<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 4/2/15 3:28 PM, Daniel Heckl wrote:<br>
</div>
<blockquote
cite="mid:AF582B88-B430-4A9C-BDC3-892BEE0F1021@gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div apple-content-edited="true" class="">Scott, I have changed
the configuration as said it and will test it. I’m curious.
</div>
<div apple-content-edited="true" class=""><br class="">
</div>
<div apple-content-edited="true" class="">Can you briefly explain
what insecure=invite,port does?</div>
<div apple-content-edited="true" class=""><br class="">
</div>
<div apple-content-edited="true" class=""><span style="color:
rgb(51, 51, 51); font-family: Consolas, 'Liberation Mono',
Menlo, Courier, monospace; line-height: 18px; white-space:
pre;" class="">;insecure=port ; Allow matching of peer by IP
address without</span></div>
<div apple-content-edited="true" class=""><span style="color:
rgb(51, 51, 51); font-family: Consolas, 'Liberation Mono',
Menlo, Courier, monospace; line-height: 18px; white-space:
pre;" class=""> </span><span style="color: rgb(51, 51, 51);
font-family: Consolas, 'Liberation Mono', Menlo, Courier,
monospace; line-height: 18px; white-space: pre;" class="">;
matching port number</span></div>
<div apple-content-edited="true" class=""><span style="color:
rgb(51, 51, 51); font-family: Consolas, 'Liberation Mono',
Menlo, Courier, monospace; line-height: 18px; white-space:
pre;" class="">;insecure=invite </span><span style="color:
rgb(51, 51, 51); font-family: Consolas, 'Liberation Mono',
Menlo, Courier, monospace; line-height: 18px; white-space:
pre;" class="">; Do not require authentication of incoming
INVITEs</span></div>
<div apple-content-edited="true" class=""><span style="color:
rgb(51, 51, 51); font-family: Consolas, 'Liberation Mono',
Menlo, Courier, monospace; line-height: 18px; white-space:
pre;" class="">;insecure=port,invite ; (both)</span></div>
<div apple-content-edited="true" class=""><span style="color:
rgb(51, 51, 51); font-family: Consolas, 'Liberation Mono',
Menlo, Courier, monospace; line-height: 18px; white-space:
pre;" class=""><br class="">
</span></div>
<div apple-content-edited="true" class=""><span style="color:
rgb(51, 51, 51); line-height: 18px; white-space: pre;"
class="">Do I understand correctly that in this mode the IP
address is not checked and no authentication is required? </span></div>
</blockquote>
Not correct, the IP address is checked but not the port and if the
ip address matches no password authentication is performed for the
Invite.<br>
<blockquote
cite="mid:AF582B88-B430-4A9C-BDC3-892BEE0F1021@gmail.com"
type="cite">
<div apple-content-edited="true" class=""><span style="color:
rgb(51, 51, 51); font-family: Consolas, 'Liberation Mono',
Menlo, Courier, monospace; line-height: 18px; white-space:
pre;" class=""><br class="">
</span></div>
<div>
<blockquote type="cite" class="">
<div class="">Am 02.04.2015 um 20:11 schrieb Scott Griepentrog
<<a moz-do-not-send="true"
href="mailto:sgriepentrog@digium.com" class="">sgriepentrog@digium.com</a>>:</div>
<br class="Apple-interchange-newline">
<div class="">
<div dir="ltr" class="">
<div class="gmail_default" style="color:rgb(102,0,0)">I'd
be curious if setting</div>
<div class="gmail_default" style="color:rgb(102,0,0)"><br
class="">
</div>
<div class="gmail_default" style="color:rgb(102,0,0)">insecure=invite,port</div>
<div class="gmail_default" style="color:rgb(102,0,0)"><br
class="">
</div>
<div class="gmail_default" style="color:rgb(102,0,0)">makes
any difference either (without alllowguest on).</div>
<div class="gmail_default" style="color:rgb(102,0,0)"></div>
</div>
<div class="gmail_extra"><br class="">
<div class="gmail_quote">On Thu, Apr 2, 2015 at 9:03 AM,
Daniel Heckl <span dir="ltr" class=""><<a
moz-do-not-send="true"
href="mailto:daniel.heckl@gmail.com" target="_blank"
class="">daniel.heckl@gmail.com</a>></span>
wrote:<br class="">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">Ok,
I have tested dnsmgr. This is not a solution, the
situation has not changed. With dnsmgr I can not place
outbound calls. I do not know why and what dnsmgr
really do.<br class="">
<br class="">
My current solution is as follows:<br class="">
<br class="">
Say allowguest=yes, configure the default context that
there can not be placed outbound calls. Use iptables
to DROP all at your SIP port and allow only your local
phones and the sip trunk ip range. I think srvlookup
must be set to yes to place outbound calls if there is
an ip address change.<br class="">
<br class="">
I think with the restriction of the firewall that
should be a secure solution.<br class="">
<div class="HOEnZb">
<div class="h5"><br class="">
