[asterisk-users] [1.8] Unable to Register: Registration denied because of contact ACL

[RR]

On Thu, Mar 10, 2011 at 12:20 AM, Faisal Hanif <faisal at vopium.com> wrote:

> It just have ACL concept. You can add permitted IPs List to any peer then
> only from that IPs user can register. If you want to permit all you can add
> 0.0.0.0 to ACL
>
>
Thanks. but could you be a little more specific? I have added the local net
172.16.16.0/24 almost everywhere I can think of, but it keeps giving that
error. Even in sip.conf in the template for company IP phones, I've added
contactpermit as well as just permit=172.16.16.0/24 but it still complains
about that


>
>
> *From:* asterisk-users-bounces at lists.digium.com [mailto:
> asterisk-users-bounces at lists.digium.com] *On Behalf Of *RR
> *Sent:* Thursday, March 10, 2011 7:04 AM
> *To:* Asterisk Users Mailing List - Non-Commercial Discussion
> *Subject:* [asterisk-users] [1.8] Unable to Register: Registration denied
> because of contact ACL
>
>
>
> Hello All,
>
>
>
> Some new security stuff is going on I suppose in 1.8 that I am not familiar
> with and would appreciate your help
>
>
>
> In a scenario such as the following:
>
>
>
> Internet --> SBC --> Asterisk
>
>
>
> upon trying to register an endpoint, the following is being observed on the
> Asterisk Console. Have Googled this but haven't come up with anything that
> helped much.
>
>
>
> [Mar 10 11:53:59] ERROR[21272]: netsock2.c:94 ast_sockaddr_stringify_fmt:
> getnameinfo(): ai_family not supported
>
> [Mar 10 11:53:59] WARNING[21272]: chan_sip.c:13120 parse_register_contact:
> Domain '172.16.16.6:5060' disallowed by contact ACL (violating IP )
>
> [Mar 10 11:53:59] WARNING[21272]: chan_sip.c:13837 register_verify:
> Registration denied because of contact ACL
>
>
>
> Note, that the server IP is 172.16.16.11 and the SBC internal Interface IP
> is 172.16.16.6
>
>
>
> the following lines have been added to sip.conf
>
>
>
> dynamic_exclude_static = yes
>
> autodomain=yes
>
> domain=172.16.16.6
>
> allowexternaldomains=no
>
>
>
> In addition, in the general endpoint template in sip.conf, I have the lines
>
>
>
> contactdeny=0.0.0.0/0.0.0.0
>
> contactpermit=172.16.16.0/255.255.255.0
>
> host=dynamic
>
>
>
> What else am I missing?
>
>
>
> Thanks
>
> \RR
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20110310/bfa432a0/attachment.htm>