Need to validate a IP address with subnet mask - sr-users - kamailio.org

List overview All Threads
Download

Need to validate a IP address with subnet mask

Database Insert

Textops and Multipart Body -...

Sunil More

10 Feb 2016 10 Feb '16

12:40 a.m.

Hi All, I want to validate a IP address in kamailio for requests coming from different IPs. I have browsed and found permissions module, however is there a way where i can directly compare a source IP address to an address stored in an avp and get a true or false value. something like this $si==192.168.2.0/24 Thanking You, Sunil More

Attachments:

attachment.html (text/html — 590 bytes)

Reply

Show replies by date

Phil Lavin

10 Feb 10 Feb

2:10 a.m.

2 ways: · is_in_subnet() - http://www.kamailio.org/docs/modules/3.4.x/modules/ipops.html#idp42416 · Add the IP and mask to the address table and use allow_source_address() - http://kamailio.org/docs/modules/3.1.x/modules_k/permissions.html#id2528610 Phil From: sr-users [mailto:sr-users-bounces@lists.sip-router.org] On Behalf Of Sunil More Sent: 10 February 2016 05:41 To: Kamailio (SER) - Users Mailing List <sr-users(a)lists.sip-router.org> Subject: [SR-Users] Need to validate a IP address with subnet mask Hi All, I want to validate a IP address in kamailio for requests coming from different IPs. I have browsed and found permissions module, however is there a way where i can directly compare a source IP address to an address stored in an avp and get a true or false value. something like this $si==192.168.2.0/24<http://192.168.2.0/24> Thanking You, Sunil More

Reply

Sunil More

2:39 a.m.

Hey Phil, Thank you for the input , this helps. Thanking You, Sunil More On Wed, Feb 10, 2016 at 12:40 PM, Phil Lavin <phil.lavin(a)synety.com> wrote:

2 ways: · is_in_subnet() - http://www.kamailio.org/docs/modules/3.4.x/modules/ipops.html#idp42416 · Add the IP and mask to the address table and use allow_source_address() - http://kamailio.org/docs/modules/3.1.x/modules_k/permissions.html#id2528610 Phil *From:* sr-users [mailto:sr-users-bounces@lists.sip-router.org] *On Behalf Of *Sunil More *Sent:* 10 February 2016 05:41 *To:* Kamailio (SER) - Users Mailing List <sr-users(a)lists.sip-router.org> *Subject:* [SR-Users] Need to validate a IP address with subnet mask Hi All, I want to validate a IP address in kamailio for requests coming from different IPs. I have browsed and found permissions module, however is there a way where i can directly compare a source IP address to an address stored in an avp and get a true or false value. something like this $si==192.168.2.0/24 Thanking You, Sunil More _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

Reply

Daniel-Constantin Mierla

3:56 a.m.

Hello, for sake of completion, using the src_ip keyword works with network addresses: if(src_ip==1.2.3.0/24) Cheers, Daniel On 10/02/16 08:39, Sunil More wrote:

Hey Phil, Thank you for the input , this helps. Thanking You, Sunil More On Wed, Feb 10, 2016 at 12:40 PM, Phil Lavin <phil.lavin(a)synety.com <mailto:phil.lavin@synety.com>> wrote: 2 ways: · is_in_subnet() - http://www.kamailio.org/docs/modules/3.4.x/modules/ipops.html#idp42416 · Add the IP and mask to the address table and use allow_source_address() - http://kamailio.org/docs/modules/3.1.x/modules_k/permissions.html#id2528610 Phil *From:*sr-users [mailto:sr-users-bounces@lists.sip-router.org <mailto:sr-users-bounces@lists.sip-router.org>] *On Behalf Of *Sunil More *Sent:* 10 February 2016 05:41 *To:* Kamailio (SER) - Users Mailing List <sr-users(a)lists.sip-router.org <mailto:sr-users@lists.sip-router.org>> *Subject:* [SR-Users] Need to validate a IP address with subnet mask Hi All, I want to validate a IP address in kamailio for requests coming from different IPs. I have browsed and found permissions module, however is there a way where i can directly compare a source IP address to an address stored in an avp and get a true or false value. something like this $si==192.168.2.0/24 <http://192.168.2.0/24> Thanking You, Sunil More _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org <mailto:sr-users@lists.sip-router.org> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-- Daniel-Constantin Mierla http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda Book: SIP Routing With Kamailio - http://www.asipto.com http://miconda.eu

