diff --git a/kamailio/acl-role.cfg b/kamailio/acl-role.cfg index 2439f9a..50234a4 100644 --- a/kamailio/acl-role.cfg +++ b/kamailio/acl-role.cfg @@ -1,5 +1,5 @@ ######## DoS prevention module ######## -# Default "order" is "Deny,Allow"(DA). +# Default "order" is "deny,allow". # So if there is no data from DB request will be permitted by default. # loadmodule "ipops.so" @@ -7,7 +7,7 @@ modparam("htable", "htable", "acl=>initval=-1;autoexpire=7200") #!trydef ACL_MESSAGE_DENY "Rejected by ACL" #!trydef ACL_CODE_DENY "603" -#!trydef ACL_ORDER_ALLOW_DENY "AD" +#!trydef ACL_ORDER_ALLOW_DENY "allow,deny" #!trydef ACL_IP_ADDR_ANY "0.0.0.0/0" #!trydef IP_REGEX "[0-9]{1,3}\.[0-9]{1,3}.[0-9]{1,3}\.[0-9]{1,3}" @@ -28,7 +28,7 @@ route[ACL_CHECK] { $var(sip-packet) = $rm; } - # FIXUP for BYE method with IPinstead of REALM in From, take REALM fron To header + # FIX for BYE method with IP instead of REALM in From, take REALM from To header if ($fd =~ IP_REGEX) { xlog("L_WARNING","$ci |ACL-realm| Fixup for $var(sip-packet) with IP in from URI: use to-domain"); $var(realm) = $td;