restrict gateway to domain
Hey! I’m having troubles restricting a gateway to a single domain in a multi-tenant freeswitch setup. It is clear for me that if the gateway is defined in sip_profiles everyone on the switch can bridge to "sofia/gateway/<gateway id>/<number>“. So I defined the gateway in directory/<domain>/<gateway>.xml. Now the gateway is wrapped in <domain name="<domain>"> tag, but users from other domains can still bridge to "sofia/gateway/<gateway id>/<number>“. What do I miss here? Thanks! Roman Dissauer
hi Roman, gateways are global anyway. It's up to the upper layers (XML dialplan, ESL appication) to take care about security and access permissions. On Mon, May 4, 2015 at 5:08 PM, Roman Dissauer <roman@dissauer.net> wrote:
Hey!
I’m having troubles restricting a gateway to a single domain in a multi-tenant freeswitch setup.
It is clear for me that if the gateway is defined in sip_profiles everyone on the switch can bridge to "sofia/gateway/<gateway id>/<number>“. So I defined the gateway in directory/<domain>/<gateway>.xml. Now the gateway is wrapped in <domain name="<domain>"> tag, but users from other domains can still bridge to "sofia/gateway/<gateway id>/<number>“.
What do I miss here?
Thanks! Roman Dissauer _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
That makes sense, so I don’t have to investigate further in this topic :) Thanks!
Am 04.05.2015 um 17:18 schrieb Stanislav Sinyagin <ssinyagin@gmail.com>:
hi Roman,
gateways are global anyway. It's up to the upper layers (XML dialplan, ESL appication) to take care about security and access permissions.
On Mon, May 4, 2015 at 5:08 PM, Roman Dissauer <roman@dissauer.net> wrote:
Hey!
I’m having troubles restricting a gateway to a single domain in a multi-tenant freeswitch setup.
It is clear for me that if the gateway is defined in sip_profiles everyone on the switch can bridge to "sofia/gateway/<gateway id>/<number>“. So I defined the gateway in directory/<domain>/<gateway>.xml. Now the gateway is wrapped in <domain name="<domain>"> tag, but users from other domains can still bridge to "sofia/gateway/<gateway id>/<number>“.
What do I miss here?
Thanks! Roman Dissauer _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Agreed. The system administrator creates the dialplans, so that is where routing to gateways is controlled. Bote
-----Original Message----- From: Stanislav Sinyagin Sent: Monday, 04 May, 2015 11:19 Subject: Re: [Freeswitch-users] restrict gateway to domain
hi Roman,
gateways are global anyway. It's up to the upper layers (XML dialplan, ESL appication) to take care about security and access permissions.
On Mon, May 4, 2015 at 5:08 PM, Roman Dissauer <roman@dissauer.net> wrote:
Hey!
I’m having troubles restricting a gateway to a single domain in a multi- tenant freeswitch setup.
It is clear for me that if the gateway is defined in sip_profiles everyone on the switch can bridge to "sofia/gateway/<gateway id>/<number>“. So I defined the gateway in directory/<domain>/<gateway>.xml. Now the gateway is wrapped in <domain name="<domain>"> tag, but users from other domains can still bridge to "sofia/gateway/<gateway id>/<number>“.
What do I miss here?
Thanks! Roman Dissauer
participants (3)
-
Bote Man
-
Roman Dissauer
-
Stanislav Sinyagin