Hi Mauro, the capacity limits also apply to calls from unregistered endpoints, but they only apply to calls that are routed to that endpoint based on its alias or E.164. My guess is that you are bypassing the limit by having calls to the MCU IP (plus room number) that are routed by the 'explicit' policy which only looks at IPs and doesn't know or care about endpoints. If you disable the 'explicit' policy, assign a prefix or the list of rooms to the permanent MCU endpoint and make your unregistered endpoints call 90xxx@gatekeeper-IP, the capacity limiting should work. Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan@xxxxxxxxxxxxxx Website: http://www.gnugk.org Support: http://www.willamowius.com/gnugk-support.html mauro arduini wrote: > hi, > i have a gnugk in proxy mode... > eth0 public ip > eth1 my dmz > > at the gnugk i've registered varius endpoint and 1 mcu codian > > can i limit the call from endpoint to mcu virtual room...? > i've tested to limit the virtual room that start with code 90 and > limitation works correctly only with registered endpoint. > if i call from endpoint (es: public endpoint) that is not registered to > gnugk the limitation not work!!! > > do you know that is a gnugk limitation? > there is no way to restrict calls from unregistered endpoint? > > follow my config > > [Gatekeeper::Main] > Fortytwo=42 > TimeToLive=600 > Home=x.x.x.x > ExternalIP=x.x.x.x > > [RoutedMode] > GKRouted=1 > H245Routed=0 > CallSignalPort=1720 > RemoveH245AddressOnTunneling=1 > DropCallsByReleaseComplete=1 > SupportNATedEndpoints=1 > Q931PortRange=60000-60100 > H245PortRange=60101-60199 > AcceptUnregisteredCalls=1 > > [Proxy] > Enable=1 > #ProxyForNAT=1 > InternalNetwork=10.0.0.0/255.0.0.0,172.16.0.0/255.255.0.0 > T120PortRange=60200-60299 > RTPPortRange=60300-60399 > #ProxyForSameNAT=1 > #ProxyAlways=1 > > [RasSrv::PermanentEndpoints] > 10.9.23.10=mcu@xxxxxxxxxx > > [EP::mcu@xxxxxxxxxx] > PrefixCapacities=^90:=2 > Capacity=2 > > [GkStatus::Auth] > rule=allow > > > gnugk 3.02 > debian 6.0.5 > > > bye > > > -- > *Mauro* ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________________ Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/