[Freeswitch-users] Checking authorisation on external profile

[Artur Mega]

Sergey, kamalio is good, but we wanted to use only freeswitch... We tried
to play with directory, but it doesnt help (we dynamically generated
directory with xml curl)

2016-05-12 20:20 GMT+05:00 Sergey Safarov <s.safarov at gmail.com>:

> You requred to install sip proxy (exmple Kamailio) to route call between
> two freeswith profiles.
> Call originated from example.com domain always routed to internal profile
> Call route from non example.com. domain to example.com.domain routed to
> external profile
> All other call must be blocked.
>
> чт, 12 мая 2016 г. в 16:44, Artur Mega <findmeinwland at gmail.com>:
>
>> I have DNS SRV record (external profile)
>> _sip._udp.example.com has SRV record 10 100 5080 sip.example.com.
>>
>> None authentication calls from other server to sip:1001 at example.com work
>> fine.
>> Calls from phones (uses DNS SRV _sip._udp.) with authentication
>> (incoming/outgoing) not work.
>>
>> Then I set SRV DNS record (internal profile)
>> _sip._udp.example.com has SRV record 10 100 5060 sip.example.com.
>>
>> Calls from phones with authentication work.
>> Sip uri calls without authentication not work.
>>
>> I need use one DNS SRV record to all calls.
>>
>> 2016-05-07 1:00 GMT+05:00 Michael Jerris <mike at jerris.com>:
>>
>>> I suppose you could "auth" all calls, but force context for ones that
>>> fail via xml curl, but you couldn't not auth calls that are going to fail
>>> auth before you challenge them, as computers are not psychic knowing the
>>> future
>>>
>>>
>>> On Friday, May 6, 2016, Artur Mega <findmeinwland at gmail.com> wrote:
>>>
>>>> Thanks, Michael for reply
>>>>
>>>> Look, let's assume that call will come to internal profile (where
>>>> authorisation is required). But then unauthorised call wont reach the
>>>> dialplan, becouse it's not authorised... But i don't wanna drop such call,
>>>> it must be allowed to go further to special context in dialplan. Desired
>>>> algorythm is like:
>>>>
>>>>     IF incoming call is authenticated THEN forward it to one dialplan
>>>> ELSE forward it to another dialplan (don't drop) END.
>>>>
>>>> Who knows how can it be solved?
>>>>
>>>> 2016-05-04 20:14 GMT+05:00 Michael Jerris <mike at jerris.com>:
>>>>
>>>>> If a profile doesn't perform authorization, as is the case in the
>>>>> default external profile, no calls are authorized as we do not attempt to
>>>>> authorize them.  You can't know if a call is authorized without challenging
>>>>> them.
>>>>>
>>>>>
>>>>> On May 4, 2016, at 6:40 AM, Artur Mega <findmeinwland at gmail.com>
>>>>> wrote:
>>>>>
>>>>> Good day,
>>>>>
>>>>> How can I check incoming call to the External profile? Theoretically,
>>>>> both authorised and unauthorised users can call via external profile. Tried
>>>>> to detect authorised users with ${sip_authorised} variable, but it doesn't
>>>>> help. :(
>>>>>
>>>>> --
>>>>>
>>>>> Arthur
>>>>>
>>>>> _________________________________________________________________________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org
>>>>> http://www.freeswitchsolutions.com
>>>>>
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org
>>>>> http://confluence.freeswitch.org
>>>>> http://www.cluecon.com
>>>>>
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>> UNSUBSCRIBE:
>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>> http://www.freeswitch.org
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> _________________________________________________________________________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org
>>>>> http://www.freeswitchsolutions.com
>>>>>
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org
>>>>> http://confluence.freeswitch.org
>>>>> http://www.cluecon.com
>>>>>
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>> UNSUBSCRIBE:
>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>> http://www.freeswitch.org
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> Arthur
>>>>
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>
>>
>>
>> --
>>
>> Arthur
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>



-- 

Arthur
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20160513/7b037d8a/attachment-0001.html