Checking authorisation on external profile
Good day, How can I check incoming call to the External profile? Theoretically, both authorised and unauthorised users can call via external profile. Tried to detect authorised users with ${sip_authorised} variable, but it doesn't help. :( -- Arthur
If a profile doesn't perform authorization, as is the case in the default external profile, no calls are authorized as we do not attempt to authorize them. You can't know if a call is authorized without challenging them.
On May 4, 2016, at 6:40 AM, Artur Mega <findmeinwland@gmail.com> wrote:
Good day,
How can I check incoming call to the External profile? Theoretically, both authorised and unauthorised users can call via external profile. Tried to detect authorised users with ${sip_authorised} variable, but it doesn't help. :(
--
Arthur _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks, Michael for reply Look, let's assume that call will come to internal profile (where authorisation is required). But then unauthorised call wont reach the dialplan, becouse it's not authorised... But i don't wanna drop such call, it must be allowed to go further to special context in dialplan. Desired algorythm is like: IF incoming call is authenticated THEN forward it to one dialplan ELSE forward it to another dialplan (don't drop) END. Who knows how can it be solved? 2016-05-04 20:14 GMT+05:00 Michael Jerris <mike@jerris.com>:
If a profile doesn't perform authorization, as is the case in the default external profile, no calls are authorized as we do not attempt to authorize them. You can't know if a call is authorized without challenging them.
On May 4, 2016, at 6:40 AM, Artur Mega <findmeinwland@gmail.com> wrote:
Good day,
How can I check incoming call to the External profile? Theoretically, both authorised and unauthorised users can call via external profile. Tried to detect authorised users with ${sip_authorised} variable, but it doesn't help. :(
--
Arthur _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Arthur
Can't you redirect incoming calls without authentication to external profile. For example from providers and other calls from extensions to internal profile? On Fri, May 6, 2016, 09:11 Artur Mega <findmeinwland@gmail.com> wrote:
Thanks, Michael for reply
Look, let's assume that call will come to internal profile (where authorisation is required). But then unauthorised call wont reach the dialplan, becouse it's not authorised... But i don't wanna drop such call, it must be allowed to go further to special context in dialplan. Desired algorythm is like:
IF incoming call is authenticated THEN forward it to one dialplan ELSE forward it to another dialplan (don't drop) END.
Who knows how can it be solved?
2016-05-04 20:14 GMT+05:00 Michael Jerris <mike@jerris.com>:
If a profile doesn't perform authorization, as is the case in the default external profile, no calls are authorized as we do not attempt to authorize them. You can't know if a call is authorized without challenging them.
On May 4, 2016, at 6:40 AM, Artur Mega <findmeinwland@gmail.com> wrote:
Good day,
How can I check incoming call to the External profile? Theoretically, both authorised and unauthorised users can call via external profile. Tried to detect authorised users with ${sip_authorised} variable, but it doesn't help. :(
--
Arthur _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Arthur _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Gregor Nanger *CTO* t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485 • Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia • www.infomedia.si
You can create directory record for provider equipment and Auth it by ip. Then you can accept call on internall profile. On Fri, May 6, 2016, 10:09 Artur Mega <findmeinwland@gmail.com> wrote:
Thanks, Michael for reply
Look, let's assume that call will come to internal profile (where authorisation is required). But then unauthorised call wont reach the dialplan, becouse it's not authorised... But i don't wanna drop such call, it must be allowed to go further to special context in dialplan. Desired algorythm is like:
IF incoming call is authenticated THEN forward it to one dialplan ELSE forward it to another dialplan (don't drop) END.
Who knows how can it be solved?
2016-05-04 20:14 GMT+05:00 Michael Jerris <mike@jerris.com>:
If a profile doesn't perform authorization, as is the case in the default external profile, no calls are authorized as we do not attempt to authorize them. You can't know if a call is authorized without challenging them.
On May 4, 2016, at 6:40 AM, Artur Mega <findmeinwland@gmail.com> wrote:
Good day,
How can I check incoming call to the External profile? Theoretically, both authorised and unauthorised users can call via external profile. Tried to detect authorised users with ${sip_authorised} variable, but it doesn't help. :(
--
Arthur _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Arthur _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I suppose you could "auth" all calls, but force context for ones that fail via xml curl, but you couldn't not auth calls that are going to fail auth before you challenge them, as computers are not psychic knowing the future On Friday, May 6, 2016, Artur Mega <findmeinwland@gmail.com> wrote:
Thanks, Michael for reply
Look, let's assume that call will come to internal profile (where authorisation is required). But then unauthorised call wont reach the dialplan, becouse it's not authorised... But i don't wanna drop such call, it must be allowed to go further to special context in dialplan. Desired algorythm is like:
IF incoming call is authenticated THEN forward it to one dialplan ELSE forward it to another dialplan (don't drop) END.
Who knows how can it be solved?
