[Asterisk-Users] RE: SIP permit/deny

[Douglas Garstang]

Thanks for that. I can't get my head around how to allow access to specific hosts for specific extensions, while still allowing incoming calls from our PSTN gateway. Our PSTN gateway puts the caller-id in the From: field, as I think it should. Asterisk then fails to match it against any of the users in sip.conf, and therefore allows the call in as a guest and drops it into the context defined in [general]. If it allows calls in this manner for the PSTN gateway, I think it will allow calls from anyone in guest mode, which is bad.

-----Original Message-----
From: Kevin P. Fleming [mailto:kpfleming at digium.com]
Sent: Friday, December 23, 2005 10:32 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [Asterisk-Users] RE: SIP permit/deny


Douglas Garstang wrote:

> [a00090101]
> type=friend
> context=Company1
> username=a00090101
> ;secret=180
> ;insecure=very
> host=dynamic
> mailbox=company1 at vmusers
> deny=0.0.0.0/0.0.0.0
> permit=192.168.10.4/255.255.255.0
> permit=192.168.10.5/255.255.255.0

These lines are duplicates; you have asked Asterisk to look at only the 
first 24 bits of the host's IP address for matching purposes, so any 
host on 192.168.10.x will be able to send you SIP signaling.
_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --

Asterisk-Users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users