You need this:
    <param name="apply-inbound-acl" value="domains"/>



On 5 May 2014 17:13, Victor Chukalovskiy <victor.chukalovskiy@gmail.com> wrote:
Hello,

Coming from wholesale background, my FS's run without any registrations.
So far everything was ACL-based using "apply-inbound-acl" and I did not
use any directory entries.

The only problem with this is that once I have all IPs together in one
big ALC, I can't identify which customer the call came from. E.g. need
to set my_channel_variable=customer1 if a call came from particular IPs
and my_channel_variable=customer2 if a call came from other IPs.

So I'm trying to move ACL logic into directory by means of defining a
user with cidr attribute. So far, no matter what I do FS challenges
INVITE with "407" even-though the INVITE comes from the IP that is
included in CIDR attribute for a user. I suppose for whatever reason
switch does not match INVITEs against CIDR's in the directory. Please
help me with that. WiKi is written from a somewhat different logic /
perspective, so it's hard to apply.

My SIP profile is:

<profile name="test">
   <gateways>
   </gateways>
   <domains>
   </domains>
   <settings>
     <param name="parse-invite-tel-params" value="true"/>
     <param name="user-agent-string" value="test"/>
     <param name="debug" value="0"/>
     <param name="sip-trace" value="no"/>
     <param name="log-auth-failures" value="true"/>
     <param name="rfc2833-pt" value="101"/>
     <param name="sip-port" value="5060"/>
     <param name="dialplan" value="XML"/>
     <param name="context" value="test"/>
     <param name="country" value="e164"/>
     <param name="dtmf-duration" value="2000"/>
     <param name="inbound-codec-prefs" value="$${default_codec_prefs}"/>
     <param name="outbound-codec-prefs" value="$${default_codec_prefs}"/>
     <param name="caller-id-type" value="none"/>
     <param name="rtp-timer-name" value="soft"/>
     <param name="rtp-ip" value="192.168.1.2"/>
     <param name="sip-ip" value="192.168.1.2"/>
     <param name="manage-presence" value="false"/>
     <param name="manage-shared-appearance" value="false"/>
     <param name="inbound-codec-negotiation" value="greedy"/>
     <param name="disable-transcoding" value="true"/>
     <param name="manual-redirect" value="false"/>
     <param name="disable-transfer" value="true"/>
     <param name="disable-register" value="false"/>
     <param name="auth-calls" value="true"/>
     <param name="rtp-timeout-sec" value="300"/>
     <param name="rtp-hold-timeout-sec" value="1800"/>
     <param name="pass-callee-id" value="false"/>
   </settings>
</profile>


Thanks!
-Victor




_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org