<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title></title>
</head>
<body>
<div name="messageBodySection">
<div dir="auto">Hello Daniel,<br />
<br />
Thanks for your quick answer! <br />
<br />
I indeed need to identify the group ID too.<br />
<br />
Here’s how I handle it (inspired from <a href="https://kamailio.org/docs/modules/5.5.x/modules/permissions.html#permissions.f.allow_source_address" target="_blank">https://kamailio.org/docs/modules/5.5.x/modules/permissions.html#permissions.f.allow_source_address</a>):<br />
<br />
‘''<br />
$var(group) = allow_source_address_group();<br />
<br />
if ($var(group) != -1) {<br />
xlog("L_INFO", "$si : $sp is allowed through group: $var(group)\n");<br />
[...]<br />
} else {<br />
xlog("L_INFO", "$si : $sp is not allowed - allow_source_address_group returned -1\n");<br />
xlog("L_INFO", "Rejecting $ci with 403 'Forbidden'\n");<br />
sl_send_reply("403", "Forbidden");<br />
exit;<br />
}<br />
‘''<br />
<br />
Best regards,</div>
</div>
<div name="messageSignatureSection"><br />
<div class="matchFont"><b>Romain Untereiner</b><br />
Co founder at <a href="https://www.cantoo.co"><i>Cantoo</i></a><br />
<a href="www.cantoo.co">www.cantoo.co</a></div>
</div>
<div name="messageReplySection">Le 18 mai 2021 à 08:44 +0200, Daniel-Constantin Mierla <miconda@gmail.com>, a écrit :<br />
<blockquote type="cite" style="border-left-color: grey; border-left-width: thin; border-left-style: solid; margin: 5px 5px;padding-left: 10px;">Hello,<br />
<br />
On 17.05.21 12:11, Romain Untereiner wrote:<br />
<blockquote type="cite">Hello all,<br />
<br />
I am having some trouble with Permissions module of Kamailio,<br />
regarding the allow_source_address_group() function. In 99.9% of the<br />
cases the IP of our partner is allowed as expected, but randomly it<br />
can fail (returning -1 for the same IP address that was allowed for<br />
many other calls in the meantime). <br />
<br />
I can’t understand why it fails and why only « sometimes » - I confirm<br />
this append on the same Kamailio box, with same IP and Port of the<br />
partner.<br />
<br />
In my custom logs:<br />
« X.X.X.X:YYYY is allowed through group Z » —> as expected<br />
and sometimes (like 1% of the cases): « X.X.X.X:YYYY is not allowed<br />
- allow_source_address_group returned -1»<br />
<br />
It is maybe to note that in the address table, this range is defined<br />
as /24 and not /32. Until now it never happened on /32 defined address<br />
but I don’t know if it can be correlated.<br />
<br />
Would someone have a clue on this?<br />
<br />
Versions:<br />
- kamailio 5.5.0 (x86_64/linux) d4c1a1<br />
- debian 9 stretch<br />
- postgresql 11.7<br /></blockquote>
<br />
how do you test the return code of the function? Paste here the snippet<br />
of the config where the function is used.<br />
<br />
Then, do you really need the goup id of the address or just to match the<br />
address?<br />
<br />
Cheers,<br />
Daniel<br />
<br />
--<br />
Daniel-Constantin Mierla -- www.asipto.com<br />
www.twitter.com/miconda -- www.linkedin.com/in/miconda<br />
Kamailio Advanced Training - Online<br />
May 17-20, 2021 (Europe Timezone) - June 7-10, 2021 (America Timezone)<br />
* https://www.asipto.com/sw/kamailio-advanced-training-online/<br />
<br /></blockquote>
</div>
</body>
</html>