[asterisk-users] [1.8] Unable to Register: Registration denied because of contact ACL

Thu Mar 10 01:12:16 CST 2011

You can add following line to your peers configuration

permit=0.0.0.0/0.0.0.0

It will allow to use that peer's account from any IP

From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of RR
Sent: Thursday, March 10, 2011 11:17 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] [1.8] Unable to Register: Registration denied
because of contact ACL

On Thu, Mar 10, 2011 at 12:20 AM, Faisal Hanif <faisal at vopium.com> wrote:

It just have ACL concept. You can add permitted IPs List to any peer then
only from that IPs user can register. If you want to permit all you can add
0.0.0.0 to ACL

Thanks. but could you be a little more specific? I have added the local net
172.16.16.0/24 almost everywhere I can think of, but it keeps giving that
error. Even in sip.conf in the template for company IP phones, I've added
contactpermit as well as just permit=172.16.16.0/24 but it still complains
about that

From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of RR
Sent: Thursday, March 10, 2011 7:04 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: [asterisk-users] [1.8] Unable to Register: Registration denied
because of contact ACL

Hello All,

Some new security stuff is going on I suppose in 1.8 that I am not familiar
with and would appreciate your help

In a scenario such as the following:

Internet --> SBC --> Asterisk 

upon trying to register an endpoint, the following is being observed on the
Asterisk Console. Have Googled this but haven't come up with anything that
helped much.

[Mar 10 11:53:59] ERROR[21272]: netsock2.c:94 ast_sockaddr_stringify_fmt:
getnameinfo(): ai_family not supported

[Mar 10 11:53:59] WARNING[21272]: chan_sip.c:13120 parse_register_contact:
Domain '172.16.16.6:5060' disallowed by contact ACL (violating IP )

[Mar 10 11:53:59] WARNING[21272]: chan_sip.c:13837 register_verify:
Registration denied because of contact ACL

Note, that the server IP is 172.16.16.11 and the SBC internal Interface IP
is 172.16.16.6

the following lines have been added to sip.conf

dynamic_exclude_static = yes

autodomain=yes

domain=172.16.16.6

allowexternaldomains=no

In addition, in the general endpoint template in sip.conf, I have the lines

contactdeny=0.0.0.0/0.0.0.0

contactpermit=172.16.16.0/255.255.255.0

host=dynamic

What else am I missing?

Thanks

\RR

--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
              http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20110310/5685d678/attachment.htm>