Re: [OpenSIPS-Users] X-Auth-IP How?

2016-01-19 Thread Jason Bedward 
I see your point, in that case I'm not sure. Head over to the freeswitch
irc they should be able to clear that up. I would say its probably
technically possible but not sure why you would want that anyway?

On Tue, Jan 19, 2016 at 9:18 PM, Tim King  wrote:

> It is working now and I am doing things the same way you described. The
> part I was expecting that I don't see was that I was going to say hey
> freeswitch for this proxy check the stuff received in X-AUTH-IP against
> this specific ACL. It appears that it just checks all of the ACL's
>
>
> On 1/19/2016 4:13 PM, Jason Bedward wrote:
>
> Sorry I'm confused is it working now?
>
> The way I have things is opensips ip is the proxy. When freeswitch see it
> its like hey, I know you, I need to look out for the other ip you have
> X-Auth and process that. Freeswitch then looks up the X-Auth ip as it that
> was the IP that initiated the session
>
> On Tue, Jan 19, 2016 at 9:10 PM, Tim King  wrote:
>
>>
>> This is the intended behavior I was requesting. The purpose of the ACL
>> setup is to only allow calls through that are in the list of IP's set to
>> allow. The same way you would with Freeswitch without a proxy. The
>> relationship I was looking for that apparently does not exist is where you
>> tell freeswitch which list to use for the proxy-acl. Apparently there is no
>> relationship between them it just searches all the lists to see if ti finds
>> a match? I'm not really sure all I know is at this point if I put the IP's
>> of the addresses I wish to allow in the last list in my acl.conf which
>> happens to be names opensips the calls are allowed. If I take the IP out
>> they are rejected... Thank you very much for your help.
>>
>>
>>
>> ___
>> Users mailing list
>> Users@lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

2016-01-19 Thread Tim King 
I have a name in there do I need to change that to 20.172.0.46/32 ? If 
yes do I need my list to be named for that IP? Sorry for all the 
questions, I just have not found a working documented example and it 
seems like it is very close now.










On 1/19/2016 3:42 PM, Jason Bedward wrote:

Also edit the "apply-proxy-acl" IP you are missing the /32

On Wed, Jan 13, 2016 at 6:14 PM, Tim King > wrote:


Thank You. do you have an example as to how to have the Freeswitch
ACL work with he via headers you discussed? I have followed many
guides for setting up OpenSIPs as a load balancer for Freeswitch,
but none of them addressed making the Freeswitch ACL functional.


On 1/13/2016 12:49 PM, Stefano Pisani wrote:

to be precise:

append_hf("X-Auth-IP: $i\r\n");

according to documentation

Il 13/01/2016 18.43, Tim King ha scritto:

I have read countless articles now talking about using x-auth-ip
as a method for using OpenSIPs as a load balancer serving to a
cluster of Freeswtich servers and having a method to maintain
the original IP address.

Direct from the Freeswitch wiki it states:

apply-proxy-acl

Use the IP specified in X-AUTH-IP header sent from proxy for
apply-inbound-acl Note: You'll need to configure your proxy to
add this header


However I am not able to find any example of how to make
OpenSIPs add this header. Can anyone provide me some guidance as
to how to accomplish this?


___
Users mailing list
Users@lists.opensips.org 
http://lists.opensips.org/cgi-bin/mailman/listinfo/users




___
Users mailing list
Users@lists.opensips.org 
http://lists.opensips.org/cgi-bin/mailman/listinfo/users



___
Users mailing list
Users@lists.opensips.org 
http://lists.opensips.org/cgi-bin/mailman/listinfo/users




___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


<>___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

2016-01-19 Thread Jason Bedward 
Also edit the "apply-proxy-acl" IP you are missing the /32

On Wed, Jan 13, 2016 at 6:14 PM, Tim King  wrote:

> Thank You. do you have an example as to how to have the Freeswitch ACL
> work with he via headers you discussed? I have followed many guides for
> setting up OpenSIPs as a load balancer for Freeswitch, but none of them
> addressed making the Freeswitch ACL functional.
>
>
> On 1/13/2016 12:49 PM, Stefano Pisani wrote:
>
> to be precise:
>
> append_hf("X-Auth-IP: $i\r\n");
>
> according to documentation
>
> Il 13/01/2016 18.43, Tim King ha scritto:
>
> I have read countless articles now talking about using x-auth-ip as a
> method for using OpenSIPs as a load balancer serving to a cluster of
> Freeswtich servers and having a method to maintain the original IP address.
>
> Direct from the Freeswitch wiki it states:
>
> apply-proxy-acl
>
> Use the IP specified in X-AUTH-IP header sent from proxy for
> apply-inbound-acl Note: You'll need to configure your proxy to add this
> header
>
>
> However I am not able to find any example of how to make OpenSIPs add this
> header. Can anyone provide me some guidance as to how to accomplish this?
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

2016-01-19 Thread Tim King 
It is working now and I am doing things the same way you described. The 
part I was expecting that I don't see was that I was going to say hey 
freeswitch for this proxy check the stuff received in X-AUTH-IP against 
this specific ACL. It appears that it just checks all of the ACL's


On 1/19/2016 4:13 PM, Jason Bedward wrote:

Sorry I'm confused is it working now?

The way I have things is opensips ip is the proxy. When freeswitch see 
it its like hey, I know you, I need to look out for the other ip you 
have X-Auth and process that. Freeswitch then looks up the X-Auth ip 
as it that was the IP that initiated the session


On Tue, Jan 19, 2016 at 9:10 PM, Tim King > wrote:



This is the intended behavior I was requesting. The purpose of the
ACL setup is to only allow calls through that are in the list of
IP's set to allow. The same way you would with Freeswitch without
a proxy. The relationship I was looking for that apparently does
not exist is where you tell freeswitch which list to use for the
proxy-acl. Apparently there is no relationship between them it
just searches all the lists to see if ti finds a match? I'm not
really sure all I know is at this point if I put the IP's of the
addresses I wish to allow in the last list in my acl.conf which
happens to be names opensips the calls are allowed. If I take the
IP out they are rejected... Thank you very much for your help.



___
Users mailing list
Users@lists.opensips.org 
http://lists.opensips.org/cgi-bin/mailman/listinfo/users




___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


<>___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

2016-01-19 Thread Jason Bedward 
Sorry I'm confused is it working now?

The way I have things is opensips ip is the proxy. When freeswitch see it
its like hey, I know you, I need to look out for the other ip you have
X-Auth and process that. Freeswitch then looks up the X-Auth ip as it that
was the IP that initiated the session

On Tue, Jan 19, 2016 at 9:10 PM, Tim King  wrote:

>
> This is the intended behavior I was requesting. The purpose of the ACL
> setup is to only allow calls through that are in the list of IP's set to
> allow. The same way you would with Freeswitch without a proxy. The
> relationship I was looking for that apparently does not exist is where you
> tell freeswitch which list to use for the proxy-acl. Apparently there is no
> relationship between them it just searches all the lists to see if ti finds
> a match? I'm not really sure all I know is at this point if I put the IP's
> of the addresses I wish to allow in the last list in my acl.conf which
> happens to be names opensips the calls are allowed. If I take the IP out
> they are rejected... Thank you very much for your help.
>
>
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

2016-01-19 Thread Jason Bedward 
Look and think, you are saying acl = test. But in test you deny everything
aside from you sip phone!...lol

On Tue, Jan 19, 2016 at 8:47 PM, Tim King  wrote:

