If this isn't correct, it is "close enough for government work". By binding to 192.168.1.10, he makes AMI accessible to anyone who can access that IP address.
-----Original Message----- From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Steve Edwards Sent: Monday, August 03, 2009 11:25 AM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [asterisk-users] ami A more specific subject may get better responses. Maybe something like "How to restrict access to AMI to localhost?" On Mon, 3 Aug 2009, Jerry Geis wrote: > Trying to get a setup that only responds to connections on the SAME box. > like 192.168.1.10 So .10 is my server and I only want responses > originating from .10 to answer the AMI. > > I set bindaddr to 192.168.1.10 Would binding to 127.0.0.1 make sense? > I left it as 0.0.0.0 I don't know what this means. > I set permit to be 127.0.0.1/255.255.255.0 > I tried 192.168.1.10/255.255.255.0 > I tried 192.168.1.10/255.255.255.255 What does manager.conf look like? Stealing from http://www.the-asterisk-book.com/unstable/asterisk-manager-api.html, it should look something like: [admin] secret = secret5 deny = 0.0.0.0/0.0.0.0 permit = 127.0.0.1/255.255.255.255 read = all,system,call,log,verbose,command,agent,user,config write = all,system,call,log,verbose,command,agent,user,config -- Thanks in advance, ------------------------------------------------------------------------- Steve Edwards sedwa...@sedwards.com Voice: +1-760-468-3867 PST Newline Fax: +1-760-731-3000 _______________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- AstriCon 2009 - October 13 - 15 Phoenix, Arizona Register Now: http://www.astricon.net asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users _______________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- AstriCon 2009 - October 13 - 15 Phoenix, Arizona Register Now: http://www.astricon.net asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users