The test does the following:

If callee is not within the local domain (as registered in the domains table), check that:
 either... caller is from a local domain

 or... the source is a trusted party (gw etc)

If not, forbidden

 

g-)

 

---- Original Message ----
From: Alberto
To: Greger V. Teigre
Cc: serusers@lists.iptel.org
Sent: Friday, September 16, 2005 08:51 AM
Subject: Re: [Serusers] ser.cfg with PSTN gateway connectivity

> Yes, I did it too.
>
> I suppose that I have to do a entry in 'trusted' table of the IP
> address of the PSTN gateway.
>
> mysql> select * from trusted;
> +----------------+-------+--------------+
>> src_ip         | proto | from_pattern |
> +----------------+-------+--------------+
>> 212.xxx.xxx.81 | any   | ^sip:.*$     |
> +----------------+-------+--------------+
> 1 row in set (0.01 sec)
>
> mysql> select username,domain,password from subscriber;
> +----------+-------------+-----------+
>> username | domain      | password  |
> +----------+-------------+-----------+
>> admin    | sip         | heslo     |
>> 1000     | teching.net | 123454321 |
>> 2000     | teching.net | 12345     |
>> 3000     | teching.net | 12345     |
>> 4000     | teching.net | 12345     |
>> 5000     | teching.net | 12345     |
> +----------+-------------+-----------+
> 6 rows in set (0.00 sec)
>
> Is this correct? I believe that I do not understand it well.
>
> Thanks.
>
>
>> Hi,
>>
>> I've read the SER Getting Started form http://www.onsip.org .
>>
>> When I configure the ser with PSTN Gateway (subject 8 of the guide) I
>> can't register any client (403, Forbidden). I think, the problem is
>> the next line of ser.cfg:
>>
>>        if (!is_uri_host_local()) {
>>                 if (is_from_local() || allow_trusted()) {
>>                         route(4);
>>                         route(1);
>>                 } else {
>>                         sl_send_reply("403","Forbidden");
>>                 };
>>                 break;
>>         };
>>
>> I'd copied the permissions.allow and permissions.deny to
>> /usr/local/etc/ser and in the .allow file I'd uncomment the last line
>> (ALL:ALL)
>>
>> Any idea? Thanks.