Bind extension to an IP address
Hi Is it possible to bind an user/extension to a specific IP address? (e.g. extension 1001 can only log in from IP address 192.168.0.101) Thanks O.
if you serve configs xml_curl you can check that it you web app and return not found <http://wiki.freeswitch.org/wiki/Mod_xml_curl#General_.22Not_found.22_reply>if it's not coming from the correct ip. On 6/24/2012 9:34 AM, ocset wrote:
Hi
Is it possible to bind an user/extension to a specific IP address? (e.g. extension 1001 can only log in from IP address 192.168.0.101)
Thanks O.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Or do a check in the dialplan on that extension's outbound calls. Or only do IP auth for that account and not digest auth. -Avi On Mon, Jun 25, 2012 at 12:34 AM, Abaci <abaci64@gmail.com> wrote:
if you serve configs xml_curl you can check that it you web app and return not found <http://wiki.freeswitch.org/wiki/Mod_xml_curl#General_.22Not_found.22_reply>if it's not coming from the correct ip.
On 6/24/2012 9:34 AM, ocset wrote:
Hi
Is it possible to bind an user/extension to a specific IP address? (e.g. extension 1001 can only log in from IP address 192.168.0.101)
Thanks O.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services:consulting@freeswitch.orghttp://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Serverhttp://www.cudatel.com
Official FreeSWITCH Siteshttp://www.freeswitch.orghttp://wiki.freeswitch.orghttp://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.frees...
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
http://wiki.freeswitch.org/wiki/Acl#Users On Sun, Jun 24, 2012 at 5:25 PM, Avi Marcus <avi@avimarcus.net> wrote:
Or do a check in the dialplan on that extension's outbound calls. Or only do IP auth for that account and not digest auth. -Avi
On Mon, Jun 25, 2012 at 12:34 AM, Abaci <abaci64@gmail.com> wrote:
if you serve configs xml_curl you can check that it you web app and return not found if it's not coming from the correct ip.
On 6/24/2012 9:34 AM, ocset wrote:
Hi
Is it possible to bind an user/extension to a specific IP address? (e.g. extension 1001 can only log in from IP address 192.168.0.101)
Thanks O.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire AIM: anthm MSN:anthony_minessale@hotmail.com GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com IRC: irc.freenode.net #freeswitch FreeSWITCH Developer Conference sip:888@conference.freeswitch.org googletalk:conf+888@conference.freeswitch.org pstn:+19193869900
Is there an equivalent for gateways? I can't find a way to bind incoming calls from a CIDR to a particular gateway. On 25 June 2012 03:05, Anthony Minessale <anthony.minessale@gmail.com> wrote:
http://wiki.freeswitch.org/wiki/Acl#Users
On Sun, Jun 24, 2012 at 5:25 PM, Avi Marcus <avi@avimarcus.net> wrote:
Or do a check in the dialplan on that extension's outbound calls. Or only do IP auth for that account and not digest auth. -Avi
On Mon, Jun 25, 2012 at 12:34 AM, Abaci <abaci64@gmail.com> wrote:
if you serve configs xml_curl you can check that it you web app and return not found if it's not coming from the correct ip.
On 6/24/2012 9:34 AM, ocset wrote:
Hi
Is it possible to bind an user/extension to a specific IP address? (e.g. extension 1001 can only log in from IP address 192.168.0.101)
Thanks O.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II
FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire
AIM: anthm MSN:anthony_minessale@hotmail.com GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com IRC: irc.freenode.net #freeswitch
FreeSWITCH Developer Conference sip:888@conference.freeswitch.org googletalk:conf+888@conference.freeswitch.org pstn:+19193869900
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
My thought were as follows If I could bind all of the internal extensions to an IP address, then I can limit the number of extension that are exposed to outside attack. So if I open up port 5090 and allow registration from internet based phones, I can limit it to only a couple of extensions rather than having all extensions open to the outside world. The purpose of these few extensions is to allow someone in the office to transfer a call to someone on the road. They would not be given permission to use any of the gateways so even if someone did manage to hack in, they would not be able to make long distance calls - limit the damage. Does that make sense? Regards O On 25/06/12 22:27, Michael Collins wrote:
On Mon, Jun 25, 2012 at 2:26 AM, Richard Brady <rnbrady@gmail.com <mailto:rnbrady@gmail.com>> wrote:
Is there an equivalent for gateways?
I can't find a way to bind incoming calls from a CIDR to a particular gateway.
Just curious - what functionality do you need this for? -MC
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Is there an equivalent for gateways?
I can't find a way to bind incoming calls from a CIDR to a particular gateway.
Just curious - what functionality do you need this for?