> I have a name in there do I need to change that to 20.172.0.46/32 ? If
> yes do I need my list to be named for that IP? Sorry for all the questions,
> I just have not found a working documented example and it seems like it is
> very close now.
>
> 
> 
> 
> 
> 
>
>
>
>
> On 1/19/2016 3:42 PM, Jason Bedward wrote:
>
> Also edit the "apply-proxy-acl" IP you are missing the /32
>
> On Wed, Jan 13, 2016 at 6:14 PM, Tim King  wrote:
>
>> Thank You. do you have an example as to how to have the Freeswitch ACL
>> work with he via headers you discussed? I have followed many guides for
>> setting up OpenSIPs as a load balancer for Freeswitch, but none of them
>> addressed making the Freeswitch ACL functional.
>>
>>
>> On 1/13/2016 12:49 PM, Stefano Pisani wrote:
>>
>> to be precise:
>>
>> append_hf("X-Auth-IP: $i\r\n");
>>
>> according to documentation
>>
>> Il 13/01/2016 18.43, Tim King ha scritto:
>>
>> I have read countless articles now talking about using x-auth-ip as a
>> method for using OpenSIPs as a load balancer serving to a cluster of
>> Freeswtich servers and having a method to maintain the original IP address.
>>
>> Direct from the Freeswitch wiki it states:
>>
>> apply-proxy-acl
>>
>> Use the IP specified in X-AUTH-IP header sent from proxy for
>> apply-inbound-acl Note: You'll need to configure your proxy to add this
>> header
>>
>>
>> However I am not able to find any example of how to make OpenSIPs add
>> this header. Can anyone provide me some guidance as to how to accomplish
>> this?
>>
>>
>> ___
>> Users mailing 
>> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>>
>>
>> ___
>> Users mailing 
>> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>>
>> ___
>> Users mailing list
>> Users@lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

2016-01-19 Thread Tim King 


This is the intended behavior I was requesting. The purpose of the ACL 
setup is to only allow calls through that are in the list of IP's set to 
allow. The same way you would with Freeswitch without a proxy. The 
relationship I was looking for that apparently does not exist is where 
you tell freeswitch which list to use for the proxy-acl. Apparently 
there is no relationship between them it just searches all the lists to 
see if ti finds a match? I'm not really sure all I know is at this point 
if I put the IP's of the addresses I wish to allow in the last list in 
my acl.conf which happens to be names opensips the calls are allowed. If 
I take the IP out they are rejected... Thank you very much for your help.



<>___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

2016-01-19 Thread Jason Bedward 
change to IP as I originally said about 2 hours ago :)

On Tue, Jan 19, 2016 at 8:47 PM, Tim King  wrote:

> I have a name in there do I need to change that to 20.172.0.46/32 ? If
> yes do I need my list to be named for that IP? Sorry for all the questions,
> I just have not found a working documented example and it seems like it is
> very close now.
>
> 
> 
> 
> 
> 
>
>
>
>
> On 1/19/2016 3:42 PM, Jason Bedward wrote:
>
> Also edit the "apply-proxy-acl" IP you are missing the /32
>
> On Wed, Jan 13, 2016 at 6:14 PM, Tim King  wrote:
>
>> Thank You. do you have an example as to how to have the Freeswitch ACL
>> work with he via headers you discussed? I have followed many guides for
>> setting up OpenSIPs as a load balancer for Freeswitch, but none of them
>> addressed making the Freeswitch ACL functional.
>>
>>
>> On 1/13/2016 12:49 PM, Stefano Pisani wrote:
>>
>> to be precise:
>>
>> append_hf("X-Auth-IP: $i\r\n");
>>
>> according to documentation
>>
>> Il 13/01/2016 18.43, Tim King ha scritto:
>>
>> I have read countless articles now talking about using x-auth-ip as a
>> method for using OpenSIPs as a load balancer serving to a cluster of
>> Freeswtich servers and having a method to maintain the original IP address.
>>
>> Direct from the Freeswitch wiki it states:
>>
>> apply-proxy-acl
>>
>> Use the IP specified in X-AUTH-IP header sent from proxy for
>> apply-inbound-acl Note: You'll need to configure your proxy to add this
>> header
>>
>>
>> However I am not able to find any example of how to make OpenSIPs add
>> this header. Can anyone provide me some guidance as to how to accomplish
>> this?
>>
>>
>> ___
>> Users mailing 
>> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>>
>>
>> ___
>> Users mailing 
>> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>>
>> ___
>> Users mailing list
>> Users@lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

2016-01-13 Thread Tim King 
Thank You. do you have an example as to how to have the Freeswitch ACL 
work with he via headers you discussed? I have followed many guides for 
setting up OpenSIPs as a load balancer for Freeswitch, but none of them 
addressed making the Freeswitch ACL functional.


