On Wed, 2008-09-17 at 19:58 +0200, Remco Barendse wrote:
> Why doesn't Asterisk allow both username&pass as well as setting an ip 
> adress on a sip.extension?

It does.  To enforce ACLs on a SIP user or peer or friend, simply use
"permit" and "deny" statements to allow and disallow various IP
addresses or subnets.  Standard practice seems to be to deny everything
first, then specifically allow other IP addresses.

[user]
type=friend
secret=mypassword
host=dynamic
deny=0.0.0.0/0
permit=10.1.2.3
permit=192.168.123.0/24
permit=192.168.222.0/255.255.255.0

-- 
Jared Smith
Training Manager
Digium, Inc.


_______________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

AstriCon 2008 - September 22 - 25 Phoenix, Arizona
Register Now: http://www.astricon.net

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to