Re: Deny certain phone numbers [WAS] Some Radius questions.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



 Just keep in mind that radius will sort rules by "id" number and will
use matching rule from the top of the list:

In case of:

+----+----------+-----------+----+-------+---------------+------------+
| id | UserName | Attribute | op | Value | IP            | REG        |
+----+----------+-----------+----+-------+---------------+------------+
|  1 | gw1      | Password  | == | gk1   | 192.168.1.1   | ^0.......$ |
|  2 | gw1      | Password  | == | deny  | 192.168.1.1   | ^01......$ |
+----+----------+-----------+----+-------+---------------+------------+
 
call to 012345678 will be permited because rule 1 matches first, in
other case:

+----+----------+-----------+----+-------+---------------+------------+
| id | UserName | Attribute | op | Value | IP            | REG        |
+----+----------+-----------+----+-------+---------------+------------+
|  3 | gw1      | Password  | == | deny  | 192.168.1.1   | ^01......$ |
|  4 | gw1      | Password  | == | gk1   | 192.168.1.1   | ^0.......$ |
+----+----------+-----------+----+-------+---------------+------------+

call to 012345678 will be denied because rule 3 matches first.

	Julius


On Wed, 2004-01-21 at 16:56, Cesar Bermudez wrote:
> Hi Julius,
> 
> Thx !!!
> Cheers.
> > 	Hi,
> >
> > You can take a look at my previos post:
> >
> > http://sourceforge.net/mailarchive/message.php?msg_id=6226009
> >
> >  To explicitly deny destinations (numbers) matching particular regexp
> > you can supply wrong password for the destination ( in radaliasauth
> > password should always match UserName) like:
> >
> >  +----+----------+-----------+----+-------+---------------+------------+
> >  | id | UserName | Attribute | op | Value | IP            | REG        |
> >  +----+----------+-----------+----+-------+---------------+------------+
> >  |  1 | gwm      | Password  | == | gwm   | 192.168.3.1   | ^.*$       |
> >  |  2 | gw1      | Password  | == | gk1   | 192.168.1.1   | ^0.......$ |
> >  |  3 | gw1      | Password  | == | deny  | 192.168.1.1   | ^1.......$ |
> >  +----+----------+-----------+----+-------+---------------+------------+
> >
> >  So gw1 will be allowed to call 0xxxxxxx but denied to call 1xxxxxxx.
> >
> > 	Julius
> >
> >
> > On Fri, 2004-01-16 at 17:03, Cesar Bermudez wrote:
> >> Yes, i'm using freeradius/mysql backend, but no lucky with deny certain
> >> numbers :(
> >> Anyone have a working example?
> >>
> >> > Cesar,
> >> >
> >> > It's much better to do it using radius and a DB, you may use GNU
> >> Radius
> >> > for this, you might find it quite suitable for your needs:
> >> >
> >> > http://www.gnu.org/software/radius/radius.html
> >> >
> >> > in the radius auth request you should check for every call the
> >> > Called-Station-Id
> >> > and deny calls to any prefix you wish to deny.
> >> >
> >> > Enrique-
> >> >
> >> >
> >> > -------------------------------------------------------
> >> > The SF.Net email is sponsored by EclipseCon 2004
> >> > Premiere Conference on Open Tools Development and Integration
> >> > See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
> >> > http://www.eclipsecon.org/osdn
> >> > _______________________________________________
> >> > List: Openh323gk-users@lists.sourceforge.net
> >> > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
> >> > Homepage: http://www.gnugk.org/
> >> >
> >>
> >
> >
> >
> > -------------------------------------------------------
> > The SF.Net email is sponsored by EclipseCon 2004
> > Premiere Conference on Open Tools Development and Integration
> > See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
> > http://www.eclipsecon.org/osdn
> > _______________________________________________
> > List: Openh323gk-users@lists.sourceforge.net
> > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
> > Homepage: http://www.gnugk.org/
> >
> 



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
List: Openh323gk-users@lists.sourceforge.net
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux