Do the hosts have dynamic ip addresses, or can you set them up as static? We've got ours set up so that each server has the hostname of the other ones in the config files as such, and it only accepts communications that identify as those servers from those hostnames:

[svm1]
type=friend
secret=password
;insecure=very
context=default
host=svm1.shsu.edu
qualify=yes


Douglas Garstang wrote:
I have the following in sip.conf. It was my understanding that this configuration (ie with deny/permit) would only allow connections from hosts 192.168.10.4 and 192.168.10.5. That doesn't seem to be the case. Asterisk is accepting INVITE's from other addresses.
[a00090101]
type=friend
context=Company1
username=a00090101
;secret=180
;insecure=very
host=dynamic
[EMAIL PROTECTED]
deny=0.0.0.0/0.0.0.0
permit=192.168.10.4/255.255.255.0
permit=192.168.10.5/255.255.255.0
accountcode=a00090101
subscribecontext=status
;qualify=yes
canreinvite=yes

I'm trying to configure Asterisk to accept connections (ie invites) from two 
trusted hosts without asking for a password. If it gets an invite from 
somewhere else, send back Forbidden. Anyone know how to do this?

Thanks,
Doug.
_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --

Asterisk-Users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --

Asterisk-Users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to