2016-05-04 20:14 GMT+05:00 Michael Jerris <mike@jerris.com <javascript:_e(%7B%7D,'cvml','mike@jerris.com');>>:
If a profile doesn't perform authorization, as is the case in the default external profile, no calls are authorized as we do not attempt to authorize them. You can't know if a call is authorized without challenging them.
On May 4, 2016, at 6:40 AM, Artur Mega <findmeinwland@gmail.com <javascript:_e(%7B%7D,'cvml','findmeinwland@gmail.com');>> wrote:
Good day,
How can I check incoming call to the External profile? Theoretically, both authorised and unauthorised users can call via external profile. Tried to detect authorised users with ${sip_authorised} variable, but it doesn't help. :(
--
Arthur _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Arthur
I have DNS SRV record (external profile) _sip._udp.example.com has SRV record 10 100 5080 sip.example.com. None authentication calls from other server to sip:1001@example.com work fine. Calls from phones (uses DNS SRV _sip._udp.) with authentication (incoming/outgoing) not work. Then I set SRV DNS record (internal profile) _sip._udp.example.com has SRV record 10 100 5060 sip.example.com. Calls from phones with authentication work. Sip uri calls without authentication not work. I need use one DNS SRV record to all calls. 2016-05-07 1:00 GMT+05:00 Michael Jerris <mike@jerris.com>:
I suppose you could "auth" all calls, but force context for ones that fail via xml curl, but you couldn't not auth calls that are going to fail auth before you challenge them, as computers are not psychic knowing the future
On Friday, May 6, 2016, Artur Mega <findmeinwland@gmail.com> wrote:
Thanks, Michael for reply
Look, let's assume that call will come to internal profile (where authorisation is required). But then unauthorised call wont reach the dialplan, becouse it's not authorised... But i don't wanna drop such call, it must be allowed to go further to special context in dialplan. Desired algorythm is like:
IF incoming call is authenticated THEN forward it to one dialplan ELSE forward it to another dialplan (don't drop) END.
Who knows how can it be solved?
2016-05-04 20:14 GMT+05:00 Michael Jerris <mike@jerris.com>:
If a profile doesn't perform authorization, as is the case in the default external profile, no calls are authorized as we do not attempt to authorize them. You can't know if a call is authorized without challenging them.
On May 4, 2016, at 6:40 AM, Artur Mega <findmeinwland@gmail.com> wrote:
Good day,
How can I check incoming call to the External profile? Theoretically, both authorised and unauthorised users can call via external profile. Tried to detect authorised users with ${sip_authorised} variable, but it doesn't help. :(
--
Arthur _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Arthur
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Arthur
You requred to install sip proxy (exmple Kamailio) to route call between two freeswith profiles. Call originated from example.com domain always routed to internal profile Call route from non example.com. domain to example.com.domain routed to external profile All other call must be blocked. чт, 12 мая 2016 г. в 16:44, Artur Mega <findmeinwland@gmail.com>:
I have DNS SRV record (external profile) _sip._udp.example.com has SRV record 10 100 5080 sip.example.com.
None authentication calls from other server to sip:1001@example.com work fine. Calls from phones (uses DNS SRV _sip._udp.) with authentication (incoming/outgoing) not work.
Then I set SRV DNS record (internal profile) _sip._udp.example.com has SRV record 10 100 5060 sip.example.com.
Calls from phones with authentication work. Sip uri calls without authentication not work.
I need use one DNS SRV record to all calls.
2016-05-07 1:00 GMT+05:00 Michael Jerris <mike@jerris.com>:
I suppose you could "auth" all calls, but force context for ones that fail via xml curl, but you couldn't not auth calls that are going to fail auth before you challenge them, as computers are not psychic knowing the future
On Friday, May 6, 2016, Artur Mega <findmeinwland@gmail.com> wrote:
Thanks, Michael for reply
Look, let's assume that call will come to internal profile (where authorisation is required). But then unauthorised call wont reach the dialplan, becouse it's not authorised... But i don't wanna drop such call, it must be allowed to go further to special context in dialplan. Desired algorythm is like:
IF incoming call is authenticated THEN forward it to one dialplan ELSE forward it to another dialplan (don't drop) END.
Who knows how can it be solved?
2016-05-04 20:14 GMT+05:00 Michael Jerris <mike@jerris.com>:
If a profile doesn't perform authorization, as is the case in the default external profile, no calls are authorized as we do not attempt to authorize them. You can't know if a call is authorized without challenging them.
On May 4, 2016, at 6:40 AM, Artur Mega <findmeinwland@gmail.com> wrote:
Good day,
How can I check incoming call to the External profile? Theoretically, both authorised and unauthorised users can call via external profile. Tried to detect authorised users with ${sip_authorised} variable, but it doesn't help. :(
--
Arthur
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Arthur
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Arthur _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Sergey, kamalio is good, but we wanted to use only freeswitch... We tried to play with directory, but it doesnt help (we dynamically generated directory with xml curl) 2016-05-12 20:20 GMT+05:00 Sergey Safarov <s.safarov@gmail.com>:
You requred to install sip proxy (exmple Kamailio) to route call between two freeswith profiles. Call originated from example.com domain always routed to internal profile Call route from non example.com. domain to example.com.domain routed to external profile All other call must be blocked.
