Hi, Sorry for the confusion, It shows true for the enabled acls. freeswitch@internal> acl 172.17.42.0 loopback.auto true freeswitch@internal> acl 172.17.42.1 172.17.42.0/24 true but I don't see any connection is happening to FS from openhab in log file, where can I see it ? Thanks, Kiran. On Mon, Oct 19, 2015 at 11:43 AM, Kiran Patil <kirantpatil@gmail.com> wrote:
Hi,
I have installed FS-1.6.2 on docker. I am facing below issue when acl is set but show false.
# /usr/local/freeswitch/bin/freeswitch -version FreeSWITCH version: 1.6.2+git~20150925T145020Z~643e3ff88f~64bit (git 643e3ff 2015-09-25 14:50:20Z 64bit)
I added acls did as below
# reloadacl reloadxml ... ... 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 0.0.0.0/0 (deny) [] to list wan_v6.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding fe80::/10 (deny) [] to list wan_v6.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_core.c:1420 Created ip list wan_v4.auto default (allow) 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 0.0.0.0/8 (deny) [] to list wan_v4.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 10.0.0.0/8 (deny) [] to list wan_v4.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 172.16.0.0/12 (deny) [] to list wan_v4.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 192.168.0.0/16 (deny) [] to list wan_v4.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 169.254.0.0/16 (deny) [] to list wan_v4.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding ::/0 (deny) [] to list wan_v4.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_core.c:1432 Created ip list any_v6.auto default (allow) 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 0.0.0.0/0 (deny) [] to list any_v6.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_core.c:1439 Created ip list any_v4.auto default (allow) 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding ::/0 (deny) [] to list any_v4.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_core.c:1446 Created ip list nat.auto default (deny) 2015-10-19 06:06:55.932042 [NOTICE] switch_core.c:1448 Adding 172.17.0.1/255.255.0.0 (deny) to list nat.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 10.0.0.0/8 (allow) [] to list nat.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 172.16.0.0/12 (allow) [] to list nat.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 192.168.0.0/16 (allow) [] to list nat.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 100.64.0.0/10 (allow) [] to list nat.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_core.c:1458 Created ip list loopback.auto default (deny) 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 127.0.0.0/8 (allow) [] to list loopback.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding ::1/128 (allow) [] to list loopback.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_core.c:1465 Created ip list localnet.auto default (deny) 2015-10-19 06:06:55.932042 [NOTICE] switch_core.c:1468 Adding 172.17.0.1/255.255.0.0 (allow) to list localnet.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_core.c:1493 Created ip list loopback.auto default (allow) 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 172.17.42.0/16 (allow) [] to list loopback.auto 2015-10-19 06:06:55.932042 [NOTICE] switch_core.c:1493 Created ip list lan default (allow) 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 192.168.42.0/24 (deny) [] to list lan 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 192.168.42.42/32 (allow) [] to list lan 2015-10-19 06:06:55.932042 [NOTICE] switch_core.c:1493 Created ip list domains default (deny) 2015-10-19 06:06:55.932042 [NOTICE] switch_utils.c:534 Adding 192.0.2.0/24 (allow) [brian@172.17.0.1] to list domains 2015-10-19 06:06:55.932042 [INFO] switch_time.c:1415 Timezone reloaded 1781 definitions
I tried to check if acl is working fine and everything shows false.
freeswitch@internal> acl 127.0.0.0 false freeswitch@internal> acl 127.0.0.0/8 false freeswitch@internal> acl 172.17.0.1 false freeswitch@internal> acl 172.17.0.1/255.255.0.0 false freeswitch@internal> acl 172.17.42.0/16 false freeswitch@internal> acl 172.17.42.0/24 false freeswitch@internal> acl 172.17.42.0/32 false freeswitch@internal> acl 192.168.0.0/16 false
Please let me know how to debug this issue.
Thanks, Kiran.