Fellow SER users:

We are having a security concern we wish to resolve with the use of SIP Express Router.  We are using SER with MySQL accounting.  SER seems to be allowing users to register that are not in our database "subscriber" table, thus being able to make free calls.  I know the nature of SIP is to allow individualized and multiple location information, but we need to restrict username locations allowed for all traffic and registration to match the subscriber user name sent in the digest or at least have a way to keep track of and match what is in the subscriber table to the name the sip endpoint actually ends up having in the location table.  Is there any way in SER to enforce this?  I have included below a stack trace from ngrep:

#######
U <ep ip>:6070 -> <ser ip>:5060
  REGISTER sip:<ser ip>:5060 SIP/2.0..To: "701"<sip:701@<ser ip>>..From: "701"<sip:701@<ser ip>>;tag=701-
  b7f3f443-17850000..Via: SIP/2.0/UDP <ep ip>:6070;branch=z9hG4bK-d87543-adb1fe1af94842582aad-1--d87543-..Call-ID:
   b308204854e8e9c3addb7ccc69b02093..CSeq: 62 REGISTER..Contact: <sip:9fAPqhbHwhYSZCWcNQ_ho-H5U5x_j00gb43eT-i@200.68.87.
  113:6070>..Expires: 600..Max-Forwards: 69..User-Agent: SIP_ITG_1.2.24.81..Authorization: Digest username="7775550305",
  realm="<ser ip>",
nonce="4416e7e3e61085947d202409c005ef548e629601",uri="sip:<ser ip>:5060",response="6cfb992b
  8c1e67535056a3398405e58b"..Content-Length: 0....
#
U <ser ip>:5060 -> <ep ip>:6070
  SIP/2.0 200 OK..To: "701"<sip:701@<ser ip>>;tag=9c0f9d162fad9f3d7c038abec5b4d8aa.e57b..From: "701"<sip:701@200.68
  .87.115>;tag=701-b7f3f443-17850000..Via: SIP/2.0/UDP <ep ip>:6070;branch=z9hG4bK-d87543-adb1fe1af94842582aad-1--
  d87543-..Call-ID: b308204854e8e9c3addb7ccc69b02093..CSeq: 62 REGISTER..Contact: <sip:9fAPqhbHwhYSZCWcNQ_ho-H5U5x_j00gb
  43eT-i@<ep ip>:6070>;q=0.00;expires=300..Server: Sip EXpress router (0.8.14 (i386/linux))..Content-Length: 0..Wa
  rning: 392 <ser ip>:5060 "Noisy feedback tells:  pid=13148 req_src_ip=<ep ip> req_src_port=6070 in_uri=sip:
  <ser ip>:5060 out_uri=sip:<ser ip>:5060 via_cnt==1"....
#######

Each "U" represents a new UDP packet so there are two packets above.  I have changed the IPs for privacy reasons.  From packet 1 we see that a valid username is being used for the digest authentication:
username="7775550305",
  realm="<ser ip>",
But the SIP endpoint does not identify itself in a way that we can bill it:
REGISTER sip:<ser ip>:5060 SIP/2.0..To: "701"<sip:701@<ser ip>>..From: "701"<sip:701@<ser ip>>
701
is not in our subscriber table!!!  I have tried to find a way to track in the SER database who 701 refers to for billing.  But I have not been able to until doing a raw packet capture to find that this endpoint is authenticating with username 7775550305
As the 2nd packet shows, the end point is allowed to register as "701" even though it authenticated as "7775550305".  This makes billing impossible as future INVITES, ACKs and BYEs all refer to 701 but in no way reference 7775550305.

