Re: [asterisk-users] multiple host= in sip.conf
David Boyd wrote: On Wed, 2007-05-30 at 15:29 -0500, Eric ManxPower Wieling wrote: Bryan Laird wrote: for inbound connections how does asterisk manage host=host-name returning multiple A records... will it allow authentication for any of the IP's returned? I would assume that in the case of 'inbound' if you specify a host-name that you have PTR records for you could do it in one entry again I'm making a blind assumption. As I understand it, Asterisk does a DNS lookup on load/reload and uses whatever the first IP address returned. allow= and deny= is what should be used for access control. Not the host= line. The host= line is normally used for Asterisk - Device stuff. ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users Does that mean that even when dynamic dns entries exist and the time to live is set to 15 minutes asterisk will continue to try using the old expired results? Dave ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users it does mean that, however it updates at the sip registration timeout, the point in which the device re-registers. So make sure your reg timeout in sip.conf and in the device are below 15 minutes and its not an issue. FYI the default timeout is 3600 seconds, 1 hour. ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
[asterisk-users] multiple host= in sip.conf
Hi, I am running Asterisk 1.4.4, and needed to setup sip accounts for someone to call my server and place calls. However, he has multiple IP's that he comes from, and since I authenticate him of his IP, I did this, and it works. [vz1] context=outbound type=friend host=x.x.x.x disallow=all allow=alaw canreinvite=no [vz2] context=outbound type=friend host=y.y.y.y disallow=all allow=alaw canreinvite=no [vz3] context=outbound type=friend host=.z.z.z.z disallow=all allow=alaw canreinvite=no However, is there anyway I can have just one account for him, with mult host= statements, so I can authenticate him based on his IP in just one place? -- thanks, Yusuf ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] multiple host= in sip.conf
I dont think asterisk supports this . You can have host=dynamic and he can send calls from different servers . Problem will arise when you need to call him ( if registrations are enabled then latest registration will be getting call from you or you can directly send calls to his ip . ) On 30/05/07, Yusuf [EMAIL PROTECTED] wrote: Hi, I am running Asterisk 1.4.4, and needed to setup sip accounts for someone to call my server and place calls. However, he has multiple IP's that he comes from, and since I authenticate him of his IP, I did this, and it works. [vz1] context=outbound type=friend host=x.x.x.x disallow=all allow=alaw canreinvite=no [vz2] context=outbound type=friend host=y.y.y.y disallow=all allow=alaw canreinvite=no [vz3] context=outbound type=friend host=.z.z.z.z disallow=all allow=alaw canreinvite=no However, is there anyway I can have just one account for him, with mult host= statements, so I can authenticate him based on his IP in just one place? -- thanks, Yusuf ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] multiple host= in sip.conf
Not supported jsut use host=dynamic with username and secret. Alex Yusuf a écrit : Hi, I am running Asterisk 1.4.4, and needed to setup sip accounts for someone to call my server and place calls. However, he has multiple IP's that he comes from, and since I authenticate him of his IP, I did this, and it works. [vz1] context=outbound type=friend host=x.x.x.x disallow=all allow=alaw canreinvite=no [vz2] context=outbound type=friend host=y.y.y.y disallow=all allow=alaw canreinvite=no [vz3] context=outbound type=friend host=.z.z.z.z disallow=all allow=alaw canreinvite=no However, is there anyway I can have just one account for him, with mult host= statements, so I can authenticate him based on his IP in just one place? ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] multiple host= in sip.conf
Thing is, he does not REGISTER to me, he just uses me as proxy for his calls. I authenticate his calls in his IP. Alexandre VERNIOL wrote: Not supported jsut use host=dynamic with username and secret. Alex Yusuf a écrit : Hi, I am running Asterisk 1.4.4, and needed to setup sip accounts for someone to call my server and place calls. However, he has multiple IP's that he comes from, and since I authenticate him of his IP, I did this, and it works. [vz1] context=outbound type=friend host=x.x.x.x disallow=all allow=alaw canreinvite=no [vz2] context=outbound type=friend host=y.y.y.y disallow=all allow=alaw canreinvite=no [vz3] context=outbound type=friend host=.z.z.z.z disallow=all allow=alaw canreinvite=no However, is there anyway I can have just one account for him, with mult host= statements, so I can authenticate him based on his IP in just one place? -- thanks, Yusuf ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] multiple host= in sip.conf
