[SR-Users] Kamailio Inbound proxy to Asterisk - ACL Filtering
cezar at mokalife.ro
Sat Oct 9 12:57:34 CEST 2021
I have an issue with filtering on the asterisk side, my requests are:
UsersPhones(bria) -> Kamailio -> Asterisk -> Sip Trunk Out.
The goal is to manage a new layer of protection ( IP filtering / Whitelisting ).
When I try to compile a list of Whitelisted IP in sip.conf I get this error:
NOTICE: acl.c:748 ast_apply_acl: SIP contact ACL: Rejecting
'126.96.36.199' due to a failure to pass ACL '(BASELINE)'
WARNING: chan_sip.c:17061 parse_register_contact: Domain
'188.8.131.52:48669' disallowed by contact ACL (violating IP
WARNING: chan_sip.c:17933 register_verify: Registration denied
because of contact ACL
The IP 184.108.40.206, is the proxy kamailio and if I added it to
sip.conf it works, but so does every ip afterwards.
I tried with contactpermit also with permit, the result is the same as
long as I permit the proxy ip it works. Is there something that I can
do on the asterisk side to activate this filtering Or there is
something that I can do in Kamailio so it will forward the realip ?
Thanks in advance,
More information about the sr-users