What we are looking for is a way to either force all registrations to match digest username to requested location uri or some kind of a way to track a uri that is different from the log in credentials so the calls can be billed correctly.  Please give any suggestions you may have.  We have allready tried several variations on the mode=="REGISTER" parameter in the ser.cfg file with no success.
Work Signature

Thanks,

C. Ed Felt Caflo Network Engineer/Programmer

(801) 766-8433 (home)
(801) 420-8879 (cell)
74999 (h.323)
74777 (sip)
edeefelt@hotmail.com
efelt@caflobvi.com
chat: edeefelt(aim), edeefelt (yahoo), edeefelt@hotmail.com (msn), v_2chafe@hotmail.com (msn)
http://www.thefelts.net




serusers-request@lists.iptel.org wrote:
Send Serusers mailing list submissions to
	serusers@lists.iptel.org

To subscribe or unsubscribe via the World Wide Web, visit
	http://lists.iptel.org/mailman/listinfo/serusers
or, via email, send a message with subject or body 'help' to
	serusers-request@lists.iptel.org

You can reach the person managing the list at
	serusers-owner@lists.iptel.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Serusers digest..."


Today's Topics:

   1. Authentication Based On IP Addresses (Gokhan Uslu)
   2. backup mysql server (Rosario Pingaro)
   3. Setting radiusclient with SER (KaiFu Chan)
   4. Uninstall SER? (KaiFu Chan)
   5. Re: serrweb regex problem (Joao Pereira)
   6. presence problem (queyeah@adinet.com.uy)
   7. Re: presence problem (Rodrigo Gonzalez)
   8. Re: backup mysql server (Script Head)
   9. Re: Uninstall SER? (Script Head)
  10. Re: Uninstall SER? (Kapil Dhawan)
  11. RE: Authentication Based On IP Addresses (Kapil Dhawan)


----------------------------------------------------------------------

Message: 1
Date: Sat, 11 Mar 2006 18:58:24 +0100
From: Gokhan Uslu <g.uslu@teles.com>
Subject: [Serusers] Authentication Based On IP Addresses
To: "'serusers@lists.iptel.org'" <serusers@lists.iptel.org>
Message-ID:
	<EFAF03912EF07741A95253BACC17513F5A1353@emex.berlin.teles.de>
Content-Type: text/plain; charset="us-ascii"


Hi All...
I am using SER  and FREERADIUS
I want to authenticate all the clients based on IP addresses. How to
proceed...? where to make the changes? 
can any one give me the sample code function?...Thanks for any hint... 

Gokhan USLU 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/serusers/attachments/20060311/d48be979/attachment-0001.html

------------------------------

Message: 2
Date: Sat, 11 Mar 2006 13:00:53 -0500
From: "Rosario Pingaro" <rpingar@Italycom.it>
Subject: [Serusers] backup mysql server
To: <serusers@lists.iptel.org>
Message-ID: <0a2a01c64535$bdd64fc0$06c8a8c0@computer2>
Content-Type: text/plain; charset="iso-8859-1"

is it possible to configure a second mysql server for backup?

if yes how?
Thanks
 Rosario
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/serusers/attachments/20060311/c263ea40/attachment.html

------------------------------

Message: 3
Date: Sun, 12 Mar 2006 02:11:14 +0800
From: "KaiFu Chan" <s1160956@ss23.mcu.edu.tw>
Subject: [Serusers] Setting radiusclient with SER
To: <serusers@lists.iptel.org>
Message-ID: <003901c64537$2f658ce0$2501a8c0@NetworkAdministrator>
Content-Type: text/plain; charset="big5"

Hi all:

    I want to create a billing system by using ser and radius.  Is there any document about setting radiusclient with ser?  The software are too old to used in document "SIP Express Router RADIUS HOWTO" in iptel.org. Now, I have already installed the radius server and ser & radiuseclient in two computers.  The radius server seems to work well, but i am not sure wherter the radius server and radiusclient could be work besause of the difficult steps setting. If I could know more about the  setup details that will be grate.  Please give me a hand, thank you.

    Sincerely,

    Caxton

.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/serusers/attachments/20060312/d8016d34/attachment.htm

------------------------------

Message: 4
Date: Sun, 12 Mar 2006 02:12:44 +0800
From: "KaiFu Chan" <s1160956@ss23.mcu.edu.tw>
Subject: [Serusers] Uninstall SER?
To: <serusers@lists.iptel.org>
Message-ID: <004501c64537$677645c0$2501a8c0@NetworkAdministrator>
Content-Type: text/plain; charset="big5"

Hi all:

    Do I need to uninstall SER if I want to update SER v0.9.4 to SER v0.9.6? How can I uninstall SER? The command "make uninstall" do not work. Thanks!

