Daniel, Thank you. It works.
чт, 15 сент. 2016 г. в 15:07, Daniel-Constantin Mierla <mico...@gmail.com>: > Hello, > > On 14/09/16 09:49, Ivan Dudko wrote: > > Hello! > > I am new to kamailio and trying to use it vanilla config. > Now main question is how to use ip based auth. > I found recent post of Daniel-Constantin Mierla: > http://lists.sip-router.org/pipermail/sr-users/2011-December/071147.html > Here he recommends to use 'address' table from permissions module, > > I try yo use advice and add this lines at config begin: > #!define WITH_MYSQL > #!define DBURL "mysql://kamailio:kamailiorw@localhost/kamailio" > #!define WITH_AUTH > #!define WITH_IPAUTH > #!define WITH_USRLOCDB > > Database is created and kamailio can access it. > I am add user 1000 to kamailio via kamctl and successful register it with > soft-phone. > I create trunk without registration to kamailio on asterisk server. And > trying to call from asterisk to user 1000. Call is successful. I try to > create file /etc/kamailio/permissions.deny with content 'ALL : ALL'. And > retry previous call. It still sucessful. I try to add record with asterisk > address to 'address' table with group 1. And retry previous call. It still > sucessful. > > I am confused. I do not now how to disable any address for ip_auth except > if it in the > 'address' table. And allow any address with if it request kamailio with > registration. > > forget about the /etc/kamailio/*.deny or *.allow files, they are not > related to IP matching with address table at all. > > If you want to deny traffic from ip addresses stored in address table with > grp 10, then do: > > if(allow_source_address("10")) { > send_reply("403", "Forbidden"); > exit; > } > > If you want to allow traffic only from ip addresses stored in address > table with grp 10, then negate the condition, do: > > if( ! allow_source_address("10")) { > send_reply("403", "Forbidden"); > exit; > } > > Cheers, > Daniel > > -- > Daniel-Constantin Mierlahttp://www.asipto.com - > http://www.kamailio.orghttp://twitter.com/#!/miconda - > http://www.linkedin.com/in/miconda > > _______________________________________________ > SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list > sr-users@lists.sip-router.org > http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users >
_______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