чт, 12 мая 2016 г. в 16:44, Artur Mega <findmeinwland@gmail.com>:
I have DNS SRV record (external profile) _sip._udp.example.com has SRV record 10 100 5080 sip.example.com.
None authentication calls from other server to sip:1001@example.com work fine. Calls from phones (uses DNS SRV _sip._udp.) with authentication (incoming/outgoing) not work.
Then I set SRV DNS record (internal profile) _sip._udp.example.com has SRV record 10 100 5060 sip.example.com.
Calls from phones with authentication work. Sip uri calls without authentication not work.
I need use one DNS SRV record to all calls.
2016-05-07 1:00 GMT+05:00 Michael Jerris <mike@jerris.com>:
I suppose you could "auth" all calls, but force context for ones that fail via xml curl, but you couldn't not auth calls that are going to fail auth before you challenge them, as computers are not psychic knowing the future
On Friday, May 6, 2016, Artur Mega <findmeinwland@gmail.com> wrote:
Thanks, Michael for reply
Look, let's assume that call will come to internal profile (where authorisation is required). But then unauthorised call wont reach the dialplan, becouse it's not authorised... But i don't wanna drop such call, it must be allowed to go further to special context in dialplan. Desired algorythm is like:
IF incoming call is authenticated THEN forward it to one dialplan ELSE forward it to another dialplan (don't drop) END.
Who knows how can it be solved?
2016-05-04 20:14 GMT+05:00 Michael Jerris <mike@jerris.com>:
If a profile doesn't perform authorization, as is the case in the default external profile, no calls are authorized as we do not attempt to authorize them. You can't know if a call is authorized without challenging them.
On May 4, 2016, at 6:40 AM, Artur Mega <findmeinwland@gmail.com> wrote:
Good day,
How can I check incoming call to the External profile? Theoretically, both authorised and unauthorised users can call via external profile. Tried to detect authorised users with ${sip_authorised} variable, but it doesn't help. :(
--
Arthur
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Arthur
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Arthur _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Arthur
Have a look at this https://freeswitch.org/confluence/display/FREESWITCH/mod_dptools:+respond On Fri, May 13, 2016 at 10:34 AM, Artur Mega <findmeinwland@gmail.com> wrote:
Sergey, kamalio is good, but we wanted to use only freeswitch... We tried to play with directory, but it doesnt help (we dynamically generated directory with xml curl)
2016-05-12 20:20 GMT+05:00 Sergey Safarov <s.safarov@gmail.com>:
You requred to install sip proxy (exmple Kamailio) to route call between two freeswith profiles. Call originated from example.com domain always routed to internal profile Call route from non example.com. domain to example.com.domain routed to external profile All other call must be blocked.
чт, 12 мая 2016 г. в 16:44, Artur Mega <findmeinwland@gmail.com>:
I have DNS SRV record (external profile) _sip._udp.example.com has SRV record 10 100 5080 sip.example.com.
None authentication calls from other server to sip:1001@example.com work fine. Calls from phones (uses DNS SRV _sip._udp.) with authentication (incoming/outgoing) not work.
Then I set SRV DNS record (internal profile) _sip._udp.example.com has SRV record 10 100 5060 sip.example.com.
Calls from phones with authentication work. Sip uri calls without authentication not work.
I need use one DNS SRV record to all calls.
2016-05-07 1:00 GMT+05:00 Michael Jerris <mike@jerris.com>:
I suppose you could "auth" all calls, but force context for ones that fail via xml curl, but you couldn't not auth calls that are going to fail auth before you challenge them, as computers are not psychic knowing the future
On Friday, May 6, 2016, Artur Mega <findmeinwland@gmail.com> wrote:
Thanks, Michael for reply
Look, let's assume that call will come to internal profile (where authorisation is required). But then unauthorised call wont reach the dialplan, becouse it's not authorised... But i don't wanna drop such call, it must be allowed to go further to special context in dialplan. Desired algorythm is like:
IF incoming call is authenticated THEN forward it to one dialplan ELSE forward it to another dialplan (don't drop) END.
Who knows how can it be solved?
2016-05-04 20:14 GMT+05:00 Michael Jerris <mike@jerris.com>:
If a profile doesn't perform authorization, as is the case in the default external profile, no calls are authorized as we do not attempt to authorize them. You can't know if a call is authorized without challenging them.
On May 4, 2016, at 6:40 AM, Artur Mega <findmeinwland@gmail.com> wrote:
Good day,
How can I check incoming call to the External profile? Theoretically, both authorised and unauthorised users can call via external profile. Tried to detect authorised users with ${sip_authorised} variable, but it doesn't help. :(
--
Arthur
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Arthur
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Arthur _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Arthur
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (5)
-
Artur Mega
-
Gregor Nanger
-
Michael Jerris
-
Russell Treleaven
-
Sergey Safarov