Sincerely

Caxton
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/serusers/attachments/20060312/65f702ed/attachment.html

------------------------------

Message: 5
Date: Sat, 11 Mar 2006 19:14:16 +0000
From: Joao Pereira <joao.pereira@fccn.pt>
Subject: Re: [Serusers] serrweb regex problem
To: Karel Kozlik <karel@iptel.org>, serusers@lists.iptel.org
Message-ID: <44132188.3060809@fccn.pt>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

Ok, then what version of serweb is having less problems with PostgreSQL?


Or I can try changing this query:

select max(abs(username)) from aliases where domain='mydomain.pt' and 
username REGEXP "^[0-9]+$"

to something more "postgre like".
But I cant find it in the code... where are the SQL querys in the serweb 
code?
Thanks
Joao Pereira



Karel Kozlik wrote:
  
Hi,
sorry, but support for postgres is only experimental and not working 
well in last stable version of serweb.

Real support for postgres will be ready in next version.

regards Karel

Joao Pereira napsal(a):

    
Hello to all
I installed the last serweb, but I had one problem registering users. 
When the users receive the confirmation email, they have to go to the 
confirmation link, and this confirmation link does this select in the DB:

select max(abs(username)) from aliases where domain='mydomain.pt' and 
username REGEXP "[0-9]+$";

ERROR:  syntax error at or near "REGEXP" at character 79
LINE 1: ...om aliases where domain='mydomain.pt' and username REGEXP 
"[0...
                                          
                                                          ^

(the ^ is under REGEXP)

I m using PostgreSQL 8.0.0, and I believe the problem is with the 
postgres support of REGEXP...
I googled and googled and I didnt found a solution yet.
Did anyone had this problem too?
Thanks
Joao Pereira

_______________________________________________
Serusers mailing list
serusers@lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
      



------------------------------

Message: 6
Date: Sat, 11 Mar 2006 16:44:33 -0300 (UYT)
From: "queyeah@adinet.com.uy" <queyeah@adinet.com.uy>
Subject: [Serusers] presence problem
To: serusers@lists.iptel.org
Message-ID: <23490391.1142106273038.JavaMail.tomcat@fe-ps01>
Content-Type: text/plain;charset="ISO-8859-15"

I read the SER presence handbook as you told me, I follow the 
instructions to install ser with presence modules but i receive some 
erros and modules wasn't installed.
I go back to my old ser installation with pa module, configure some 
lines in ser.gfc to handle subscribe but now I'm receiving an error to 
SUSCRIBE and PUBLISH, it's like pa module can't process messages: 
Status: 400 Bad Request (ethereal)

this is my ser.cfg:

# ----------- global configuration parameters ------------------------

#debug=3         # debug level (cmd line: -dddddddddd)
#fork=yes
#log_stderror=no	# (cmd line: -E)

/* Uncomment these lines to enter debugging mode 
fork=no
log_stderror=yes
*/

check_via=no	# (cmd. line: -v)
dns=no           # (cmd. line: -r)
rev_dns=no      # (cmd. line: -R)
#port=5060
#children=4
fifo="/tmp/ser_fifo"
fifo_mode=666

# ------------------ module loading ----------------------------------

# Uncomment this if you want to use SQL database
loadmodule "/usr/lib/ser/modules/mysql.so"

loadmodule "/usr/lib/ser/modules/sl.so"
loadmodule "/usr/lib/ser/modules/tm.so"
loadmodule "/usr/lib/ser/modules/rr.so"
loadmodule "/usr/lib/ser/modules/maxfwd.so"
loadmodule "/usr/lib/ser/modules/usrloc.so"
loadmodule "/usr/lib/ser/modules/registrar.so"
loadmodule "/usr/lib/ser/modules/textops.so"

# Uncomment this if you want digest authentication
# mysql.so must be loaded !
loadmodule "/usr/lib/ser/modules/auth.so"
loadmodule "/usr/lib/ser/modules/auth_db.so"

