Re: PrefixAuth

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



As you can see in the line:
    PrefixAuth=sufficient;ARQ,LRQ

PrefixAuth checks only ARQ and LRQ messages. None of these
messages is sent by unregistered endpoints. Currently, you cannot
use PrefixAuth to authenticate unregistered endpoints.

----- Original Message ----- 
From: <xirak@xxxxxxxxxxxx>
Sent: Wednesday, April 21, 2004 5:18 PM


> My aim is to authenticate all end points (both registered and not registered) using the PrefixAuth module.
> 
> Here's what my config looks like. The prefixes are associated with
> permanent endpoints.
> 
> [Gatekeeper::Auth]
> PrefixAuth=sufficient;ARQ,LRQ
> default=deny
> 
> [PrefixAuth]
> 123=allow ipv4:192.168.0.31| deny ipv4:0/0
> 180=allow ipv4:192.168.0.31| deny ipv4:0/0
> 233=allow ipv4:10.1.1.1 | deny ipv4:0/0
> 00=allow ipv4:192.168.0.31| deny ipv4:0/0
> 00=allow ipv4:192.168.0.56| deny ipv4:0/0
> 233=allow ipv4:192.168.0.24| deny ipv4:0/0
> ALL=deny ipv4:0/0
> 
> The problem I'm having is, eventhough I'm allowing a few IPs
> to make calls to the above prefixes, any end point could make the
> call to these prefixes.
> 
> So how do I specify that unregistered endpoints can only dial a particular
> prefix based on their IP address.
> 
> regards,
> 
> Zak 



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click

_______________________________________________________

List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux