[SR-Users] Kamailio Inbound proxy to Asterisk - ACL Filtering

Bugaian A. Vitalie bugaian at gmail.com
Sat Oct 9 14:24:16 CEST 2021


I think its the order you apply the ACL, first permit some, then deny any?


On Sat, Oct 9, 2021 at 1:58 PM Mihai Cezar <cezar at mokalife.ro> wrote:

> Hello,
> I have an issue with filtering on the asterisk side, my requests are:
> UsersPhones(bria) -> Kamailio -> Asterisk -> Sip Trunk Out.
> The goal is to manage a new layer of protection ( IP filtering /
> Whitelisting ).
> When I try to compile a list of Whitelisted IP in sip.conf I get this
> error:
> NOTICE[205]: acl.c:748 ast_apply_acl: SIP contact ACL: Rejecting
> '' due to a failure to pass ACL '(BASELINE)'
> WARNING[205]: chan_sip.c:17061 parse_register_contact: Domain
> '' disallowed by contact ACL (violating IP
> WARNING[205]: chan_sip.c:17933 register_verify: Registration denied
> because of contact ACL
> The IP, is the proxy kamailio and if I added it to
> sip.conf it works, but so does every ip afterwards.
> I tried with contactpermit also with permit, the result is the same as
> long as I permit the proxy ip it works. Is there something that I can
> do on the asterisk side to activate this filtering Or there is
> something that I can do in Kamailio so it will forward the realip ?
> contactdeny=
> contactpermit=
> contactpermit=
> Thanks in advance,
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions
>   * sr-users at lists.kamailio.org
> Important: keep the mailing list in the recipients, do not reply only to
> the sender!
> Edit mailing list options or unsubscribe:
>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20211009/d5fc61aa/attachment.htm>

More information about the sr-users mailing list