Re: [SR-Users] conditional on secfilter seems does not work or how to do it

Hi there

It must work fine. I've just tested it:

kamailio.cfg xinfo("Checking source IP $si"); secf_check_ip(); xinfo("Result of sec_check_ip: $?");

kamailio.log Aug 12 16:17:38 pepelux /usr/local/sbin/kamailio[23304]: INFO: <script>: Checking source IP 85.XXX.YYY.54 Aug 12 16:17:38 pepelux /usr/local/sbin/kamailio[23304]: INFO: <script>: Result of sec_check_ip: 2

# kamcmd secfilter.print ip IP Address ========== [+] Blacklisted -----------

[+] Whitelisted ----------- 0001 -> 85.XXX.YYY.54

Are you sure that the secf_check_ip() function is executed? Could you put a log before or after to verify it?

On the other hand, 0 is not a possible return value. If the IP address is not found, the return value will be 1:

[image: image.png]

Regards

On Tue, 11 Aug 2020 at 21:47, PICCORO McKAY Lenz mckaygerhard@gmail.com wrote:

I implemented secfilter in a simple way, in first step routing put that conditional for black list check that already works:

        secf_check_ip();
        if ($? == -2) {
                xlog("L_ALERT", "$rm from $si is blacklisted");
                drop();
        }

BUT NOW i want to change to whitelick checks, so i reviewed the docs and "2" is resulting for whitelist, so then i said "if not whitelisted so block" using "!= 2" as on https://www.kamailio.org/wiki/cookbooks/5.3.x/core#operators BUT SEEMS DOES NOT WORK: that is the code:

        secf_check_ip();
        if ($? != 2) {
                xlog("L_ALERT", "$rm from $si is not in whitelist, block");
                drop();
        }

when i tested all the calls passed not matter if are in the table or not as whitelist!

I want able to call only if are present and whitelisted the ip address.. so i also tested with:

        secf_check_ip();
        if ($? == 0) {
                xlog("L_ALERT", "$rm from $si is not present, so block");
                drop();
        }

to check if the ip address are presented in the table but call also passed and must not cos i not put never a entry in the table!

Lenz McKAY Gerardo (PICCORO) http://qgqlochekone.blogspot.com _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users