[asterisk-users] ami

[Danny Nicholas]

If this isn't correct, it is "close enough for government work".  By binding
to 192.168.1.10, he makes AMI accessible to anyone who can access that IP
address.

-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Steve Edwards
Sent: Monday, August 03, 2009 11:25 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] ami

A more specific subject may get better responses. Maybe something like 
"How to restrict access to AMI to localhost?"

On Mon, 3 Aug 2009, Jerry Geis wrote:

> Trying to get a setup that only responds to connections on the SAME box. 
> like 192.168.1.10 So .10 is my server and I only want responses 
> originating from .10 to answer the AMI.
>
> I set bindaddr to 192.168.1.10

Would binding to 127.0.0.1 make sense?

> I left it as 0.0.0.0

I don't know what this means.

> I set permit to be 127.0.0.1/255.255.255.0
> I tried 192.168.1.10/255.255.255.0
> I tried 192.168.1.10/255.255.255.255

What does manager.conf look like?

Stealing from 
http://www.the-asterisk-book.com/unstable/asterisk-manager-api.html, it 
should look something like:

[admin]
secret = secret5
deny = 0.0.0.0/0.0.0.0
permit = 127.0.0.1/255.255.255.255
read = all,system,call,log,verbose,command,agent,user,config
write = all,system,call,log,verbose,command,agent,user,config

-- 
Thanks in advance,
-------------------------------------------------------------------------
Steve Edwards       sedwards at sedwards.com      Voice: +1-760-468-3867 PST
Newline                                              Fax: +1-760-731-3000

_______________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

AstriCon 2009 - October 13 - 15 Phoenix, Arizona
Register Now: http://www.astricon.net

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users