Hello

I'm not sure to understand why i should use a so strange trick. Using "internal" profile for external trunk can't be a security leak ? If my provider change something about the 10.7.6.60 gateway, the trunk will no longer work until i update my configuration ?

Nevertheless i tried to apply your advice, so i moved by gateway in internal profile and i created a new user

/usr/local/freeswitch/conf/dialplan/provider_inbound_calls/user.xml

<include>
  <user id="provider_gw1"  cidr="10.7.1.60/32" >
    <params>
      <param name="password" value="xxxxxx"/>
    </params>
  </user>
  <variables>
     <variable name="user_context" value="provider_inbound_calls"/>
  </variables>

</include>

Unfortunately it did not work, but i have the good DID number in [0557590xxx@10.7.1.60]

2015-05-02 18:30:15.940354 [DEBUG] sofia.c:9015 IP 91.121.129.20 Rejected by acl "domains". Falling back to Digest auth.
2015-05-02 18:30:15.940354 [WARNING] sofia_reg.c:2827 Can't find user [anonymous@10.7.1.60] from 91.121.129.20
You must define a domain called '10.7.1.60' in your directory and add a user with the id="anonymous" attribute
and you must configure your device to use the proper domain in it's authentication credentials.
2015-05-02 18:30:15.940354 [WARNING] sofia_reg.c:1687 SIP auth failure (INVITE) on sofia profile 'internal' for [0557590xxx@10.7.1.60] from ip 91.121.129.20
2015-05-02 18:30:15.940354 [DEBUG] switch_core_session.c:1061 Send signal sofia/internal/0967212xxx@sip.ovh.fr [BREAK]
2015-05-02 18:30:15.940354 [NOTICE] sofia.c:2063 Hangup sofia/internal/0967212xxx@sip.ovh.fr [CS_NEW] [CALL_REJECTED]



Just for fun i created a user anonymous in domain 10.7.1.60 and reloaded with reloadxml but i still have the same message.

/usr/local/freeswitch/conf/dialplan/10.7.1.60/user.xml

<include>
  <user id="anonymous"  cidr="10.7.1.60/32" >
    <params>
      <param name="password" value="xxxxx"/>
    </params>
  </user>
  <variables>
     <variable name="user_context" value="10.7.1.60"/>
  </variables>
</include>




Thanks


On 02/05/2015 08:17, Sergey Safarov wrote:
Try
1) link gateway to "internal" profile;
2) create dialplan with name "provider_inbound_calls" and add required extensions;
3) create user "provider_gw1" in directory with attribute cidr="10.7.1.60/32" (value from you example), with random value in param "password", and "provider_inbound_calls"  value in variable "user_context" 
After it you can make inbound call from.
If provider has several gateways, add user record in directory for each gateway.

Sergey