thanks guys --- On Wed, 7/7/10, Rene Kluwen <[email protected]> wrote:
From: Rene Kluwen <[email protected]> Subject: RE: smpp restrict connection to a specific client To: "'Rene Kluwen'" <[email protected]>, "'ishagh ouldbah'" <[email protected]> Cc: "'users'" <[email protected]> Date: Wednesday, July 7, 2010, 5:25 PM Sorry for the double post. So also 127.0.0.1;213.193.241.40 will work. Current svn trunk revision is 16. From: [email protected] [mailto:[email protected]] On Behalf Of Rene Kluwen Sent: donderdag 8 juli 2010 2:19 To: 'ishagh ouldbah' Cc: 'users' Subject: RE: smpp restrict connection to a specific client For the ones who want to give it a try: The smpplogins.txt is now as follows (but backward compatible): My-id My-password My-system-type allowed-ips Like: Joe secret joesbox 192.168.0.1 If the last ip address is omitted, then everybody is allowed to connect. If the last ip address is given, then only that ip address is allowed to connect. Works exactly like connect-allow-ip and connect-deny-ip. The latter has a mask of “*.*.*.*”. == Rene From: ishagh ouldbah [mailto:[email protected]] Sent: woensdag 7 juli 2010 14:34 To: Rene Kluwen Subject: RE: smpp restrict connection to a specific client Thanks all Rene, what is the syntax of smpplogins.txt when adding ip address Regards --- On Tue, 7/6/10, Rene Kluwen <[email protected]> wrote: From: Rene Kluwen <[email protected]> Subject: RE: smpp restrict connection to a specific client To: "'Rene Kluwen'" <[email protected]>, "'Nikos Balkanas'" <[email protected]>, "'ishagh ouldbah'" <[email protected]>, [email protected] Date: Tuesday, July 6, 2010, 5:59 PM Also it will allow ip connections on a per-user level. Something that cannot be done with external firewall hardware or software. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Rene Kluwen Sent: woensdag 7 juli 2010 2:23 To: 'Nikos Balkanas'; 'ishagh ouldbah'; [email protected] Subject: RE: smpp restrict connection to a specific client I agree that this kind of stuff is better arranged by real firewall software. But in Kannel we have connect-allow-ip c.s. right? So I don't see it is contrary to Kannel philosophy. == Rene -----Original Message----- From: Nikos Balkanas [mailto:[email protected]] Sent: woensdag 7 juli 2010 1:56 To: Rene Kluwen; 'ishagh ouldbah'; [email protected] Subject: Re: smpp restrict connection to a specific client I wouldn't recommend it. It is contrary to kannel philosophy (vis a vis sendsms-user). Besides there is better external software for this and anyone concerned about that level of security, already has a dedicated firewall installed. BR, Nikos ----- Original Message ----- From: "Rene Kluwen" <[email protected]> To: "'Nikos Balkanas'" <[email protected]>; "'ishagh ouldbah'" <[email protected]>; <[email protected]> Sent: Wednesday, July 07, 2010 1:58 AM Subject: RE: smpp restrict connection to a specific client > Of course it is possible to add an ip address or list of ip addresses in > smpplogins.txt. > But then again: Is anybody waiting for that? > > == Rene > > -----Original Message----- > From: Nikos Balkanas [mailto:[email protected]] > Sent: dinsdag 6 juli 2010 20:36 > To: Rene Kluwen; 'ishagh ouldbah'; [email protected] > Subject: Re: smpp restrict connection to a specific client > > Hi, > > All clients need to authenticate against smppbox to send SMPP. > > Otherwise any descent firewall should restrict network access. > > BR, > Nikos > ----- Original Message ----- > From: Rene Kluwen > To: 'ishagh ouldbah' ; [email protected] > Sent: Tuesday, July 06, 2010 7:21 PM > Subject: RE: smpp restrict connection to a specific client > > > If you are talking about restricting source ip addresses, I use iptables > for > > that. > > == Rene > > From: [email protected] [mailto:[email protected]] On Behalf > Of ishagh ouldbah > Sent: dinsdag 6 juli 2010 16:00 > To: [email protected] > Subject: smpp restrict connection to a specific client > > Hi all > I have this question regarding smppbox > can i allow conction to only clients that i want > Regards > > > >
