[Serusers] [Fwd: SER - Neighbors]

[Klaus Darilion]

Klaus Darilion wrote:
> Forwarded to serusers.
> 
> -------- Original Message --------
> Subject: SER - Neighbors
> Date: Mon, 5 Sep 2005 14:53:47 -0300 (BRT)
> From: Anderson Alves de Albuquerque <anderson at belem.voip.nce.ufrj.br>
> To: Klaus Darilion <klaus.mailinglists at pernau.at>
> 
> 
> 
>  In GNUGK I have Neighbors, and in SER how can I control Neighbors? If I
> don´t control my Neighbors then my SER could recive invite without
> control.

In your ser.cfg you should differ between authenticated requests and 
un-authenticated requests:

authenticated:
  - requests from local users which will be authenticated
    using challenge/authorize():

  - requests from trusted nodes (other ser, gateways...)

un-authenticated:
  - requests which are not authenticated

Thus, in your ser.cfg, first you have to detect if the request is 
authenticated or not, and then handle them accordingly.

Their is no "neighbor" feature in ser.



    if (is_from_local()) {
      if (!proxy_authorize(...) {
        www_challenge(...); break;
      }
      # here we have authenticated messages from local users
      ...; break;
    }
    if (src_ip="1.2.3.4" || src_ip="2.3.4.5" ) { # our ser's
      # here we have trusted nodes
      ...
      break;
    }
    # here we have all untrusted requests
    ....


>  My situation I have more than one SER (Neighbors), look example:
> 
>                  ------ SER (root) -----
>                  |          |          |
>                  |          |          X
>                  |          |          |
>                SER (1)     SER(3)    SER (3)
> 
> 
>   In this example SER root can receive INVITE form SER 1 and SER 2, but
> SER root can´t receive INVITE from SER 3.
> 
>   I need to control this access.
> 
> 
> 
> 
> 
> 
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
> 
>