Thanks a lot for the answer. Actually I meant the problem when an unregistered endpoint calls the registered endpoint directly - using its (well known) transport address. (You are right - this was not expressed clearly.) And I want to block such possibility - the registered endpoint should get the permission from its GK. So the ARQ must contain more than only the alias of the caller and callee as is by default. Is the solution you proposed valid also for this configuration? With best regards, Lukasz ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________________ Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/