Hello, I have recently compiled and installed freeswitch, and it is running with no problems. I can make and receive calls via my defined gateway with my provider, VoipTalk. My problem lies in that I have several DIDs with Voiptalk, and I have the option of routing them directly to my IP address as a SIP call. When I do this and call one of the numbers, not much happens. So I put sofia into debug sip mode, and observed the same message repeating :- ------------------------------------------------------------------------ send 866 bytes to udp/[217.14.138.126]:5060 at 22:22:15.236893: ------------------------------------------------------------------------ SIP/2.0 407 Proxy Authentication Required 217.14.138.126 being one of my providers' machines. What i'd like to know is how can I get freeswitch to stop asking for authentication to my provider, without putting a blacket "allow" in the domain ACLS. Voiptalk have a large number of IP addresses that they use to send the outbound calls, so listing them all would be a chore. Thanks in advance, --Neil.
Are you having them come into the internal profile? (i.e. port 5060?) If so then make some changes: In conf/sip-profiles/internal.xml remove line: <param name="apply-inbound-acl" value="domains"/> In conf/vars.xml change this line to false: <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/> Restart the profile and try again. NOTE: this leaves you pretty much wide open, so I would recommend you make sure that your dialplan is locked down so that you don't get toll frauded... -MC On Wed, Nov 17, 2010 at 2:26 PM, Neil J. Macvicar <neilm@kernelspace.co.uk>wrote:
Hello,
I have recently compiled and installed freeswitch, and it is running with no problems. I can make and receive calls via my defined gateway with my provider, VoipTalk.
My problem lies in that I have several DIDs with Voiptalk, and I have the option of routing them directly to my IP address as a SIP call. When I do this and call one of the numbers, not much happens. So I put sofia into debug sip mode, and observed the same message repeating :-
------------------------------------------------------------------------ send 866 bytes to udp/[217.14.138.126]:5060 at 22:22:15.236893: ------------------------------------------------------------------------ SIP/2.0 407 Proxy Authentication Required
217.14.138.126 being one of my providers' machines.
What i'd like to know is how can I get freeswitch to stop asking for authentication to my provider, without putting a blacket "allow" in the domain ACLS. Voiptalk have a large number of IP addresses that they use to send the outbound calls, so listing them all would be a chore.
Thanks in advance, --Neil.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
"Restart the profile and try again. NOTE: this leaves you pretty much wide open, so I would recommend you make sure that your dialplan is locked down so that you don't get toll frauded..." Neil, a good way to avoid this would be to have two sip profiles - one for DIDs and one for registered users. Give each it's own dialplan context. That way the DID dialplan context can only allow the DIDs, while the registered user context can be a bit more flexible. Steve on iPhone On 18 Nov 2010, at 23:00, Michael Collins <msc@freeswitch.org> wrote:
Are you having them come into the internal profile? (i.e. port 5060?) If so then make some changes:
In conf/sip-profiles/internal.xml remove line: <param name="apply-inbound-acl" value="domains"/>
In conf/vars.xml change this line to false: <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/>
Restart the profile and try again. NOTE: this leaves you pretty much wide open, so I would recommend you make sure that your dialplan is locked down so that you don't get toll frauded...
-MC
On Wed, Nov 17, 2010 at 2:26 PM, Neil J. Macvicar <neilm@kernelspace.co.uk> wrote: Hello,
I have recently compiled and installed freeswitch, and it is running with no problems. I can make and receive calls via my defined gateway with my provider, VoipTalk.
My problem lies in that I have several DIDs with Voiptalk, and I have the option of routing them directly to my IP address as a SIP call. When I do this and call one of the numbers, not much happens. So I put sofia into debug sip mode, and observed the same message repeating :-
------------------------------------------------------------------------ send 866 bytes to udp/[217.14.138.126]:5060 at 22:22:15.236893: ------------------------------------------------------------------------ SIP/2.0 407 Proxy Authentication Required
217.14.138.126 being one of my providers' machines.
What i'd like to know is how can I get freeswitch to stop asking for authentication to my provider, without putting a blacket "allow" in the domain ACLS. Voiptalk have a large number of IP addresses that they use to send the outbound calls, so listing them all would be a chore.
Thanks in advance, --Neil.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks for the pointers guys - i'll try out your suggestions and see how it goes. Regards, --Neil. ----- Original Message ----- From: "Steven Ayre" <steveayre@gmail.com> To: "FreeSWITCH Users Help" <freeswitch-users@lists.freeswitch.org> Sent: Friday, 19 November, 2010 9:53:01 AM Subject: Re: [Freeswitch-users] Receiving calls from incoming DID's " Restart the profile and try again. NOTE: this leaves you pretty much wide open, so I would recommend you make sure that your dialplan is locked down so that you don't get toll frauded..." Neil, a good way to avoid this would be to have two sip profiles - one for DIDs and one for registered users. Give each it's own dialplan context. That way the DID dialplan context can only allow the DIDs, while the registered user context can be a bit more flexible. Steve on iPhone On 18 Nov 2010, at 23:00, Michael Collins < msc@freeswitch.org > wrote: Are you having them come into the internal profile? (i.e. port 5060?) If so then make some changes: In conf/sip-profiles/internal.xml remove line: <param name="apply-inbound-acl" value="domains"/> In conf/vars.xml change this line to false: <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/> Restart the profile and try again. NOTE: this leaves you pretty much wide open, so I would recommend you make sure that your dialplan is locked down so that you don't get toll frauded... -MC On Wed, Nov 17, 2010 at 2:26 PM, Neil J. Macvicar < neilm@kernelspace.co.uk > wrote: Hello, I have recently compiled and installed freeswitch, and it is running with no problems. I can make and receive calls via my defined gateway with my provider, VoipTalk. My problem lies in that I have several DIDs with Voiptalk, and I have the option of routing them directly to my IP address as a SIP call. When I do this and call one of the numbers, not much happens. So I put sofia into debug sip mode, and observed the same message repeating :- ------------------------------------------------------------------------ send 866 bytes to udp/[217.14.138.126]:5060 at 22:22:15.236893: ------------------------------------------------------------------------ SIP/2.0 407 Proxy Authentication Required 217.14.138.126 being one of my providers' machines. What i'd like to know is how can I get freeswitch to stop asking for authentication to my provider, without putting a blacket "allow" in the domain ACLS. Voiptalk have a large number of IP addresses that they use to send the outbound calls, so listing them all would be a chore. Thanks in advance, --Neil. _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org _______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
In order to have a second sip profile for the DIDs that means you would have to specify a different port for each profile, as far as I know. Is there a one-port solution for incoming from DIDs and registered users? -Avi On Fri, Nov 19, 2010 at 11:53 AM, Steven Ayre <steveayre@gmail.com> wrote:
"Restart the profile and try again. NOTE: this leaves you pretty much wide open, so I would recommend you make sure that your dialplan is locked down so that you don't get toll frauded..."
