      <node type="allow" host="miccgw1.design.mitel.com" mask="255.255.255.0"/>
    </list>

After reloadacl (no errors), I tried making a call:


2015-02-06 15:47:51.831958 [NOTICE] switch_channel.c:1055 New Channel sofia/internal/5401@miccgw1.design.mitel.com [fbcbdde0-6b3e-43e1-9fcf-f592c83b0efb]

but the incoming call still gets rejected:

2015-02-06 15:47:51.831958 [DEBUG] sofia.c:8775 IP 10.47.41.109 Rejected by acl "domains". Falling back to Digest auth.

2015-02-06 15:47:51.871962 [DEBUG] sofia.c:8775 IP 10.47.41.109 Rejected by acl "domains". Falling back to Digest auth.
2015-02-06 15:47:51.871962 [WARNING] sofia_reg.c:2752 Can't find user [@10.47.26.44] from 10.47.41.109
You must define a domain called '10.47.26.44' in your directory and add a user with the id="" attribute
and you must configure your device to use the proper domain in it's authentication credentials.

If I want to get rid of the error, I need to specify the IP address of the originating pbx:

      <node type="allow" cidr="10.47.41.109/32" />

Any thoughts on how to get the acl file to support hostnames?



On Thu, Feb 5, 2015 at 11:42 AM, Brian West <brian@freeswitch.org> wrote:
Looking at the code it looks like it would accept host.

On Thu, Feb 5, 2015 at 9:59 AM, Szeto, Steven <steven.szeto@mitel.com> wrote:
Suppose I have a switch with DNS hostname of "myswitch.company.com" and an IP address of 10.11.12.13.

If I want to allow this switch's phones to call FreeSwitch, I have to update the acl.conf.xml file with an entry that looks like this:

    <list name="domains" default="deny">

      <node type="allow" cidr="10.11.12.13/32" />

    </list>


What I would like to do is use the DNS hostname of the switch instead. So the above entry should look something like this:

    <list name="domains" default="deny">

      <node type="allow" host="myswitch.company.com" />

    </list>

When I try the above, the calls are rejected by FreeSwitch.

When creating its Access Control List, is there a way to tell FreeSwitch to do a hostname lookup when hosts are specified?

Regards,
Steve 

This e-mail (including any attachments) is for the sole use of the intended recipient(s) and may contain information that is confidential and/or protected by legal privilege. Any unauthorized review, use, copy, disclosure or distribution of this e-mail is strictly prohibited. If you are not the intended recipient, please notify Mitel immediately and destroy all copies of this e-mail.  Mitel does not accept any liability for breach of security, error or virus that may result from the transmission of this message.
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--

Brian West
brian@freeswitch.org


Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com

T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


This e-mail (including any attachments) is for the sole use of the intended recipient(s) and may contain information that is confidential and/or protected by legal privilege. Any unauthorized review, use, copy, disclosure or distribution of this e-mail is strictly prohibited. If you are not the intended recipient, please notify Mitel immediately and destroy all copies of this e-mail.  Mitel does not accept any liability for breach of security, error or virus that may result from the transmission of this message.