Reply

Sunil More

4 a.m.

Hello, Thanks for the input,Daniel. Thanking You, Sunil More Ph : 9503338275 On Wed, Feb 10, 2016 at 2:26 PM, Daniel-Constantin Mierla <miconda(a)gmail.com

wrote:

> Hello, > > for sake of completion, using the src_ip keyword works with network > addresses: > > if(src_ip==1.2.3.0/24) > > Cheers, > Daniel > > > On 10/02/16 08:39, Sunil More wrote: > > Hey Phil, > > Thank you for the input , this helps. > > > > Thanking You, > Sunil More > > > On Wed, Feb 10, 2016 at 12:40 PM, Phil Lavin <phil.lavin(a)synety.com>

wrote:

> >> 2 ways: >> >> >> >> · is_in_subnet() - >> http://www.kamailio.org/docs/modules/3.4.x/modules/ipops.html#idp42416 >> >> · Add the IP and mask to the address table and use >> allow_source_address() - >> http://kamailio.org/docs/modules/3.1.x/modules_k/permissions.html#id2528610 >> >> >> >> >> >> Phil >> >> >> >> >> >> *From:* sr-users [mailto: <sr-users-bounces(a)lists.sip-router.org> >> sr-users-bounces(a)lists.sip-router.org] *On Behalf Of *Sunil More >> *Sent:* 10 February 2016 05:41 >> *To:* Kamailio (SER) - Users Mailing List <sr-users(a)lists.sip-router.org> >> *Subject:* [SR-Users] Need to validate a IP address with subnet mask >> >> >> >> Hi All, >> >> >> >> I want to validate a IP address in kamailio for requests coming from >> different IPs. I have browsed and found permissions module, however is >> there a way where i can directly compare a source IP address to an address >> stored in an avp and get a true or false value. >> >> >> >> something like this >> >> >> >> $si==192.168.2.0/24 >> >> >> >> >> Thanking You, >> Sunil More >> >> _______________________________________________ >> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list >> sr-users(a)lists.sip-router.org >> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users >> >> > > > _______________________________________________ > SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing listsr-users@lists.sip-router.orghttp://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users > > > -- > Daniel-Constantin Mierlahttp://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda > Book: SIP Routing With Kamailio - http://www.asipto.comhttp://miconda.eu > > > _______________________________________________ > SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list > sr-users(a)lists.sip-router.org > http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users > >

Reply

Phil Lavin

4:04 a.m.

