Re: PrefixAuth

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thanks Michal.

May be authentication is not the right word here or what exactly trying to do. My ultimate goal is to allow unregistered end users to make calls
via the GK based on which IP address they are calling from.

Would that be possible to do?




"Zygmuntowicz Michal" <m.zygmuntowicz@xxxxxxx> wrote:

>As you can see in the line:
>    PrefixAuth=sufficient;ARQ,LRQ
>
>PrefixAuth checks only ARQ and LRQ messages. None of these
>messages is sent by unregistered endpoints. Currently, you cannot
>use PrefixAuth to authenticate unregistered endpoints.
>
>----- Original Message ----- 
>From: <xirak@xxxxxxxxxxxx>
>Sent: Wednesday, April 21, 2004 5:18 PM
>
>
>> My aim is to authenticate all end points (both registered and not registered) using the PrefixAuth module.
>> 
>> Here's what my config looks like. The prefixes are associated with
>> permanent endpoints.
>> 
>> [Gatekeeper::Auth]
>> PrefixAuth=sufficient;ARQ,LRQ
>> default=deny
>> 
>> [PrefixAuth]
>> 123=allow ipv4:192.168.0.31| deny ipv4:0/0
>> 180=allow ipv4:192.168.0.31| deny ipv4:0/0
>> 233=allow ipv4:10.1.1.1 | deny ipv4:0/0
>> 00=allow ipv4:192.168.0.31| deny ipv4:0/0
>> 00=allow ipv4:192.168.0.56| deny ipv4:0/0
>> 233=allow ipv4:192.168.0.24| deny ipv4:0/0
>> ALL=deny ipv4:0/0
>> 
>> The problem I'm having is, eventhough I'm allowing a few IPs
>> to make calls to the above prefixes, any end point could make the
>> call to these prefixes.
>> 
>> So how do I specify that unregistered endpoints can only dial a particular
>> prefix based on their IP address.
>> 
>> regards,
>> 
>> Zak 
>
>
>
>-------------------------------------------------------
>This SF.Net email is sponsored by: IBM Linux Tutorials
>Free Linux tutorial presented by Daniel Robbins, President and CEO of
>GenToo technologies. Learn everything from fundamentals to system
>administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
>
>_______________________________________________________
>
>List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
>Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
>Homepage: http://www.gnugk.org/
>

__________________________________________________________________
Introducing the New Netscape Internet Service. 
Only $9.95 a month -- Sign up today at http://isp.netscape.com/register

Netscape. Just the Net You Need. 

New! Netscape Toolbar for Internet Explorer
Search from anywhere on the Web and block those annoying pop-ups.
Download now at http://channels.netscape.com/ns/search/install.jsp


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click

_______________________________________________________

List: Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux