Hello,

If the caller is not a local user you cannot authenticate him (as you do not have any info on that user) - so what you have to do is to limit what such a caller can do - typically only to local subscribers (no media, no PSTN, no other services, just to your users); or simply reject them if you do not want to get calls from foreign domains.

Regards,

Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
http://www.opensips-solutions.com

On 19.03.2014 14:20, Miha wrote:
Hi,

I am doing "proxy_authorize" for "!(method=="REGISTER") && is_from_local()".

I request INVITE is not send from user, which does "not contain" local_domain (defined in domains table) in INVITE, so this will not be authenticated as this request will not go to this "!(method=="REGISTER") && is_from_local()" condition and in my case this invite will go throught.

Was is best practice for droping that kind of invites?

Doing this:

 $avp(port)="5060";
if(!$si=="SBC_IP" && !lb_is_destination("$si","$(avp(port){s.int})") && !is_from_local()){
        drop;
        }

?

tnx!

miha


_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users




_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Reply via email to