In order to configure DTMF per provider, i.e. per gateway: <gateway name="provider1"> ... <variables> <variable direction="both" name="dtmf_type" value="info"> </variables> </gateway> <gateway name="provider2"> ... <variables> <variable direction="both" name="dtmf_type" value="rfc2833"> </variables> </gateway> This works for outbound calls but not for inbound calls, even though I have specified direction="both". I believe that direction="both" and direction="inbound" will only work on a SIP profile, not on a gateway. But I'm hoping to be corrected. Richard
they do work on gateways <variables> tag with <variable> tags within it the caveat is the calls can't always be tied back to the gateway. If you use something that handles sip correctly there should be some hints in the contact addr we register with to find your way back to the gateway and parse the variables. On Thu, Jun 28, 2012 at 7:17 PM, Richard Brady <rnbrady@gmail.com> wrote:
Is there an equivalent for gateways?
I can't find a way to bind incoming calls from a CIDR to a particular gateway.
Just curious - what functionality do you need this for?
In order to configure DTMF per provider, i.e. per gateway:
<gateway name="provider1"> ... <variables> <variable direction="both" name="dtmf_type" value="info"> </variables> </gateway>
<gateway name="provider2"> ... <variables> <variable direction="both" name="dtmf_type" value="rfc2833"> </variables> </gateway>
This works for outbound calls but not for inbound calls, even though I have specified direction="both".
I believe that direction="both" and direction="inbound" will only work on a SIP profile, not on a gateway. But I'm hoping to be corrected.
Richard
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire AIM: anthm MSN:anthony_minessale@hotmail.com GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com IRC: irc.freenode.net #freeswitch FreeSWITCH Developer Conference sip:888@conference.freeswitch.org googletalk:conf+888@conference.freeswitch.org pstn:+19193869900
On 29 June 2012 19:05, Anthony Minessale <anthony.minessale@gmail.com> wrote:
the caveat is the calls can't always be tied back to the gateway. If you use something that handles sip correctly there should be some hints in the contact addr we register with to find your way back to the gateway and parse the variables.
That's exactly what I'm saying. Inbound calls simply cannot be tied to a gateway, or alternatively stated: gateways are an outbound-only concept. So the next question is: how can one set a variable on an inbound call (before CS_INIT)? Richard
There is no setting for it (as far as I know), but you can compare the network_addr in the dialplan, and then do whatever you want to do with it, ie transfer to a specific context. /Peter 25 jun 2012 kl. 15:29 skrev "Richard Brady" <rnbrady@gmail.com>:
Is there an equivalent for gateways?
I can't find a way to bind incoming calls from a CIDR to a particular gateway.
On 25 June 2012 03:05, Anthony Minessale <anthony.minessale@gmail.com> wrote:
http://wiki.freeswitch.org/wiki/Acl#Users
On Sun, Jun 24, 2012 at 5:25 PM, Avi Marcus <avi@avimarcus.net> wrote:
Or do a check in the dialplan on that extension's outbound calls. Or only do IP auth for that account and not digest auth. -Avi
On Mon, Jun 25, 2012 at 12:34 AM, Abaci <abaci64@gmail.com> wrote:
if you serve configs xml_curl you can check that it you web app and return not found if it's not coming from the correct ip.
On 6/24/2012 9:34 AM, ocset wrote:
Hi
Is it possible to bind an user/extension to a specific IP address? (e.g. extension 1001 can only log in from IP address 192.168.0.101)
Thanks O.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II
FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire
AIM: anthm MSN:anthony_minessale@hotmail.com GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com IRC: irc.freenode.net #freeswitch
FreeSWITCH Developer Conference sip:888@conference.freeswitch.org googletalk:conf+888@conference.freeswitch.org pstn:+19193869900
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
!DSPAM:4fe8646232762482116809!
But why? Gateways are distinguished by their addr/port. One can configure particular incoming CIDR/trunk to connect to particular gateway. Does not that solve the problem? On 25/06/12 12:26, Richard Brady wrote:
Is there an equivalent for gateways?
I can't find a way to bind incoming calls from a CIDR to a particular gateway.
========================================================= Данное сообщение и любые вложения («Сообщение») являются конфиденциальными, предназначенными исключительно для адресатов, и могут содержать сведения, охраняемые в соответствии с законодательством. Любое несанкционированное использование или распространение Сообщения запрещено. Электронная почта не гарантирует подлинности Сообщений. Ни ЗАО "АКБ "БЕЛРОСБАНК", ни любые его подразделения или дочерние организации не несут ответственности за Сообщение в случае его подмены, изменения либо фальсификации. ========================================================= This message and any attachments (the “message”) are confidential, intended solely for the addressees, and may contain legally privileged information. Any unauthorized use or dissemination is prohibited. E-mails are susceptible to alteration. Neither JSC “BELROSBANK” nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified. =========================================================
participants (8)
-
Abaci
-
Anthony Minessale
-
Avi Marcus
-
Eugene Shcherbatyuk
-
Michael Collins
-
ocset
-
Peter Olsson
-
Richard Brady