Thanks for that. I can't get my head around how to allow access to specific hosts for specific extensions, while still allowing incoming calls from our PSTN gateway. Our PSTN gateway puts the caller-id in the From: field, as I think it should. Asterisk then fails to match it against any of the users in sip.conf, and therefore allows the call in as a guest and drops it into the context defined in [general]. If it allows calls in this manner for the PSTN gateway, I think it will allow calls from anyone in guest mode, which is bad.
-----Original Message----- From: Kevin P. Fleming [mailto:[EMAIL PROTECTED] Sent: Friday, December 23, 2005 10:32 AM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [Asterisk-Users] RE: SIP permit/deny Douglas Garstang wrote: > [a00090101] > type=friend > context=Company1 > username=a00090101 > ;secret=180 > ;insecure=very > host=dynamic > [EMAIL PROTECTED] > deny=0.0.0.0/0.0.0.0 > permit=192.168.10.4/255.255.255.0 > permit=192.168.10.5/255.255.255.0 These lines are duplicates; you have asked Asterisk to look at only the first 24 bits of the host's IP address for matching purposes, so any host on 192.168.10.x will be able to send you SIP signaling. _______________________________________________ --Bandwidth and Colocation provided by Easynews.com -- Asterisk-Users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users _______________________________________________ --Bandwidth and Colocation provided by Easynews.com -- Asterisk-Users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
