[Asterisk-Users] RE: SIP permit/deny

[Douglas Garstang]

Good grief. Even this doesn't work...

[a00090101]
type=friend
deny=0.0.0.0/0.0.0.0

Asterisk is allowing extension a00090101 to connect from 192.168.10.123. I must really be missing something here...

Doug


-----Original Message-----
From: Douglas Garstang 
Sent: Friday, December 23, 2005 9:19 AM
To: 'Asterisk Users Mailing List - Non-Commercial Discussion'
Subject: SIP permit/deny


I have the following in sip.conf. It was my understanding that this configuration (ie with deny/permit) would only allow connections from hosts 192.168.10.4 and 192.168.10.5. That doesn't seem to be the case. Asterisk is accepting INVITE's from other addresses. 

[a00090101]
type=friend
context=Company1
username=a00090101
;secret=180
;insecure=very
host=dynamic
mailbox=company1 at vmusers
deny=0.0.0.0/0.0.0.0
permit=192.168.10.4/255.255.255.0
permit=192.168.10.5/255.255.255.0
accountcode=a00090101
subscribecontext=status
;qualify=yes
canreinvite=yes

I'm trying to configure Asterisk to accept connections (ie invites) from two trusted hosts without asking for a password. If it gets an invite from somewhere else, send back Forbidden. Anyone know how to do this?

Thanks,
Doug.