for inbound connections how does asterisk manage host=host-name returning multiple A records... will it allow authentication for any of the IP's returned? I would assume that in the case of 'inbound' if you specify a host- name that you have PTR records for you could do it in one entry again I'm making a blind assumption. IE say you 10.23.23.3, .4, .5 as his IP's if you created entries either in your own dns or etc hosts (depending on os) you should be able to create entries for each of his IP's all resolving to the same name... and then one entry ... for his transactions from him - you. now the reverse of you - him you would in theory loose control over which host you send the call to but if he doesn't care then it wold work... and while this assumes you have no moral / security objection to using host-names. someone would have to keep my honest here though as I haven't looked at where asterisk does the NS lookup and how those transactions work. if it only read the conf file and did a translation at startup via a single lookup for host name then this wouldn't work. On May 30, 2007, at 6:11 AM, Yusuf wrote: Thing is, he does not REGISTER to me, he just uses me as proxy for his calls. I authenticate his calls in his IP. Alexandre VERNIOL wrote: Not supported jsut use host=dynamic with username and secret. Alex Yusuf a écrit : Hi, I am running Asterisk 1.4.4, and needed to setup sip accounts for someone to call my server and place calls. However, he has multiple IP's that he comes from, and since I authenticate him of his IP, I did this, and it works. [vz1] context=outbound type=friend host=x.x.x.x disallow=all allow=alaw canreinvite=no [vz2] context=outbound type=friend host=y.y.y.y disallow=all allow=alaw canreinvite=no [vz3] context=outbound type=friend host=.z.z.z.z disallow=all allow=alaw canreinvite=no However, is there anyway I can have just one account for him, with mult host= statements, so I can authenticate him based on his IP in just one place? -- thanks, Yusuf ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Bryan Laird, Sr. Manager CM Operations Phone: 703-944-9909 -+- Cablemodems are the gateway to the Internet. The Internet is a gateway to some things that are better left un-seen. ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] multiple host= in sip.conf
Bryan Laird wrote: for inbound connections how does asterisk manage host=host-name returning multiple A records... will it allow authentication for any of the IP's returned? I would assume that in the case of 'inbound' if you specify a host-name that you have PTR records for you could do it in one entry again I'm making a blind assumption. As I understand it, Asterisk does a DNS lookup on load/reload and uses whatever the first IP address returned. allow= and deny= is what should be used for access control. Not the host= line. The host= line is normally used for Asterisk - Device stuff. ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] multiple host= in sip.conf
On Wed, 2007-05-30 at 15:29 -0500, Eric ManxPower Wieling wrote: Bryan Laird wrote: for inbound connections how does asterisk manage host=host-name returning multiple A records... will it allow authentication for any of the IP's returned? I would assume that in the case of 'inbound' if you specify a host-name that you have PTR records for you could do it in one entry again I'm making a blind assumption. As I understand it, Asterisk does a DNS lookup on load/reload and uses whatever the first IP address returned. allow= and deny= is what should be used for access control. Not the host= line. The host= line is normally used for Asterisk - Device stuff. ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users Does that mean that even when dynamic dns entries exist and the time to live is set to 15 minutes asterisk will continue to try using the old expired results? Dave ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] multiple host= in sip.conf
David Boyd wrote: Does that mean that even when dynamic dns entries exist and the time to live is set to 15 minutes asterisk will continue to try using the old expired results? You would have to try it and see. I do not know all the DNS oddities of Asterisk. Asterisk's DNS support is the worst I have ever seen in any piece of software that supports DNS. Unfortunately fixing this is no easy task. Search the mailing list archives for more information. I don't have DNS issues with Asterisk because I never give Asterisk anything except an IP address. Devices that change IP addresses register to Asterisk. ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] multiple host= in sip.conf
On Wed, 2007-05-30 at 18:03 -0500, Eric ManxPower Wieling wrote: David Boyd wrote: Does that mean that even when dynamic dns entries exist and the time to live is set to 15 minutes asterisk will continue to try using the old expired results? I can also say that my experience in putting DynDNS hostnames in sip.conf do not even get mapped to IP addresses at all. I have ALWAYS had to put an actual IP for it to not grab it from eth0 by default. It never errors out while reading the config file, or logs anything - I just know it never looked up the IP for me. I have not personally tried 1.4 yet, but I would (like you) wish it to look it up and create the appropriate headers instead of me relying on my firewall to re-write them. -Greg ___ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
