I am trying to understand how to control access to Kannel. There are a couple of places in the config file where you can state what ips are allowed to connect.
In the core group there is the admin-allow-ip and the box-allow-ip. I believe I understand that the admin-allow-ip is to control the access to the admin-port for http requests to view the status and execute commands. I am not sure what the box-allow-ip is for but, I guess that this controls access to bearerbox from other smsboxes. (One could be running several smsboxes from other machines and allows them to connect from the other machines.) Is this correct? My real concern is I want to be able to specify the ip addresses that are allowed to send sendsms http requests e.g., http://kannelhost:portno_in_smsbox_group/cgi-bin/sendsms?username...... The above request, I am assuming, can be made from some other machine. Is there a way to specify what IPs are allowed to make such a request? I cannot see such a config parameter for the group = smsbox. There is a connect-allow-ip in the group = smsc and a user-allow-ip in the group = sendsms-user. Is what I am looking for this user-allow-ip? And what is the connect-allow-ip control? Thanks, -Tony
