[Devel] Re: [Users] how to make sure the caller is registered before it can dial out to PSTN

[Rafael R. GV]

Hi
I am using check_to() and check_from() for this issue, something like:


if (method == "REGISTER") {

log(1, "ANALYZING REGISTER REQUEST\n");
# to use digest authentication
if (is_user_in("Request-URI", "deactivated")) {
sl_send_reply("402", "Su cuenta fue desactivada");
break;
};

if (!www_authorize("mydomain.com.pe <http://mydomain.com.pe>", 
"subscriber")) {
log(1," ----- Fails to Register \n");
www_challenge("mydomain.com.pe <http://mydomain.com.pe>", "0");
break;
};

# only signed users are allowed
if (!check_to()) {
log(1, "LOG: Hijack!!!--> unsigned user registration attempt\n");
sl_send_reply("403", "hijack attempt!!!! Only signed users are allowed");
break;
};
log(1," Registered!!! \n");
if (!save("location")) {
sl_reply_error();
};
break;
};


# First check the source of the call
#***********************************
# If the call comes from the gateways, no authentication is required.
if (src_ip==200.x.x.x || src_ip==200.y.y.y) {
log(1,"Call from pstn|*, no authentication is required. \n");

# If the call comes from B2BUA, no authentication is required.
# The first leg of the call has already been authenticated.
} else if (src_ip==200.z.z.z && src_port==5070) {
log(1,"Call from B2BUA, no authentication is required. \n");
} else {
# We check user credentials
if ((method == "INVITE" || method== "CANCEL" || method== "BYE" || method== 
"ACK") && (!src_ip==200.z.z.z && !src_port==5070)){
log(1, "ANALYZING INVITE||CANCEL REQUESTs\n");
if (!proxy_authorize("mydomain.com.pe <http://mydomain.com.pe>", 
"subscriber")) {
# log(1," ----- Fails to ...proxy_authorize \n");
proxy_challenge("mydomain.com.pe <http://mydomain.com.pe>", "0");
break;
} else {
if (method == "INVITE" && !check_from()) {
sl_send_reply("403", "Only registered users are allowed");
log(1," ----> Only registered users are allowed \n");
break;
};
};

....

slds.-
Rafael Risco


On 9/5/05, Raymond Chen <rchen at broadz.com> wrote:
> 
>  Dear all,
> 
>  We want to prevent people dial out to PSTN without registering, how to 
> check from header again location table?
> 
>  Ray
> 
>  
> _______________________________________________
> Users mailing list
> Users at openser.org
> http://openser.org/cgi-bin/mailman/listinfo/users
> 
> 
> 


-- 

rrgv
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://openser.org/pipermail/devel/attachments/20050907/13b375fb/attachment.htm