On 1/13/2016 12:49 PM, Stefano Pisani wrote:

to be precise:

append_hf("X-Auth-IP: $i\r\n");

according to documentation

Il 13/01/2016 18.43, Tim King ha scritto:
I have read countless articles now talking about using x-auth-ip as a 
method for using OpenSIPs as a load balancer serving to a cluster of 
Freeswtich servers and having a method to maintain the original IP 
address.


Direct from the Freeswitch wiki it states:

apply-proxy-acl

Use the IP specified in X-AUTH-IP header sent from proxy for 
apply-inbound-acl Note: You'll need to configure your proxy to add 
this header



However I am not able to find any example of how to make OpenSIPs add 
this header. Can anyone provide me some guidance as to how to 
accomplish this?



___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users




___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


<>___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

2016-01-13 Thread Jason Bedward 
Astpp comes with and opensips config file which add X-auth automatically...
On 13 Jan 2016 18:13, "Tim King"  wrote:

> Thank You. do you have an example as to how to have the Freeswitch ACL
> work with he via headers you discussed? I have followed many guides for
> setting up OpenSIPs as a load balancer for Freeswitch, but none of them
> addressed making the Freeswitch ACL functional.
>
> On 1/13/2016 12:49 PM, Stefano Pisani wrote:
>
> to be precise:
>
> append_hf("X-Auth-IP: $i\r\n");
>
> according to documentation
>
> Il 13/01/2016 18.43, Tim King ha scritto:
>
> I have read countless articles now talking about using x-auth-ip as a
> method for using OpenSIPs as a load balancer serving to a cluster of
> Freeswtich servers and having a method to maintain the original IP address.
>
> Direct from the Freeswitch wiki it states:
>
> apply-proxy-acl
>
> Use the IP specified in X-AUTH-IP header sent from proxy for
> apply-inbound-acl Note: You'll need to configure your proxy to add this
> header
>
>
> However I am not able to find any example of how to make OpenSIPs add this
> header. Can anyone provide me some guidance as to how to accomplish this?
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

[OpenSIPS-Users] X-Auth-IP How?

2016-01-13 Thread Tim King 
I have read countless articles now talking about using x-auth-ip as a 
method for using OpenSIPs as a load balancer serving to a cluster of 
Freeswtich servers and having a method to maintain the original IP address.


Direct from the Freeswitch wiki it states:

apply-proxy-acl

Use the IP specified in X-AUTH-IP header sent from proxy for 
apply-inbound-acl Note: You'll need to configure your proxy to add this 
header



However I am not able to find any example of how to make OpenSIPs add 
this header. Can anyone provide me some guidance as to how to accomplish 
this?
<>___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

2016-01-13 Thread Stefano Pisani 

what about

appendHf("X-Auth-IP: $si");

in your script?

however there are the "via" headers already to do this job

Il 13/01/2016 18.43, Tim King ha scritto:
I have read countless articles now talking about using x-auth-ip as a 
method for using OpenSIPs as a load balancer serving to a cluster of 
Freeswtich servers and having a method to maintain the original IP 
address.


Direct from the Freeswitch wiki it states:

apply-proxy-acl

Use the IP specified in X-AUTH-IP header sent from proxy for 
apply-inbound-acl Note: You'll need to configure your proxy to add 
this header



However I am not able to find any example of how to make OpenSIPs add 
this header. Can anyone provide me some guidance as to how to 
accomplish this?



___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

2016-01-13 Thread Stefano Pisani 

to be precise:

append_hf("X-Auth-IP: $i\r\n");

according to documentation

Il 13/01/2016 18.43, Tim King ha scritto:
I have read countless articles now talking about using x-auth-ip as a 
method for using OpenSIPs as a load balancer serving to a cluster of 
Freeswtich servers and having a method to maintain the original IP 
address.


Direct from the Freeswitch wiki it states:

apply-proxy-acl

Use the IP specified in X-AUTH-IP header sent from proxy for 
apply-inbound-acl Note: You'll need to configure your proxy to add 
this header



However I am not able to find any example of how to make OpenSIPs add 
this header. Can anyone provide me some guidance as to how to 
accomplish this?



___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users