> Am 01.04.2015 um 19:23 schrieb Sebastian
Kemper <<a moz-do-not-send="true"
href="mailto:sebastian_ml@gmx.net" class="">sebastian_ml@gmx.net</a>>:<br
class="">
><br class="">
> On Wed, Apr 01, 2015 at 11:00:56AM -0400,
Andres wrote:<br class="">
>> On 4/1/15 10:48 AM, Daniel Heckl wrote:<br
class="">
>>> John,<br class="">
>>><br class="">
>>> thank you four your answer. I think
you have misunderstood the<br class="">
>>> problem. It’s about a ip address
change of the sip trunk, not of my<br class="">
>>> asterisk server.<br class="">
>> You would probably benefit by enabling
the DNS Manager to allow for<br class="">
>> dynamic IP changes:<br class="">
>><br class="">
>> # cat dnsmgr.conf [general] enable=yes
; enable creation<br class="">
>> of managed DNS lookups ; default is
'no' refreshinterval=180 ;<br class="">
>> refresh managed DNS lookups every
<n> seconds ; default is 300 (5<br
class="">
>> minutes)<br class="">
><br class="">
> Hello Andres,<br class="">
><br class="">
> I read that same suggestion elsewhere in
connection with Deutsche<br class="">
> Telekom, so it seems there's some benefit in
it.<br class="">
><br class="">
> Daniel, did you try it out already?<br
class="">
><br class="">
> Kind regards,<br class="">
> Sebastian<br class="">
><br class="">
> --<br class="">
>
_____________________________________________________________________<br
class="">
> -- Bandwidth and Colocation Provided by <a
moz-do-not-send="true"
href="http://www.api-digital.com/"
target="_blank" class="">http://www.api-digital.com</a>
--<br class="">
> New to Asterisk? Join us for a live
introductory webinar every Thurs:<br class="">
> <a moz-do-not-send="true"
href="http://www.asterisk.org/hello"
target="_blank" class="">http://www.asterisk.org/hello</a><br
class="">
><br class="">
> asterisk-users mailing list<br class="">
> To UNSUBSCRIBE or update options visit:<br
class="">
> <a moz-do-not-send="true"
href="http://lists.digium.com/mailman/listinfo/asterisk-users"
target="_blank" class="">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br
class="">
<br class="">
<br class="">
--<br class="">
_____________________________________________________________________<br
class="">
-- Bandwidth and Colocation Provided by <a
moz-do-not-send="true"
href="http://www.api-digital.com/"
target="_blank" class="">http://www.api-digital.com</a>
--<br class="">
New to Asterisk? Join us for a live introductory
webinar every Thurs:<br class="">
<a moz-do-not-send="true"
href="http://www.asterisk.org/hello"
target="_blank" class="">http://www.asterisk.org/hello</a><br
class="">
<br class="">
asterisk-users mailing list<br class="">
To UNSUBSCRIBE or update options visit:<br
class="">
<a moz-do-not-send="true"
href="http://lists.digium.com/mailman/listinfo/asterisk-users"
target="_blank" class="">http://lists.digium.com/mailman/listinfo/asterisk-users</a></div>
</div>
</blockquote>
</div>
<br class="">
<br class="" clear="all">
<div class=""><br class="">
</div>
-- <br class="">
<div class="gmail_signature">
<div dir="ltr" class=""><img moz-do-not-send="true"
alt="Digium logo"
src="https://my.digium.com/images/graphics/digium_RGB_signature.gif"
style="font-family: Arial, Helvetica, sans-serif;
font-size: 12px;" class="" height="50" width="288">
<div class="">Scott Griepentrog<br class="">
Digium, Inc · Software Developer<br class="">
445 Jan Davis Drive NW · Huntsville, AL 35806 · US<br
class="">
direct/fax: +1 256 428 6239 · mobile: +1 256 580
6090<br class="">
Check us out at: <a moz-do-not-send="true"
href="http://digium.com/" target="_blank" class="">http://digium.com</a>
· <a moz-do-not-send="true"
href="http://asterisk.org/" target="_blank"
class="">http://asterisk.org</a><br class="">
</div>
</div>
</div>
</div>
-- <br class="">
_____________________________________________________________________<br
class="">
-- Bandwidth and Colocation Provided by <a
moz-do-not-send="true" href="http://www.api-digital.com"
class="">http://www.api-digital.com</a> --<br class="">
New to Asterisk? Join us for a live introductory webinar
every Thurs:<br class="">
<a moz-do-not-send="true"
href="http://www.asterisk.org/hello" class="">http://www.asterisk.org/hello</a><br
class="">
<br class="">
asterisk-users mailing list<br class="">
To UNSUBSCRIBE or update options visit:<br class="">
<a moz-do-not-send="true"
href="http://lists.digium.com/mailman/listinfo/asterisk-users"
class="">http://lists.digium.com/mailman/listinfo/asterisk-users</a></div>
</blockquote>
</div>
<br class="">
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Technical Support
<a class="moz-txt-link-freetext" href="http://www.cellroute.net">http://www.cellroute.net</a></pre>
</body>
</html>