Browse Source

lets try using the proxy acl and the x-auth-ip header so we can auth via IPs in erlang later

3.12
Karl Anderson 15 years ago
parent
commit
a73044bba5
3 changed files with 10 additions and 7 deletions
  1. +6
    -3
      autoload_configs/acl.conf.xml
  2. +2
    -2
      sip_profiles/sipinterface_1.xml
  3. +2
    -2
      sip_profiles/sipinterface_2.xml

+ 6
- 3
autoload_configs/acl.conf.xml View File

@ -1,10 +1,13 @@
<configuration name="acl.conf" description="Network Lists">
<network-lists>
<list name="proxies" default="deny">
<list name="trusted" default="deny">
<node type="allow" cidr="173.203.215.241/32"/> <!--unknown-->
<node type="allow" cidr="72.249.14.242/32"/> <!--gw01-car.dal.us.icall.net-->
<node type="allow" cidr="8.19.97.6/32"/> <!--sbc01-car.dal.us.icall.net-->
</list>
<list name="authoritative" default="deny">
<node type="allow" cidr="184.106.172.9/32"/> <!--sipproxy001-prod-ord-->
<node type="allow" cidr="204.232.212.190/32"/> <!--sipproxy002-prod-dfw-->
</list>
</network-lists>
</configuration>

+ 2
- 2
sip_profiles/sipinterface_1.xml View File

@ -6,8 +6,8 @@
<!-- ACL -->
<param name="auth-calls" value="true"/>
<param name="apply-nat-acl" value="rfc1918"/>
<!--<param name="apply-inbound-acl" value="proxies"/>-->
<!--<param name="apply-proxy-acl" value="proxies"/>-->
<param name="apply-inbound-acl" value="trusted"/>
<param name="apply-proxy-acl" value="authoritative"/>
<param name="local-network-acl" value="localnet.auto"/>
<!--<param name="apply-register-acl" value="domains"/>-->


+ 2
- 2
sip_profiles/sipinterface_2.xml View File

@ -6,8 +6,8 @@
<!-- ACL -->
<param name="auth-calls" value="true"/>
<param name="apply-nat-acl" value="rfc1918"/>
<param name="apply-inbound-acl" value="proxies"/>
<!--<param name="apply-proxy-acl" value="proxies"/>-->
<param name="apply-inbound-acl" value="trusted"/>
<param name="apply-proxy-acl" value="authoritative"/>
<param name="local-network-acl" value="localnet.auto"/>
<!--<param name="apply-register-acl" value="domains"/>-->


Loading…
Cancel
Save