That's nicer Syntax. Thanks, Daniel :) From: sr-users [mailto:sr-users-bounces@lists.sip-router.org] On Behalf Of Daniel-Constantin Mierla Sent: 10 February 2016 08:57 To: Kamailio (SER) - Users Mailing List <sr-users(a)lists.sip-router.org> Subject: Re: [SR-Users] Need to validate a IP address with subnet mask Hello, for sake of completion, using the src_ip keyword works with network addresses: if(src_ip==1.2.3.0/24) Cheers, Daniel On 10/02/16 08:39, Sunil More wrote: Hey Phil, Thank you for the input , this helps. Thanking You, Sunil More On Wed, Feb 10, 2016 at 12:40 PM, Phil Lavin <phil.lavin@synety.com<mailto:phil.lavin@synety.com>> wrote: 2 ways: * is_in_subnet() - http://www.kamailio.org/docs/modules/3.4.x/modules/ipops.html#idp42416 * Add the IP and mask to the address table and use allow_source_address() - http://kamailio.org/docs/modules/3.1.x/modules_k/permissions.html#id2528610 Phil From: sr-users [mailto:sr-users-bounces@lists.sip-router.org<mailto:sr-users-bounces@lists.sip-router.org>] On Behalf Of Sunil More Sent: 10 February 2016 05:41 To: Kamailio (SER) - Users Mailing List <sr-users@lists.sip-router.org<mailto:sr-users@lists.sip-router.org>> Subject: [SR-Users] Need to validate a IP address with subnet mask Hi All, I want to validate a IP address in kamailio for requests coming from different IPs. I have browsed and found permissions module, however is there a way where i can directly compare a source IP address to an address stored in an avp and get a true or false value. something like this $si==192.168.2.0/24<http://192.168.2.0/24> Thanking You, Sunil More _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org<mailto:sr-users@lists.sip-router.org> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org<mailto:sr-users@lists.sip-router.org> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users -- Daniel-Constantin Mierla http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda Book: SIP Routing With Kamailio - http://www.asipto.com http://miconda.eu

Reply

Daniel-Constantin Mierla

5:26 a.m.

Nice, but useful only when matching the source ip. The ipops or permissions module offer more flexibility, so the value that needs to be match can be taken from any variable (e.g., target domain in r-uri, or some header - useful if there is an edge proxy in between). There are couple of other keywords that should work for network address matching, like dst_ip and snd_ip (in onsend_route). Cheers, Daniel On 10/02/16 10:04, Phil Lavin wrote:

That’s nicer Syntax. Thanks, Daniel J *From:*sr-users [mailto:sr-users-bounces@lists.sip-router.org] *On Behalf Of *Daniel-Constantin Mierla *Sent:* 10 February 2016 08:57 *To:* Kamailio (SER) - Users Mailing List <sr-users(a)lists.sip-router.org> *Subject:* Re: [SR-Users] Need to validate a IP address with subnet mask Hello, for sake of completion, using the src_ip keyword works with network addresses: if(src_ip==1.2.3.0/24) Cheers, Daniel On 10/02/16 08:39, Sunil More wrote: Hey Phil, Thank you for the input , this helps. Thanking You, Sunil More On Wed, Feb 10, 2016 at 12:40 PM, Phil Lavin <phil.lavin(a)synety.com <mailto:phil.lavin@synety.com>> wrote: 2 ways: · is_in_subnet() - http://www.kamailio.org/docs/modules/3.4.x/modules/ipops.html#idp42416 · Add the IP and mask to the address table and use allow_source_address() - http://kamailio.org/docs/modules/3.1.x/modules_k/permissions.html#id2528610 Phil *From:*sr-users [mailto:sr-users-bounces@lists.sip-router.org <mailto:sr-users-bounces@lists.sip-router.org>] *On Behalf Of *Sunil More *Sent:* 10 February 2016 05:41 *To:* Kamailio (SER) - Users Mailing List <sr-users(a)lists.sip-router.org <mailto:sr-users@lists.sip-router.org>> *Subject:* [SR-Users] Need to validate a IP address with subnet mask Hi All, I want to validate a IP address in kamailio for requests coming from different IPs. I have browsed and found permissions module, however is there a way where i can directly compare a source IP address to an address stored in an avp and get a true or false value. something like this $si==192.168.2.0/24 <http://192.168.2.0/24> Thanking You, Sunil More _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org <mailto:sr-users@lists.sip-router.org> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users(a)lists.sip-router.org <mailto:sr-users@lists.sip-router.org> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users -- Daniel-Constantin Mierla http://twitter.com/#!/miconda <http://twitter.com/#%21/miconda> - http://www.linkedin.com/in/miconda Book: SIP Routing With Kamailio - http://www.asipto.com http://miconda.eu

-- Daniel-Constantin Mierla http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda Book: SIP Routing With Kamailio - http://www.asipto.com http://miconda.eu

Reply

Sunil More

16 Feb 16 Feb

7:01 a.m.