#esta linea la agrego para cargar el modulo de presencia.
loadmodule "/usr/lib/ser/modules/pa.so"


# ----------------- setting module-specific parameters ---------------

# -- usrloc params --

#modparam("usrloc", "db_mode", 0)
modparam("usrloc", "db_mode",   2)
modparam("usrloc", "db_url", "mysql://ser:heslo@localhost/ser" )


# Uncomment this if you want to use SQL database 
# for persistent storage and comment the previous line
modparam("usrloc", "db_mode", 2)

# -- auth params --
# Uncomment if you are using auth module
#
modparam("auth_db", "calculate_ha1", yes)
#
# If you set "calculate_ha1" parameter to yes (which true in this 
config), 
# uncomment also the following parameter)
#
modparam("auth_db", "password_column", "password")

# -- rr params --
# add value to ;lr param to make some broken UAs happy
modparam("rr", "enable_full_lr", 1)

# -- pa params --
modparam("pa","default_expires", 3600)
modparam("pa","use_db",1)
modparam("pa","db_url","mysql://ser:heslo@localhost/ser")



# -------------------------  request routing logic -------------------

# main routing logic

route{

	# initial sanity checks -- messages with
	# max_forwards==0, or excessively long requests
	if (!mf_process_maxfwd_header("10")) {
		sl_send_reply("483","Too Many Hops");
		break;
	};
	if (msg:len >=  2048 ) {
		sl_send_reply("513", "Message too big");
		break;
	};
	

	# we record-route all messages -- to make sure that
	# subsequent messages will go through our proxy; that's
	# particularly good if upstream and downstream entities
	# use different transport protocol
	if (!method=="REGISTER") record_route();	

	# subsequent messages withing a dialog should take the
	# path determined by record-routing
	if (loose_route()) {
		# mark routing logic in request
		append_hf("P-hint: rr-enforced\r\n"); 
		route(1);
		break;
	};


	if (!uri==myself) {
		# mark routing logic in request
		append_hf("P-hint: outbound\r\n"); 
		route(1);
		break;
	};


	# if the request is for other domain use UsrLoc
	# (in case, it does not work, use the following command
	# with proper names and addresses in it)
	if (uri==myself) {

		if (method=="REGISTER") {

                        # Uncomment this if you want to use digest 
authentication
			if (!www_authorize("p2t.com", "subscriber")) {
				www_challenge("p2t.com", "0");
				break;
			};

			save("location");
			break;
		};
		
		if (method=="SUBSCRIBE" || method=="PUBLISH") {
                        if (t_newtran()) {
                                handle_subscription("registrar");
				break;
                        };
                };        

		lookup("aliases");
		if (!uri==myself) {
			append_hf("P-hint: outbound alias\r\n"); 
			route(1);
			break;
		};

		# native SIP destinations are handled using our USRLOC DB
		if (!lookup("location")) {
			sl_send_reply("404", "Not Found");
			break;
		};
	};
	append_hf("P-hint: usrloc applied\r\n"); 
	route(1);
}

route[1] 
{
	# send it out now; use stateful forwarding as it works reliably
	# even for UDP2TCP
	if (!t_relay()) {
		sl_reply_error();
	};
}




Do you have any idea of what's happening???
Thanks again...
Gustavo.



------------------------------

Message: 7
Date: Sat, 11 Mar 2006 17:57:47 -0300
From: Rodrigo Gonzalez <rjgonzale@gmail.com>
Subject: Re: [Serusers] presence problem
To: "queyeah@adinet.com.uy" <queyeah@adinet.com.uy>
Cc: serusers@lists.iptel.org
Message-ID: <441339CB.9000203@gmail.com>
Content-Type: text/plain; charset=ISO-8859-15; format=flowed

2 things....

		if (method=="SUBSCRIBE" || method=="PUBLISH") {
                        if (t_newtran()) {
                                handle_subscription("registrar");
				break;
                        };
                };       

handle_subscription is for SUBSCRIBE and handle_publish is for PUBLISH, so you need 2 if, one for SUBSCRIBE method and one for PUBLISH one.

