In log you can see invite arrived from IP address 91.121.129.20 Change IP 10.7.1.60/32 to 91.121.129.20/32 I'm not sure to understand why i should use a so strange trick. Using "internal" profile for external trunk can't be a security leak ? It is not problem. In this case profile used for authenticate call by user "provider_gw1". Real call processing executed in dialplan "provider_inbound_calls". In this dialplan you can allow one DID number and block all other. If my provider change something about the 10.7.6.60 gateway, the trunk will no longer work until i update my configuration ? If provider can configure username and password for DID call authentication you can remove "cird" attribute. If username and password can't be configured, then say me how much DID number provider assigned for you. Sergey On Sat, May 2, 2015 at 7:52 PM, Tanguy <phenix@vfemail.net> wrote:
Hello
I'm not sure to understand why i should use a so strange trick. Using "internal" profile for external trunk can't be a security leak ? If my provider change something about the 10.7.6.60 gateway, the trunk will no longer work until i update my configuration ?
Nevertheless i tried to apply your advice, so i moved by gateway in internal profile and i created a new user
/usr/local/freeswitch/conf/dialplan/provider_inbound_calls/user.xml
<include> <user id="provider_gw1" cidr="10.7.1.60/32" > <params> <param name="password" value="xxxxxx"/> </params> </user> <variables> <variable name="user_context" value="provider_inbound_calls"/> </variables>
</include>
Unfortunately it did not work, but i have the good DID number in [ 0557590xxx@10.7.1.60]
2015-05-02 18:30:15.940354 [DEBUG] sofia.c:9015 IP 91.121.129.20 Rejected by acl "domains". Falling back to Digest auth. 2015-05-02 18:30:15.940354 [WARNING] sofia_reg.c:2827 Can't find user [ anonymous@10.7.1.60] from 91.121.129.20 You must define a domain called '10.7.1.60' in your directory and add a user with the id="anonymous" attribute and you must configure your device to use the proper domain in it's authentication credentials. 2015-05-02 18:30:15.940354 [WARNING] sofia_reg.c:1687 SIP auth failure (INVITE) on sofia profile 'internal' for *[0557590xxx@10.7.1.60 <0557590xxx@10.7.1.60>] *from ip 91.121.129.20 2015-05-02 18:30:15.940354 [DEBUG] switch_core_session.c:1061 Send signal sofia/internal/0967212xxx@sip.ovh.fr [BREAK] 2015-05-02 18:30:15.940354 [NOTICE] sofia.c:2063 Hangup sofia/internal/0967212xxx@sip.ovh.fr [CS_NEW] [CALL_REJECTED]
Just for fun i created a user anonymous in domain 10.7.1.60 and reloaded with reloadxml but i still have the same message.
/usr/local/freeswitch/conf/dialplan/10.7.1.60/user.xml
<include> <user id="anonymous" cidr="10.7.1.60/32" > <params> <param name="password" value="xxxxx"/> </params> </user> <variables> <variable name="user_context" value="10.7.1.60"/> </variables> </include>
Thanks
On 02/05/2015 08:17, Sergey Safarov wrote:
Try 1) link gateway to "internal" profile; 2) create dialplan with name "provider_inbound_calls" and add required extensions; 3) create user "provider_gw1" in directory with attribute cidr=" 10.7.1.60/32" (value from you example), with random value in param "password", and "provider_inbound_calls" value in variable "user_context" After it you can make inbound call from. If provider has several gateways, add user record in directory for each gateway.
Sergey
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org