[Serusers] Authentication Based On IP Addresses.

Klaus Darilion klaus.mailinglists at pernau.at
Tue May 24 18:55:00 CEST 2005


Daniel-Constantin Mierla wrote:
> On 05/24/05 16:14, Klaus Darilion wrote:
> 
>> Daniel-Constantin Mierla wrote:
>>
>>> With 0.8.14 you have to do some development. With 0.9.0 you can use the 
>>
>>
>>
>> Really? How about: if (src_ip==192.168.0.10) { ...
> 
> 
> and you suggest to do this for each user and edit the config file every 
> time you add a user? I cannot think of thousands of 
> if(search("To:.*sip:userNNN at mydomain\.com") && src_ip==xxx.xxx.xxx.xxx)) 
> in the config file ... but I bet it is possible :-)

I was thinking of a simple setup with one or several PSTN gateways 
authenticated on IP addresses.

klaus

> 
>>  
>> btw: you should also use TCP instead of UDP to prevent IP spoofing.
> 
> 
> ... but then you have problems with NATs.
> 
> Daniel
> 
>>
>>
>> regards,
>> klaus
>>
>>
>>> avpops module to check the source IP for each user (load from 
>>> database and then compare). Be aware that in the case of NAT or 
>>> outbound proxy, the source IP is different than user's address.
>>>
>>> Daniel
>>>
>>> On 05/24/05 11:31, Bharat More wrote:
>>>
>>>> Hi All...
>>>>         I am using SER 0.8.14 ,RADIUS,and mysql. I
>>>> want to authenticate all the clients based on IP
>>>> addresses. How to proceed...? where to make the
>>>> changes? can any one give me the sample code
>>>> function?...
>>>>         Thanks for any hint...Bharat
>>>>
>>>> ________________________________________________________________________ 
>>>>
>>>> Yahoo! India Matrimony: Find your life partner online
>>>> Go to: http://yahoo.shaadi.com/india-matrimony
>>>>
>>>> _______________________________________________
>>>> Serusers mailing list
>>>> serusers at lists.iptel.org
>>>> http://lists.iptel.org/mailman/listinfo/serusers
>>>>
>>>>  
>>>>
>>>
>>> _______________________________________________
>>> Serusers mailing list
>>> serusers at lists.iptel.org
>>> http://lists.iptel.org/mailman/listinfo/serusers
>>>
>>>
>>
>>
> 
> 




More information about the sr-users mailing list