<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-GB link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Hi<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>We are trying to accept inbound calls from a SIP provider who sends us calls from various IP’s within a given subnet but they are failing every time with the following message on the console.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>chan_sip.c:20006 handle_request_invite: Call from '' to extension '<destination-number>' rejected because extension not found<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Our understanding is that the deny line blocks every IP and the following permit line then allows calls from the specified subnet but it seems that the peer is never matched when a calls hits the server.<o:p></o:p></p><p class=MsoNormal>It’s almost as if there should be a setting somewhere that we are missing to enable ACL’s.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Can anyone point us in the right direction here please? Is our understanding simply not correct?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>In our peer config we have:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>host = dynamic<o:p></o:p></p><p class=MsoNormal>type = peer<o:p></o:p></p><p class=MsoNormal>deny = 0.0.0.0/0.0.0.0<o:p></o:p></p><p class=MsoNormal>permit = xxx.xxx.xxx.xxx/255.255.255.0<o:p></o:p></p><p class=MsoNormal>context = Test<o:p></o:p></p><p class=MsoNormal>insecure = invite,port<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thanks in advance<o:p></o:p></p><p class=MsoNormal>Mark.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>