[Asterisk-Users] SIP permit/deny

[Douglas Garstang]

I have the following in sip.conf. It was my understanding that this configuration (ie with deny/permit) would only allow connections from hosts 192.168.10.4 and 192.168.10.5. That doesn't seem to be the case. Asterisk is accepting INVITE's from other addresses. 

[a00090101]
type=friend
context=Company1
username=a00090101
;secret=180
;insecure=very
host=dynamic
mailbox=company1 at vmusers
deny=0.0.0.0/0.0.0.0
permit=192.168.10.4/255.255.255.0
permit=192.168.10.5/255.255.255.0
accountcode=a00090101
subscribecontext=status
;qualify=yes
canreinvite=yes

I'm trying to configure Asterisk to accept connections (ie invites) from two trusted hosts without asking for a password. If it gets an invite from somewhere else, send back Forbidden. Anyone know how to do this?

Thanks,
Doug.