[OpenSIPStack] Configurable Host Access List now available
Brought to you by:
joegenbaclor
From: Joegen E. B. <joe...@gm...> - 2007-12-04 16:19:02
|
Hi Everyone, I have added a new configuration section "Host Access List" for OpenSBC that allows only certain IP address to send calls to OpenSBC. It can accept a list of single IP addresses or a network block. There are only two parameters in this page 1. Trust All Hosts - Flag whether OpenSBC would accept INVITEs from ANY host from the internet. If this flag is set to TRUE OpenSBC will only accept calls from the IP Addresses or Range listed. 2. Hosts - Entry for host can be a single IP Address or a range. Example: 192.168.0.1 or 10.0.0.1-10.0.0.255 If the Access List is enabled and a call came in from an unknown host, OpenSBC will answer with a forbidden with a Warning header. A sample of such response is below: SIP/2.0 403 Forbidden From: "unknown" <sip:20...@pb...>;tag=172561562940 To: <sip:10...@pb...>;tag=de055ec348fa18109fd8d5d74376c6ed Via: SIP/2.0/UDP 127.0.0.1:1000;iid=5050;branch=z9hG4bKc0a800990000005847557d8900000c8200000117;rport=1000;received=192.168.120.1 CSeq: 1 INVITE Call-ID: E7335922-1B42-4670-817A-EE1FEFC337EC@192.168.0.153 Server: OpenSIPStack-1.1.7-18 Warning: 399 192.168.120.1 Is Not Allowed In Our Access List Content-Length: 0 Joegen |