On Tue, 2021-12-21 at 10:30 -0400, Joshua C. Colp wrote: > Allow traffic from specific IP addresses? Others may have better > input or guidance on such a situation.
Hi, Thanks. That's the problem. Customers have automated access to their setup and may at any point change the SIP destination of a number and then immediately make calls, so it's not really practical to update the firewall to staticallly accept anything a customer might try to deliver to. This is why I was hoping for a more dynamic solution. One thought I had was to use ${CHANNEL(pjsip,remote_addr)} to get the actual remote IP address and then put it into an ipset that the firewall uses, either with a timeout or specifically removed when all calls to that IP address have ended. However, ${CHANNEL(pjsip,remote_addr)} doesn't work on our systems here (though there are other PJSIP parameters that it DOES return). It'll be interesting to see whether anyone else has any better ideas. If I could make Asterisk send a re-invite every few minutes, even if nothing has changed, that'd probably sort it. -- Cheers, Kingsley. -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- Check out the new Asterisk community forum at: https://community.asterisk.org/ New to Asterisk? Start here: https://wiki.asterisk.org/wiki/display/AST/Getting+Started asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users