i can suggest you use radius+sql authentication on Setup messages.
i have a query of the kind (freeradius' sql.conf):
authorize_check_query = "select 1, '%{SQL-User-Name}' as UserName,
'Auth-Type' as Attrib, if(count(*),'Accept','Reject') as Value, ':=' as Op
from AcctIPs where IP = '%{Framed-IP-Address}' and
Pref = left('%{h323-rx-called-number}', length(Pref))"
AcctIPs table is of the kind:
AcctID IP Pref
1 1.2.3.4 123#
'h323-rx-called-number' is a selfmade vsa which contains the destination
number before rewrite (patch for 2.0.7 is available somewhere on the
lists).
hth
--kosio
On Tuesday 23 March 2004 23:11, pesb wrote:
> > from your diagram now i understand and i think what you need to do is put
> > this neighbors configuration in the proxy gnugk and not the GK you call
> > my gk.
> >
> > since the proxy looks like a regular registered endpoint and the call
> > actualy comes in to the proxy, i think this is where you need this
> > section modified. regards
> > ray
>
> Sorry, but I did not understood what you meant above.
> What I need is the following. I need my proxy to accept calls only from
> authorized GWs. This authorized GWs should be checked based on their IP and
> called digits prefix.
> Something like this:
> Imagine that unregistered GWs 192.168.0.100 and 192.168.0.101 should be
> able to make calls to other unregistered GWs through my proxy (let's say
> 192.168.0.106). But, the proxy should only accept calls from 192.168.0.100
> if dialed digits have prefix 0997, and should only accept calls from
> 192.168.0.101 if the dialed digits have prefix 0998.
>
> Is there any way of doing this?
>
> thanks,
> Pablo S.
>
> > -------------------------------------------------------
> > This SF.Net email is sponsored by: IBM Linux Tutorials
> > Free Linux tutorial presented by Daniel Robbins, President and CEO of
> > GenToo technologies. Learn everything from fundamentals to system
> > administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
> > _______________________________________________
> > List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
> > Homepage: http://www.gnugk.org/
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
> _______________________________________________
> List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
> Homepage: http://www.gnugk.org/
--
"Talk is cheap because supply always exceeds demand."
-- source unknown
/~\ The ASCII
\ / Ribbon Campaign
X Against HTML Konstantin Tsolov.............ktsolov at etel dot bg
/ \ Email! Systems Administrator......eTel Ltd, Sofia, Bulgaria
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70&alloc_id638&opÌk
_______________________________________________
List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id?49
Homepage: http://www.gnugk.org/
