Browse Source

use "allow,deny" or "deny,allow" constants instead of "AD" or "DA"

3.20
SIPLABS, LLC 11 years ago
parent
commit
840b7fc459
1 changed files with 3 additions and 3 deletions
  1. +3
    -3
      kamailio/acl-role.cfg

+ 3
- 3
kamailio/acl-role.cfg View File

@ -1,5 +1,5 @@
######## DoS prevention module ######## ######## DoS prevention module ########
# Default "order" is "Deny,Allow"(DA).
# Default "order" is "deny,allow".
# So if there is no data from DB request will be permitted by default. # So if there is no data from DB request will be permitted by default.
# #
loadmodule "ipops.so" loadmodule "ipops.so"
@ -7,7 +7,7 @@ modparam("htable", "htable", "acl=>initval=-1;autoexpire=7200")
#!trydef ACL_MESSAGE_DENY "Rejected by ACL" #!trydef ACL_MESSAGE_DENY "Rejected by ACL"
#!trydef ACL_CODE_DENY "603" #!trydef ACL_CODE_DENY "603"
#!trydef ACL_ORDER_ALLOW_DENY "AD"
#!trydef ACL_ORDER_ALLOW_DENY "allow,deny"
#!trydef ACL_IP_ADDR_ANY "0.0.0.0/0" #!trydef ACL_IP_ADDR_ANY "0.0.0.0/0"
#!trydef IP_REGEX "[0-9]{1,3}\.[0-9]{1,3}.[0-9]{1,3}\.[0-9]{1,3}" #!trydef IP_REGEX "[0-9]{1,3}\.[0-9]{1,3}.[0-9]{1,3}\.[0-9]{1,3}"
@ -28,7 +28,7 @@ route[ACL_CHECK] {
$var(sip-packet) = $rm; $var(sip-packet) = $rm;
} }
# FIXUP for BYE method with IPinstead of REALM in From, take REALM fron To header
# FIX for BYE method with IP instead of REALM in From, take REALM from To header
if ($fd =~ IP_REGEX) { if ($fd =~ IP_REGEX) {
xlog("L_WARNING","$ci |ACL-realm| Fixup for $var(sip-packet) with IP in from URI: use to-domain"); xlog("L_WARNING","$ci |ACL-realm| Fixup for $var(sip-packet) with IP in from URI: use to-domain");
$var(realm) = $td; $var(realm) = $td;


Loading…
Cancel
Save