<div dir="ltr"><div class="gmail_quote">On Thu, Mar 10, 2011 at 12:20 AM, Faisal Hanif <span dir="ltr">&lt;<a href="mailto:faisal@vopium.com">faisal@vopium.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">

<div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">It just have ACL concept. You can add permitted IPs List to any peer then only from that IPs user can register. If you want to permit all you can add 0.0.0.0 to ACL</span></p>

<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D"></span></p></div></div></blockquote><div><br></div><div><font class="Apple-style-span" face="&#39;trebuchet ms&#39;, sans-serif" color="#000099">Thanks. but could you be a little more specific? I have added the local net <a href="http://172.16.16.0/24">172.16.16.0/24</a> almost everywhere I can think of, but it keeps giving that error. Even in sip.conf in the template for company IP phones, I&#39;ve added contactpermit as well as just permit=<a href="http://172.16.16.0/24">172.16.16.0/24</a> but it still complains about that</font></div>

<div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D"> </span></p>

<p class="MsoNormal"><b><span style="font-size:10.0pt">From:</span></b><span style="font-size:10.0pt"> <a href="mailto:asterisk-users-bounces@lists.digium.com" target="_blank">asterisk-users-bounces@lists.digium.com</a> [mailto:<a href="mailto:asterisk-users-bounces@lists.digium.com" target="_blank">asterisk-users-bounces@lists.digium.com</a>] <b>On Behalf Of </b>RR<br>

<b>Sent:</b> Thursday, March 10, 2011 7:04 AM<br><b>To:</b> Asterisk Users Mailing List - Non-Commercial Discussion<br><b>Subject:</b> [asterisk-users] [1.8] Unable to Register: Registration denied because of contact ACL</span></p>

<div><div></div><div class="h5"><p class="MsoNormal"> </p><div><div><p class="MsoNormal"><span style="color:#663366">Hello All,</span></p></div><div><p class="MsoNormal"><span style="color:#663366"> </span></p></div><div>

<p class="MsoNormal"><span style="color:#663366">Some new security stuff is going on I suppose in 1.8 that I am not familiar with and would appreciate your help</span></p></div><div><p class="MsoNormal"><span style="color:#663366"> </span></p>

</div><div><p class="MsoNormal"><span style="color:#663366">In a scenario such as the following:</span></p></div><div><p class="MsoNormal"><span style="color:#663366"> </span></p></div><div><p class="MsoNormal"><span style="color:#663366">Internet --&gt; SBC --&gt; Asterisk </span></p>

</div><div><p class="MsoNormal"><span style="color:#663366"> </span></p></div><div><p class="MsoNormal"><span style="color:#663366">upon trying to register an endpoint, the following is being observed on the Asterisk Console. Have Googled this but haven&#39;t come up with anything that helped much.</span></p>

</div><div><p class="MsoNormal"><span style="color:#663366"> </span></p></div><div><div><p class="MsoNormal"><span style="font-family:&quot;Courier New&quot;;color:#663366">[Mar 10 11:53:59] ERROR[21272]: netsock2.c:94 ast_sockaddr_stringify_fmt: getnameinfo(): ai_family not supported</span><span style="color:#663366"></span></p>

</div><div><p class="MsoNormal"><span style="font-family:&quot;Courier New&quot;;color:#663366">[Mar 10 11:53:59] WARNING[21272]: chan_sip.c:13120 parse_register_contact: Domain &#39;<a href="http://172.16.16.6:5060" target="_blank">172.16.16.6:5060</a>&#39; disallowed by contact ACL (violating IP )</span><span style="color:#663366"></span></p>

</div><div><p class="MsoNormal"><span style="font-family:&quot;Courier New&quot;;color:#663366">[Mar 10 11:53:59] WARNING[21272]: chan_sip.c:13837 register_verify: Registration denied because of contact ACL</span><span style="color:#663366"></span></p>

</div><div><p class="MsoNormal"><span style="color:#663366"> </span></p></div><p class="MsoNormal"><span style="color:#663366">Note, that the server IP is 172.16.16.11 and the SBC internal Interface IP is 172.16.16.6</span><span style="color:#663366"></span></p>

</div><div><p class="MsoNormal"><span style="color:#663366"> </span></p></div><div><p class="MsoNormal"><span style="color:#663366">the following lines have been added to sip.conf</span></p></div><div><p class="MsoNormal">

<span style="color:#663366"> </span></p></div><div><div><p class="MsoNormal"><span style="font-family:&quot;Courier New&quot;;color:#663366">dynamic_exclude_static = yes</span><span style="color:#663366"></span></p></div>

<div><p class="MsoNormal"><span style="font-family:&quot;Courier New&quot;;color:#663366">autodomain=yes</span><span style="color:#663366"></span></p></div><div><p class="MsoNormal"><span style="font-family:&quot;Courier New&quot;;color:#663366">domain=172.16.16.6</span><span style="color:#663366"></span></p>

</div><div><p class="MsoNormal"><span style="font-family:&quot;Courier New&quot;;color:#663366">allowexternaldomains=no</span><span style="color:#663366"></span></p></div><div><p class="MsoNormal"><span style="color:#663366"> </span></p>

</div><div><p class="MsoNormal"><span style="color:#663366">In addition, in the general endpoint template in sip.conf, I have the lines</span></p></div><div><p class="MsoNormal"><span style="color:#663366"> </span></p></div>

<div><div><p class="MsoNormal"><span style="font-family:&quot;Courier New&quot;;color:#663366">contactdeny=<a href="http://0.0.0.0/0.0.0.0" target="_blank">0.0.0.0/0.0.0.0</a></span><span style="color:#663366"></span></p>

</div><div><p class="MsoNormal"><span style="font-family:&quot;Courier New&quot;;color:#663366">contactpermit=<a href="http://172.16.16.0/255.255.255.0" target="_blank">172.16.16.0/255.255.255.0</a></span><span style="color:#663366"></span></p>

</div><div><p class="MsoNormal"><span style="font-family:&quot;Courier New&quot;;color:#663366">host=dynamic</span><span style="color:#663366"></span></p></div></div><div><p class="MsoNormal"><span style="color:#663366"> </span></p>

</div><div><p class="MsoNormal"><span style="color:#663366">What else am I missing?</span></p></div><div><p class="MsoNormal"><span style="color:#663366"> </span></p></div><div><p class="MsoNormal"><span style="color:#663366">Thanks</span></p>

</div><div><p class="MsoNormal"><span style="color:#663366">\RR</span></p></div></div></div></div></div></div></div><br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
               <a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
   <a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br></div>