Forwarded to serusers.
-------- Original Message -------- Subject: SER - Neighbors Date: Mon, 5 Sep 2005 14:53:47 -0300 (BRT) From: Anderson Alves de Albuquerque anderson@belem.voip.nce.ufrj.br To: Klaus Darilion klaus.mailinglists@pernau.at
In GNUGK I have Neighbors, and in SER how can I control Neighbors? If I don´t control my Neighbors then my SER could recive invite without control.
My situation I have more than one SER (Neighbors), look example:
------ SER (root) ----- | | | | | X | | | SER (1) SER(3) SER (3)
In this example SER root can receive INVITE form SER 1 and SER 2, but SER root can´t receive INVITE from SER 3.
I need to control this access.
Klaus Darilion wrote:
Forwarded to serusers.
-------- Original Message -------- Subject: SER - Neighbors Date: Mon, 5 Sep 2005 14:53:47 -0300 (BRT) From: Anderson Alves de Albuquerque anderson@belem.voip.nce.ufrj.br To: Klaus Darilion klaus.mailinglists@pernau.at
In GNUGK I have Neighbors, and in SER how can I control Neighbors? If I don´t control my Neighbors then my SER could recive invite without control.
In your ser.cfg you should differ between authenticated requests and un-authenticated requests:
authenticated: - requests from local users which will be authenticated using challenge/authorize():
- requests from trusted nodes (other ser, gateways...)
un-authenticated: - requests which are not authenticated
Thus, in your ser.cfg, first you have to detect if the request is authenticated or not, and then handle them accordingly.
Their is no "neighbor" feature in ser.
if (is_from_local()) { if (!proxy_authorize(...) { www_challenge(...); break; } # here we have authenticated messages from local users ...; break; } if (src_ip="1.2.3.4" || src_ip="2.3.4.5" ) { # our ser's # here we have trusted nodes ... break; } # here we have all untrusted requests ....
My situation I have more than one SER (Neighbors), look example:
------ SER (root) ----- | | | | | X | | | SER (1) SER(3) SER (3)
In this example SER root can receive INVITE form SER 1 and SER 2, but SER root can´t receive INVITE from SER 3.
I need to control this access.
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers