-A PREROUTING -i eth+ -p tcp --dport 5060:5082 -m string --string "sip:YOUR_HOSTNAME.no-ip.com" --algo bm --icase -j NEWSIP

On Fri, Sep 18, 2015 at 8:23 PM, Tanguy <phenix@vfemail.net> wrote:

Hello Sergey

I am agree with you that my dial plan can be risky I used ACL but this can be not sufficient. I want to be able to call any internal sip extension, but i don't want that this piece dialplan to be usable reach external numbers.

For extra protection, add into dialplan

<extension name="blockCallToNonExistenDomain">
    <condition regex="any">
        <regex field="${sip_to_host}" expression="^[\d\.]+$"/>
        <regex field="${domain_exists(${sip_to_host})}" expression="^false$"/>
        <action application="info"/>
        <action application="log"
            data="ERR Unauthorised call with uuid &#34;${uuid}&#34; is processed in context &#34;${context}&#34;! Source IP: ${network_addr}"/>
        <action application="hangup" data="INCOMING_CALL_BARRED"/>
    </condition>
</extension>

<extension name="checkUserExist">
    <condition field="${user_exists(id ${destination_number} ${sip_to_host})}" expression="^false$">
        <action application="hangup" data="UNALLOCATED_NUMBER"/>
    </condition>
</extension>

I probably need to protect theses variables ( sip_to_user must be only a locally registered sip extension )  or avoid using them ( maybe using multiple conditions field for each domain ? )

"user_exists" function allow you block call to non existed destination.

On my FS host created personal dialplan for each domain. Most of domain related checks related located in this dialplans.

I don't fully understand your initial example:

<action application="bridge" data="{sip_invite_to_uri=<sip:${destination_number}@mydomain.org>}user/reg_user@mydomain.org"/>

It is copied from http://lists.freeswitch.org/pipermail/freeswitch-users/2015-August/115047.html message

Is is response I write via my mobile phone and cannot edit correctly.

  

What is reg_user for freeswitch1?

reg_user related to message http://lists.freeswitch.org/pipermail/freeswitch-users/2015-August/115047.html

 

What should i use on freeswitch2 dialplan to recognize the inbound call ?

What is I may recommend to block unauthorised calls and fraud control I write above. Also I can recommend configure

1) fail2ban

2) nibblebill

3) destination_number format checks

 

Thanks

_________________________________________________________________________
Professional FreeSWITCH Consulting Services: 
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org