[asterisk-users] 10.2.0-rc2: permitted contact can't register.

[Matthew Jordan]

> 
> An outside device can't register:
> 
> WARNING: getnameinfo(): ai_family not supported
> WARNING: chan_sip.c:14456 parse_register_contact: Domain
> '69.xxx.yyy.zzz:5060' disallowed by contact ACL (violating IP )
> 
> sip.conf:
> [general]
> .......
> alwaysreject=yes
> dynamic_exclude_static = yes
> allowguest=no
> contactdeny=0.0.0.0/0.0.0.0
> contactpermit=69.0.0.0/255.0.0.0

I tried reproducing this with 10.2.0-rc3 (which contains only three additional
patches with respect to 10.2.0-rc2, none of which have anything to do with
ACLs), and was unable to.  A snippet of my configuration:

[general]

context=blah
allowguest=no
udpbindaddr=0.0.0.0  
contactdeny=0.0.0.0/0.0.0.0          
contactpermit=10.0.0.0/255.0.0.0 

[7001](natted-phone,polycom_430)
context		= blah
username	= 7001
language	= en
secret		= blahblahblah
qualify		= yes

[7003](natted-phone,polycom_430)
context		= blah
username	= 7003
language	= en
secret		= blahblahblah
qualify		= yes

Peer 7001 is registers from subnet 10.x.y.z, while peer 7003
registers from 10.x.p.q.  With the above configuration, both
peers can register.  With the following configuration change:

contactdeny=0.0.0.0/0.0.0.0      
contactpermit=10.x.y.0/255.255.255.0 

Peer 7003's registration is rejected, as expected.

So, I'm not sure what the configuration issue is - you may need
to either post the rest of your configuration, or provide - as Paul
suggested - either the actual SIP REGISTER request or some a portion
of the DEBUG log.

> I've also tried without any "contactdeny". Same result.
> 
> I'm completely puzzled. Any help appreciated.
> 
> sean
> 
> 

Matthew Jordan
Digium, Inc. | Software Developer
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
Check us out at: http://digium.com & http://asterisk.org