Best way to fully open inbound calls
Hi guys, I need to allow all calls on a profile to go through regardless of where they came from. One way to do it is to create my own ACL list like this: <list name="open" default="allow"> <node type="allow" cidr="192.168.42.42/32"/> //Note that it does not work without at least one node in the list even if the list's default is "allow" </list> and then use that in my sip profile: <param name="apply-inbound-acl" value="open"/> This works but is there a more standard way to do it?
Set a profile to not auth, like the external profile is by default. Set the dial plan context in that profile appropriately to the destinations it should be able to reach.
On Jan 16, 2017, at 2:15 PM, Oleg Stolyar <olegstolyar@gmail.com> wrote:
Hi guys,
I need to allow all calls on a profile to go through regardless of where they came from. One way to do it is to create my own ACL list like this:
<list name="open" default="allow"> <node type="allow" cidr="192.168.42.42/32 <http://192.168.42.42/32>"/> //Note that it does not work without at least one node in the list even if the list's default is "allow" </list>
and then use that in my sip profile: <param name="apply-inbound-acl" value="open"/>
This works but is there a more standard way to do it?
You can set this in your profile: <param name="accept-blind-auth" value="true"/> But it's too risky. Also you can use <param name="auth-calls" value="false"/> like M.Jerris suggested 2017-01-17 0:19 GMT+05:00 Michael Jerris <mike@jerris.com>:
Set a profile to not auth, like the external profile is by default. Set the dial plan context in that profile appropriately to the destinations it should be able to reach.
On Jan 16, 2017, at 2:15 PM, Oleg Stolyar <olegstolyar@gmail.com> wrote:
Hi guys,
I need to allow all calls on a profile to go through regardless of where they came from. One way to do it is to create my own ACL list like this:
<list name="open" default="allow"> <node type="allow" cidr="192.168.42.42/32"/> //Note that it does not work without at least one node in the list even if the list's default is "allow" </list>
and then use that in my sip profile: <param name="apply-inbound-acl" value="open"/>
This works but is there a more standard way to do it?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Артур
Perfect, auth-calls is what I've been looking for. Thanks guys! On Mon, Jan 16, 2017 at 11:32 AM, Artur Mega <findmeinwland@gmail.com> wrote:
You can set this in your profile:
<param name="accept-blind-auth" value="true"/>
But it's too risky. Also you can use
<param name="auth-calls" value="false"/>
like M.Jerris suggested
2017-01-17 0:19 GMT+05:00 Michael Jerris <mike@jerris.com>:
Set a profile to not auth, like the external profile is by default. Set the dial plan context in that profile appropriately to the destinations it should be able to reach.
On Jan 16, 2017, at 2:15 PM, Oleg Stolyar <olegstolyar@gmail.com> wrote:
Hi guys,
I need to allow all calls on a profile to go through regardless of where they came from. One way to do it is to create my own ACL list like this:
<list name="open" default="allow"> <node type="allow" cidr="192.168.42.42/32"/> //Note that it does not work without at least one node in the list even if the list's default is "allow" </list>
and then use that in my sip profile: <param name="apply-inbound-acl" value="open"/>
This works but is there a more standard way to do it?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Артур
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (3)
-
Artur Mega
-
Michael Jerris
-
Oleg Stolyar