[Users] allow trusted proxies with dynamic IPs

List overview All Threads
Download

newer

older

[Users] ADDON: new nathelper...

[Users] $hdr($avp(s:name))

Cristian Caprar

16 Jan 2007 16 Jan '07

10:55 a.m.

Hi,

Is it possible to allow_trusted some PSTN gateways which have a dynamic IP address?

...

From what it looks like, the trusted table only allows the usage of a

source IP address. A hostname that is DNS resolvable or an IP/mask pair would solve this.

What can be done?

Thanks,

Cristian

Attachments:

attachment.html (text/html — 6.3 KB)

Show replies by date

Cristian Caprar

17 Jan 17 Jan

6:26 p.m.

Hi all,

Can someone provide any hints on how to solve the issue described below?

Thanks,

Cristian

________________________________

From: users-bounces@openser.org [mailto:users-bounces@openser.org] On Behalf Of Cristian Caprar Sent: Tuesday, January 16, 2007 12:55 PM To: users@openser.org Subject: [Users] allow trusted proxies with dynamic IPs

Hi,

Is it possible to allow_trusted some PSTN gateways which have a dynamic IP address?

...

From what it looks like, the trusted table only allows the usage of a

source IP address. A hostname that is DNS resolvable or an IP/mask pair would solve this.

What can be done?

Thanks,

Cristian

Klaus Darilion

18 Jan 18 Jan

9:01 a.m.

You can'T use IP based authentication if the IP addresses are changing.

Thus, you either have to use gateways which are able to authenticate with digest authentication or the gateway supports TLS.

regards klaus

Cristian Caprar wrote:

...

Hi all,

Can someone provide any hints on how to solve the issue described below?

Thanks,

Cristian

From: users-bounces@openser.org [mailto:users-bounces@openser.org] On Behalf Of Cristian Caprar Sent: Tuesday, January 16, 2007 12:55 PM To: users@openser.org Subject: [Users] allow trusted proxies with dynamic IPs

Hi,

Is it possible to allow_trusted some PSTN gateways which have a dynamic IP address?

...
From what it looks like, the trusted table only allows the usage of a

source IP address. A hostname that is DNS resolvable or an IP/mask pair would solve this.

What can be done?

Thanks,

Cristian

Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users

-- Klaus Darilion nic.at

Cristian Caprar

3:38 p.m.

I was afraid of this answer. So I guess the solution for us is to fix the IP address of the GW and keep it in the trusted table.

Thanks, Cristian

...

-----Original Message----- From: Klaus Darilion [mailto:klaus.mailinglists@pernau.at] Sent: Thursday, January 18, 2007 11:02 AM To: Cristian Caprar Cc: users@openser.org Subject: Re: [Users] allow trusted proxies with dynamic IPs

You can'T use IP based authentication if the IP addresses are

changing.

...

Thus, you either have to use gateways which are able to authenticate with digest authentication or the gateway supports TLS.

regards klaus

Cristian Caprar wrote:

...
Hi all,

Can someone provide any hints on how to solve the issue described

below?

...

...
Thanks,

Cristian

From: users-bounces@openser.org [mailto:users-bounces@openser.org]

...

...
Behalf Of Cristian Caprar Sent: Tuesday, January 16, 2007 12:55 PM To: users@openser.org Subject: [Users] allow trusted proxies with dynamic IPs

Hi,

Is it possible to allow_trusted some PSTN gateways which have a

dynamic

...

...
IP address?

...
From what it looks like, the trusted table only allows the usage of

...

...
source IP address. A hostname that is DNS resolvable or an IP/mask

pair

...

...
would solve this.

What can be done?

Thanks,

Cristian

------------------------------------------------------------------------

...

...

Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users

-- Klaus Darilion nic.at

Klaus Darilion

9:32 p.m.

btw: if you use IP based authentication do not use UDP (except you can be sure that the packets can't be spoofed).

regards klaus

On Thu, January 18, 2007 16:38, Cristian Caprar said:

...

I was afraid of this answer. So I guess the solution for us is to fix the IP address of the GW and keep it in the trusted table.

Thanks, Cristian

...
-----Original Message----- From: Klaus Darilion [mailto:klaus.mailinglists@pernau.at] Sent: Thursday, January 18, 2007 11:02 AM To: Cristian Caprar Cc: users@openser.org Subject: Re: [Users] allow trusted proxies with dynamic IPs

You can'T use IP based authentication if the IP addresses are

changing.

...
Thus, you either have to use gateways which are able to authenticate with digest authentication or the gateway supports TLS.

regards klaus

Cristian Caprar wrote:

...
Hi all,

Can someone provide any hints on how to solve the issue described

below?

...
...
Thanks,

Cristian

From: users-bounces@openser.org [mailto:users-bounces@openser.org]

On

...
...
Behalf Of Cristian Caprar Sent: Tuesday, January 16, 2007 12:55 PM To: users@openser.org Subject: [Users] allow trusted proxies with dynamic IPs

Hi,

Is it possible to allow_trusted some PSTN gateways which have a

dynamic

...
...
IP address?

...
From what it looks like, the trusted table only allows the usage of

a

...
...
source IP address. A hostname that is DNS resolvable or an IP/mask

pair

...
...
would solve this.

What can be done?

Thanks,

Cristian

...
...

Users mailing list Users@openser.org http://openser.org/cgi-bin/mailman/listinfo/users

-- Klaus Darilion nic.at

6677

Age (days ago)

6679

Last active (days ago)

sr-users@lists.kamailio.org

4 comments

2 participants

tags (0)

participants (2)

Cristian Caprar
Klaus Darilion