Re: [SR-Users] blocking call in between two kamailio proxy

2015-09-01 Thread Daniel-Constantin Mierla
On 01/09/15 11:30, Daniel Tryba wrote: > On Tuesday 01 September 2015 02:12:04 sscc wrote: >> one more question where to put this code? in invite? or registrar? > > It only makes sense for invites. Propably best to do it immediatly after > lookup()/alias_db_lookup(). > > Actually, lookup will ch

Re: [SR-Users] blocking call in between two kamailio proxy

2015-09-01 Thread Daniel Tryba
On Tuesday 01 September 2015 02:12:04 sscc wrote: > one more question where to put this code? in invite? or registrar? It only makes sense for invites. Propably best to do it immediatly after lookup()/alias_db_lookup(). ___ SIP Express Router (SER) an

Re: [SR-Users] blocking call in between two kamailio proxy

2015-09-01 Thread sscc
thank you so much Daniel-Constantin Mierla and Daniel Tryba for thew guidance. one more question where to put this code? in invite? or registrar? reards sscc. -- View this message in context: http://sip-router.1086192.n5.nabble.com/blocking-call-in-between-two-kamailio-proxy-tp140893p140911

Re: [SR-Users] blocking call in between two kamailio proxy

2015-09-01 Thread Daniel-Constantin Mierla
On 01/09/15 10:08, Daniel Tryba wrote: > On Tuesday 01 September 2015 08:58:30 Daniel-Constantin Mierla wrote: >> if($rd!=$fd) { >> send_reply("403", "Call outside the domain"); >> exit; >> } > What is stopping from people from setting $fd to the desired domain? Isn't > $ad > a better v

Re: [SR-Users] blocking call in between two kamailio proxy

2015-09-01 Thread Daniel Tryba
On Tuesday 01 September 2015 08:58:30 Daniel-Constantin Mierla wrote: > if($rd!=$fd) { > send_reply("403", "Call outside the domain"); > exit; > } What is stopping from people from setting $fd to the desired domain? Isn't $ad a better var. for this since it isn't dependend on user supplie

Re: [SR-Users] blocking call in between two kamailio proxy

2015-08-31 Thread Daniel-Constantin Mierla
Hello, first be sure you enable use_domain parameter to relevant modules (e.g., usrloc, auth_db, ...) -- in this way you ensure that x@domain1 is different that x@domain2. Then testing if the domain of the callee is the same as the domain of the caller can be done with: if($rd!=$fd) { send_r