Hi, I tried responding over the weekend, but I think my mail server ate the message, apologies if you receive duplicates.
Thank you both Sergio and Daniel-Constantin, I was hoping someone else had encountered a similar problem! I like the idea of transforming and netmasking - I'm new to OpenSER, but don't mind contributing back to the community - if I was to create some sort of check_netmask / check_iprange function, is there a particular module, or core source file that this function would fit well in? Regards, Josh Daniel-Constantin Mierla wrote: > Hello, > > it is another way, a bit more complex in the config file, but does not > require to execute external scripts. > > All you need is to play with transformations and arithmetic operations > in the config file. The idea is to convert to integer the IP addresses > apply bitmask and compare. Transformations that help: > - http://www.openser.org/dokuwiki/doku.php/transformations:devel#s.int > - > http://www.openser.org/dokuwiki/doku.php/transformations:devel#s.select_index_separator > > > For example: > $rd = 23.34.56.78 > > To get second number (34) as integer $(rd{s.select,1,.}{s.int}) > > You transform the four parts in numbers, multiply each with the proper > value, make the sum and apply the bitwise 'and' operation with the mask. > > Should get what you need. > > Cheers, > Daniel > > > On 03/21/08 03:41, Sergio Gutierrez wrote: >> Hi Josh. >> >> An approach we used is execute an external script through function >> exec_msg; the script receives as argument the source ip address, and >> by external means, it checks whether it belongs to a particular >> subnet, defined on a table in database or a file; we used PHP and a >> table in MySQL with the reference subnets. >> >> The script should return 0 or 1; when returns 0, exec_msg returns >> true, and when it returns 1; exec_msg returns false, so you can check >> it into an if statement. >> >> Hope it helps. >> >> Best regards. >> >> Sergio Gutiérrez. >> >> On Thu, Mar 20, 2008 at 4:34 PM, Josh Mahonin <[EMAIL PROTECTED] >> <mailto:[EMAIL PROTECTED]>> wrote: >> >> Hi folks, >> >> In my setup, I've got two disjoint subnets (call then A and B) that >> cannot communicate directly to each other, but devices on each can >> both >> communicate to my OpenSER server and Asterisk box (both on their own >> subnet, C). There is no NAT involved, so I only want to use >> rtpproxy >> when it's the case that device from subnet A attempts to call a >> device >> on subnet B, or vice-versa. >> >> I would ideally not like to use rtp proxy for communication >> between A-C >> and A-B (this will enable RTP media between both subnets, but that >> solution will not scale very well...) >> >> I'm attempting do something like this: >> >> if (src_ip == a.b.c.d/24 && dst_ip == w.x.y.z/24) >> use rtp proxy >> >> But unfortunately, on an INVITE, after a lookup, dst_ip is set to >> the >> OpenSER server. The pseudovariable $rd is set to the value I'd >> like to >> check against, but it complains loudly when I attempt to substitute >> dst_ip for $rd. >> >> Is there any way to use avp_check() or the like to verify that the >> value >> in $rd lies in a given subnet? I don't want to match just one IP, >> but a >> whole range. I found a similar question on the SER mailing list >> asked >> several years ago, with no response. >> >> Thanks, >> >> Josh >> >> >> _______________________________________________ >> Users mailing list >> [email protected] <mailto:[email protected]> >> http://lists.openser.org/cgi-bin/mailman/listinfo/users >> >> >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> Users mailing list >> [email protected] >> http://lists.openser.org/cgi-bin/mailman/listinfo/users >> _______________________________________________ Users mailing list [email protected] http://lists.openser.org/cgi-bin/mailman/listinfo/users