Thank you for the additional info. Saw the other keywords on the documentation. is_in_subnet() worked well for my requirement. Thank you Again. Thanking You, Sunil More Ph : 9503338275 On Wed, Feb 10, 2016 at 3:56 PM, Daniel-Constantin Mierla <miconda(a)gmail.com

wrote:

> Nice, but useful only when matching the source ip. The ipops or > permissions module offer more flexibility, so the value that needs to be > match can be taken from any variable (e.g., target domain in r-uri, or some > header - useful if there is an edge proxy in between). > > There are couple of other keywords that should work for network address > matching, like dst_ip and snd_ip (in onsend_route). > > Cheers, > Daniel > > > On 10/02/16 10:04, Phil Lavin wrote: > > That’s nicer Syntax. Thanks, Daniel J > > > > > > *From:* sr-users [mailto:sr-users-bounces@lists.sip-router.org > <sr-users-bounces(a)lists.sip-router.org>] *On Behalf Of *Daniel-Constantin > Mierla > *Sent:* 10 February 2016 08:57 > *To:* Kamailio (SER) - Users Mailing List <sr-users(a)lists.sip-router.org> > <sr-users(a)lists.sip-router.org> > *Subject:* Re: [SR-Users] Need to validate a IP address with subnet mask > > > > Hello, > > for sake of completion, using the src_ip keyword works with network > addresses: > > if(src_ip==1.2.3.0/24) > > Cheers, > Daniel > > On 10/02/16 08:39, Sunil More wrote: > > Hey Phil, > > > > Thank you for the input , this helps. > > > > > > > Thanking You, > Sunil More > > > > On Wed, Feb 10, 2016 at 12:40 PM, Phil Lavin <phil.lavin(a)synety.com>

wrote:

> > 2 ways: > > > > · is_in_subnet() - > http://www.kamailio.org/docs/modules/3.4.x/modules/ipops.html#idp42416 > > · Add the IP and mask to the address table and use > allow_source_address() - > http://kamailio.org/docs/modules/3.1.x/modules_k/permissions.html#id2528610 > > > > > > Phil > > > > > > *From:* sr-users [mailto: <sr-users-bounces(a)lists.sip-router.org> > sr-users-bounces(a)lists.sip-router.org] *On Behalf Of *Sunil More > *Sent:* 10 February 2016 05:41 > *To:* Kamailio (SER) - Users Mailing List <sr-users(a)lists.sip-router.org> > *Subject:* [SR-Users] Need to validate a IP address with subnet mask > > > > Hi All, > > > > I want to validate a IP address in kamailio for requests coming from > different IPs. I have browsed and found permissions module, however is > there a way where i can directly compare a source IP address to an address > stored in an avp and get a true or false value. > > > > something like this > > > > $si==192.168.2.0/24 > > > > > Thanking You, > Sunil More > > > _______________________________________________ > SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list > sr-users(a)lists.sip-router.org > http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users > > > > > > > _______________________________________________ > > SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list > > sr-users(a)lists.sip-router.org > > http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users > > > > -- > > Daniel-Constantin Mierla > > http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda > > Book: SIP Routing With Kamailio - http://www.asipto.com > > http://miconda.eu > > > -- > Daniel-Constantin Mierlahttp://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda > Book: SIP Routing With Kamailio - http://www.asipto.comhttp://miconda.eu > > > _______________________________________________ > SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list > sr-users(a)lists.sip-router.org > http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users > >

Reply

3243

days inactive

3249

days old

sr-users@lists.kamailio.org

Manage subscription

7 comments

3 participants

tags (0)

participants (3)

Daniel-Constantin Mierla
Phil Lavin
Sunil More