<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Trebuchet MS";
panose-1:2 11 6 3 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Verdana","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";color:#1F497D'>It just have ACL concept. You can add permitted IPs List to any peer then only from that IPs user can register. If you want to permit all you can add 0.0.0.0 to ACL<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> asterisk-users-bounces@lists.digium.com [mailto:asterisk-users-bounces@lists.digium.com] <b>On Behalf Of </b>RR<br><b>Sent:</b> Thursday, March 10, 2011 7:04 AM<br><b>To:</b> Asterisk Users Mailing List - Non-Commercial Discussion<br><b>Subject:</b> [asterisk-users] [1.8] Unable to Register: Registration denied because of contact ACL<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'>Hello All,<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'>Some new security stuff is going on I suppose in 1.8 that I am not familiar with and would appreciate your help<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'>In a scenario such as the following:<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'>Internet --> SBC --> Asterisk <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'>upon trying to register an endpoint, the following is being observed on the Asterisk Console. Have Googled this but haven't come up with anything that helped much.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'><o:p> </o:p></span></p></div><div><div><p class=MsoNormal><span style='font-family:"Courier New";color:#663366'>[Mar 10 11:53:59] ERROR[21272]: netsock2.c:94 ast_sockaddr_stringify_fmt: getnameinfo(): ai_family not supported</span><span style='color:#663366'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Courier New";color:#663366'>[Mar 10 11:53:59] WARNING[21272]: chan_sip.c:13120 parse_register_contact: Domain '<a href="http://172.16.16.6:5060">172.16.16.6:5060</a>' disallowed by contact ACL (violating IP )</span><span style='color:#663366'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Courier New";color:#663366'>[Mar 10 11:53:59] WARNING[21272]: chan_sip.c:13837 register_verify: Registration denied because of contact ACL</span><span style='color:#663366'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'><o:p> </o:p></span></p></div><p class=MsoNormal><span style='font-family:"Arial","sans-serif";color:#663366'>Note, that the server IP is 172.16.16.11 and the SBC internal Interface IP is 172.16.16.6</span><span style='color:#663366'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'>the following lines have been added to sip.conf<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'><o:p> </o:p></span></p></div><div><div><p class=MsoNormal><span style='font-family:"Courier New";color:#663366'>dynamic_exclude_static = yes</span><span style='color:#663366'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Courier New";color:#663366'>autodomain=yes</span><span style='color:#663366'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Courier New";color:#663366'>domain=172.16.16.6</span><span style='color:#663366'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Courier New";color:#663366'>allowexternaldomains=no</span><span style='color:#663366'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'>In addition, in the general endpoint template in sip.conf, I have the lines<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'><o:p> </o:p></span></p></div><div><div><p class=MsoNormal><span style='font-family:"Courier New";color:#663366'>contactdeny=<a href="http://0.0.0.0/0.0.0.0">0.0.0.0/0.0.0.0</a></span><span style='color:#663366'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Courier New";color:#663366'>contactpermit=<a href="http://172.16.16.0/255.255.255.0">172.16.16.0/255.255.255.0</a></span><span style='color:#663366'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Courier New";color:#663366'>host=dynamic</span><span style='color:#663366'><o:p></o:p></span></p></div></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'>What else am I missing?<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'>Thanks<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif";color:#663366'>\RR<o:p></o:p></span></p></div></div></div></div></body></html>