In profile apply-register-acl Allow users to register from a particular cidr without authenticating You can set acl in user xml, if the user don't have acl, then it make a digest Directory settings: <user id="1000" number-alias="1000" cidr="12.34.56.78/32,20.0.0.0/8"> Used with in conjunction with apply-inbound-acl and apply-register-acl <param name="auth-acl" value="1.2.3.0/8"/> Used in conjunction with auth-calls Em domingo, 28 de junho de 2015, Luiz Fernando Softov < fernandosoftov@gmail.com <javascript:_e(%7B%7D,'cvml','fernandosoftov@gmail.com');>> escreveu:

In profile

apply-register-acl

Allow users to register from a particular cidr without authenticating

Directory settings:

<user id="1000" number-alias="1000" cidr="12.34.56.78/32,20.0.0.0/8">

Used with in conjunction with apply-inbound-acl and apply-register-acl

<param name="auth-acl" value="1.2.3.0/8"/>

Used in conjunction with auth-calls

Em domingo, 28 de junho de 2015, Luiz Fernando Softov < fernandosoftov@gmail.com> escreveu:

...

You can set acl in user xml, if the user don't have acl, then it make a digest

Em domingo, 28 de junho de 2015, John Nash <john.nash778@gmail.com> escreveu:

...

I can always disable ACL and allow packets from certain Ips only at iptables level but just wanted to check if it can be done some easy way.

On Sun, Jun 28, 2015 at 4:16 PM, John Nash <john.nash778@gmail.com> wrote:

...

Yes if I remove ACL it will auth by digest but I want to keep acl so that requests from unwanted ips are rejected straight away.

On Sun, Jun 28, 2015 at 4:10 PM, Stanislav Sinyagin < ssinyagin@gmail.com> wrote:

...

But why do you need the acl then? If you remove it, you will get all requests authenticated. On Jun 28, 2015 12:36 PM, "John Nash" <john.nash778@gmail.com> wrote:

...

I am using acl but I also want to authenticate all Invites with digest challenge. The default config does not behave this way. Once my Invite is authenticated by acl it no longer sends 407.

Is there any way?

John

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com

Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com

FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com

Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com

FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

-- Luiz Fernando Softov http://www.softov.com.br fernando@softov.com.br

-- Luiz Fernando Softov http://www.softov.com.br fernando@softov.com.br

-- Luiz Fernando Softov http://www.softov.com.br fernando@softov.com.br