On Fri, Apr 9, 2010 at 10:07 AM, Ken Fulmer <kenfulmer@icstechnologysolutions.com> wrote:

Per your suggestion, I changed the following in the conf/autoload_configs/acl.conf.xml file:

 

    <list name="domains" default="deny">

      <node type="allow" domain="10.10.3.10"/>

      <node type="allow" domain="10.10.3.11"/>

    </list>

 

10.10.3.10 and 10.10.3.11 are the ip addresses of our internal servers. However, the calls still fail with the 407 Proxy Authentication Required message.

 

I get the following log output when I issue the command, reloadacl:

 

2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:954 Created ip list rfc1918.auto default (deny)

freeswitch@internal> 2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 10.0.0.0/8 (allow) [] to list rfc1918.auto

2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 172.16.0.0/12 (allow) [] to list rfc1918.auto

2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 192.168.0.0/16 (allow) [] to list rfc1918.auto

2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:962 Created ip list wan.auto default (allow)

2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 10.0.0.0/8 (deny) [] to list wan.auto

2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 172.16.0.0/12 (deny) [] to list wan.auto

2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 192.168.0.0/16 (deny) [] to list wan.auto

2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:970 Created ip list nat.auto default (deny)

2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:972 Adding 10.10.3.12/255.255.255.128 (deny) to list nat.auto

2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 10.0.0.0/8 (allow) [] to list nat.auto

2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 172.16.0.0/12 (allow) [] to list nat.auto

2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 192.168.0.0/16 (allow) [] to list nat.auto

2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:981 Created ip list loopback.auto default (deny)

2010-04-09 12:06:31.259954 [NOTICE] switch_utils.c:195 Adding 127.0.0.0/8 (allow) [] to list loopback.auto

2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:987 Created ip list localnet.auto default (deny)

2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:990 Adding 10.10.3.12/255.255.255.128 (allow) to list localnet.auto

2010-04-09 12:06:31.259954 [NOTICE] switch_core.c:1015 Created ip list domains default (deny)

2010-04-09 12:06:31.259954 [WARNING] switch_core.c:1046 Cannot locate domain 10.10.3.10

2010-04-09 12:06:31.259954 [WARNING] switch_core.c:1046 Cannot locate domain 10.10.3.11

 

Am I doing something incorrectly?

I'm afraid so. :)

<node type="allow" cidr="10.10.3.10/32"/>
<node type="allow" cidr="10.10.3.11/32"/>

You're not allowing a domain in, you're allowing an IP address.
-MC