Neil, a good way to avoid this would be to have two sip profiles - one for DIDs and one for registered users. Give each it's own dialplan context. That way the DID dialplan context can only allow the DIDs, while the registered user context can be a bit more flexible.
Steve on iPhone
On 18 Nov 2010, at 23:00, Michael Collins <msc@freeswitch.org> wrote:
Are you having them come into the internal profile? (i.e. port 5060?) If so then make some changes:
In conf/sip-profiles/internal.xml remove line: <param name="apply-inbound-acl" value="domains"/>
In conf/vars.xml change this line to false: <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/>
Restart the profile and try again. NOTE: this leaves you pretty much wide open, so I would recommend you make sure that your dialplan is locked down so that you don't get toll frauded...
-MC
On Wed, Nov 17, 2010 at 2:26 PM, Neil J. Macvicar <<neilm@kernelspace.co.uk> neilm@kernelspace.co.uk> wrote:
Hello,
I have recently compiled and installed freeswitch, and it is running with no problems. I can make and receive calls via my defined gateway with my provider, VoipTalk.
My problem lies in that I have several DIDs with Voiptalk, and I have the option of routing them directly to my IP address as a SIP call. When I do this and call one of the numbers, not much happens. So I put sofia into debug sip mode, and observed the same message repeating :-
------------------------------------------------------------------------ send 866 bytes to udp/[217.14.138.126]:5060 at 22:22:15.236893: ------------------------------------------------------------------------ SIP/2.0 407 Proxy Authentication Required
217.14.138.126 being one of my providers' machines.
What i'd like to know is how can I get freeswitch to stop asking for authentication to my provider, without putting a blacket "allow" in the domain ACLS. Voiptalk have a large number of IP addresses that they use to send the outbound calls, so listing them all would be a chore.
Thanks in advance, --Neil.
_______________________________________________ FreeSWITCH-users mailing list <FreeSWITCH-users@lists.freeswitch.org> FreeSWITCH-users@lists.freeswitch.org <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:<http://lists.freeswitch.org/mailman/options/freeswitch-users> http://lists.freeswitch.org/mailman/options/freeswitch-users <http://www.freeswitch.org>http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Different port or different IP. Or both. -Steve On 19 November 2010 11:09, Avi Marcus <Avi@amarcus.com> wrote:
In order to have a second sip profile for the DIDs that means you would have to specify a different port for each profile, as far as I know. Is there a one-port solution for incoming from DIDs and registered users? -Avi
On Fri, Nov 19, 2010 at 11:53 AM, Steven Ayre <steveayre@gmail.com> wrote:
"Restart the profile and try again. NOTE: this leaves you pretty much wide open, so I would recommend you make sure that your dialplan is locked down so that you don't get toll frauded..." Neil, a good way to avoid this would be to have two sip profiles - one for DIDs and one for registered users. Give each it's own dialplan context. That way the DID dialplan context can only allow the DIDs, while the registered user context can be a bit more flexible.
Steve on iPhone On 18 Nov 2010, at 23:00, Michael Collins <msc@freeswitch.org> wrote:
Are you having them come into the internal profile? (i.e. port 5060?) If so then make some changes: In conf/sip-profiles/internal.xml remove line: <param name="apply-inbound-acl" value="domains"/> In conf/vars.xml change this line to false: <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/> Restart the profile and try again. NOTE: this leaves you pretty much wide open, so I would recommend you make sure that your dialplan is locked down so that you don't get toll frauded... -MC On Wed, Nov 17, 2010 at 2:26 PM, Neil J. Macvicar <neilm@kernelspace.co.uk> wrote:
Hello,
I have recently compiled and installed freeswitch, and it is running with no problems. I can make and receive calls via my defined gateway with my provider, VoipTalk.
My problem lies in that I have several DIDs with Voiptalk, and I have the option of routing them directly to my IP address as a SIP call. When I do this and call one of the numbers, not much happens. So I put sofia into debug sip mode, and observed the same message repeating :-
------------------------------------------------------------------------ send 866 bytes to udp/[217.14.138.126]:5060 at 22:22:15.236893:
------------------------------------------------------------------------ SIP/2.0 407 Proxy Authentication Required
217.14.138.126 being one of my providers' machines.
What i'd like to know is how can I get freeswitch to stop asking for authentication to my provider, without putting a blacket "allow" in the domain ACLS. Voiptalk have a large number of IP addresses that they use to send the outbound calls, so listing them all would be a chore.
Thanks in advance, --Neil.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (4)
-
Avi Marcus
-
Michael Collins
-
Neil J. Macvicar
-
Steven Ayre