On Fri, Apr 9, 2010 at 10:07 AM, Ken Fulmer < kenfulmer@icstechnologysolutions.com> wrote:
Per your suggestion, I changed the following in the conf/autoload_configs/acl.conf.xml file:
<list name="domains" default="deny">
<node type="allow" domain="10.10.3.10"/>
<node type="allow" domain="10.10.3.11"/>
</list>
10.10.3.10 and 10.10.3.11 are the ip addresses of our internal servers. However, the calls still fail with the 407 Proxy Authentication Required message.
I get the following log output when I issue the command, reloadacl:
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:954 Created ip list rfc1918.auto default (deny)
freeswitch@internal> 2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 10.0.0.0/8 (allow) [] to list rfc1918.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 172.16.0.0/12 (allow) [] to list rfc1918.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 192.168.0.0/16 (allow) [] to list rfc1918.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:962 Created ip list wan.auto default (allow)
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 10.0.0.0/8(deny) [] to list wan.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 172.16.0.0/12 (deny) [] to list wan.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 192.168.0.0/16 (deny) [] to list wan.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:970 Created ip list nat.auto default (deny)
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:972 Adding 10.10.3.12/255.255.255.128 (deny) to list nat.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 10.0.0.0/8(allow) [] to list nat.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 172.16.0.0/12 (allow) [] to list nat.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 192.168.0.0/16 (allow) [] to list nat.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:981 Created ip list loopback.auto default (deny)
2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 127.0.0.0/8(allow) [] to list loopback.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:987 Created ip list localnet.auto default (deny)
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:990 Adding 10.10.3.12/255.255.255.128 (allow) to list localnet.auto
2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:1015 Created ip list domains default (deny)
2010-04-09 12:06:31.259954 [WARNING] switch_core.c:1046 Cannot locate domain 10.10.3.10
2010-04-09 12:06:31.259954 [WARNING] switch_core.c:1046 Cannot locate domain 10.10.3.11
Am I doing something incorrectly?
I'm afraid so. :) <node type="allow" cidr="10.10.3.10/32"/> <node type="allow" cidr="10.10.3.11/32"/> You're not allowing a domain in, you're allowing an IP address. -MC