Hello I'm not sure to understand why i should use a so strange trick. Using "internal" profile for external trunk can't be a security leak ? If my provider change something about the 10.7.6.60 gateway, the trunk will no longer work until i update my configuration ? Nevertheless i tried to apply your advice, so i moved by gateway in internal profile and i created a new user /usr/local/freeswitch/conf/dialplan/provider_inbound_calls/user.xml <include> <user id="provider_gw1" cidr="10.7.1.60/32" > <params> <param name="password" value="xxxxxx"/> </params> </user> <variables> <variable name="user_context" value="provider_inbound_calls"/> </variables> </include> Unfortunately it did not work, but i have the good DID number in [0557590xxx@10.7.1.60] 2015-05-02 18:30:15.940354 [DEBUG] sofia.c:9015 IP 91.121.129.20 Rejected by acl "domains". Falling back to Digest auth. 2015-05-02 18:30:15.940354 [WARNING] sofia_reg.c:2827 Can't find user [anonymous@10.7.1.60] from 91.121.129.20 You must define a domain called '10.7.1.60' in your directory and add a user with the id="anonymous" attribute and you must configure your device to use the proper domain in it's authentication credentials. 2015-05-02 18:30:15.940354 [WARNING] sofia_reg.c:1687 SIP auth failure (INVITE) on sofia profile 'internal' for *[0557590xxx@10.7.1.60] *from ip 91.121.129.20 2015-05-02 18:30:15.940354 [DEBUG] switch_core_session.c:1061 Send signal sofia/internal/0967212xxx@sip.ovh.fr [BREAK] 2015-05-02 18:30:15.940354 [NOTICE] sofia.c:2063 Hangup sofia/internal/0967212xxx@sip.ovh.fr [CS_NEW] [CALL_REJECTED] Just for fun i created a user anonymous in domain 10.7.1.60 and reloaded with reloadxml but i still have the same message. /usr/local/freeswitch/conf/dialplan/10.7.1.60/user.xml <include> <user id="anonymous" cidr="10.7.1.60/32" > <params> <param name="password" value="xxxxx"/> </params> </user> <variables> <variable name="user_context" value="10.7.1.60"/> </variables> </include> Thanks On 02/05/2015 08:17, Sergey Safarov wrote:
Try 1) link gateway to "internal" profile; 2) create dialplan with name "provider_inbound_calls" and add required extensions; 3) create user "provider_gw1" in directory with attribute cidr="10.7.1.60/32 <http://10.7.1.60/32>" (value from you example), with random value in param "password", and "provider_inbound_calls" value in variable "user_context" After it you can make inbound call from. If provider has several gateways, add user record in directory for each gateway.
Sergey