Second, after fixing this, if you have any problems, please send the msgs to see the problem



queyeah@adinet.com.uy wrote:

  
I read the SER presence handbook as you told me, I follow the 
instructions to install ser with presence modules but i receive some 
erros and modules wasn't installed.
I go back to my old ser installation with pa module, configure some 
lines in ser.gfc to handle subscribe but now I'm receiving an error to 
SUSCRIBE and PUBLISH, it's like pa module can't process messages: 
Status: 400 Bad Request (ethereal)

this is my ser.cfg:

# ----------- global configuration parameters ------------------------

#debug=3         # debug level (cmd line: -dddddddddd)
#fork=yes
#log_stderror=no	# (cmd line: -E)

/* Uncomment these lines to enter debugging mode 
fork=no
log_stderror=yes
*/

check_via=no	# (cmd. line: -v)
dns=no           # (cmd. line: -r)
rev_dns=no      # (cmd. line: -R)
#port=5060
#children=4
fifo="/tmp/ser_fifo"
fifo_mode=666

# ------------------ module loading ----------------------------------

# Uncomment this if you want to use SQL database
loadmodule "/usr/lib/ser/modules/mysql.so"

loadmodule "/usr/lib/ser/modules/sl.so"
loadmodule "/usr/lib/ser/modules/tm.so"
loadmodule "/usr/lib/ser/modules/rr.so"
loadmodule "/usr/lib/ser/modules/maxfwd.so"
loadmodule "/usr/lib/ser/modules/usrloc.so"
loadmodule "/usr/lib/ser/modules/registrar.so"
loadmodule "/usr/lib/ser/modules/textops.so"

# Uncomment this if you want digest authentication
# mysql.so must be loaded !
loadmodule "/usr/lib/ser/modules/auth.so"
loadmodule "/usr/lib/ser/modules/auth_db.so"

#esta linea la agrego para cargar el modulo de presencia.
loadmodule "/usr/lib/ser/modules/pa.so"


# ----------------- setting module-specific parameters ---------------

# -- usrloc params --

#modparam("usrloc", "db_mode", 0)
modparam("usrloc", "db_mode",   2)
modparam("usrloc", "db_url", "mysql://ser:heslo@localhost/ser" )


# Uncomment this if you want to use SQL database 
# for persistent storage and comment the previous line
modparam("usrloc", "db_mode", 2)

# -- auth params --
# Uncomment if you are using auth module
#
modparam("auth_db", "calculate_ha1", yes)
#
# If you set "calculate_ha1" parameter to yes (which true in this 
config), 
# uncomment also the following parameter)
#
modparam("auth_db", "password_column", "password")

# -- rr params --
# add value to ;lr param to make some broken UAs happy
modparam("rr", "enable_full_lr", 1)

# -- pa params --
modparam("pa","default_expires", 3600)
modparam("pa","use_db",1)
modparam("pa","db_url","mysql://ser:heslo@localhost/ser")



# -------------------------  request routing logic -------------------

# main routing logic

route{

	# initial sanity checks -- messages with
	# max_forwards==0, or excessively long requests
	if (!mf_process_maxfwd_header("10")) {
		sl_send_reply("483","Too Many Hops");
		break;
	};
	if (msg:len >=  2048 ) {
		sl_send_reply("513", "Message too big");
		break;
	};
	

	# we record-route all messages -- to make sure that
	# subsequent messages will go through our proxy; that's
	# particularly good if upstream and downstream entities
	# use different transport protocol
	if (!method=="REGISTER") record_route();	

	# subsequent messages withing a dialog should take the
	# path determined by record-routing
	if (loose_route()) {
		# mark routing logic in request
		append_hf("P-hint: rr-enforced\r\n"); 
		route(1);
		break;
	};


	if (!uri==myself) {
		# mark routing logic in request
		append_hf("P-hint: outbound\r\n"); 
		route(1);
		break;
	};


	# if the request is for other domain use UsrLoc
	# (in case, it does not work, use the following command
	# with proper names and addresses in it)
	if (uri==myself) {

		if (method=="REGISTER") {

                       # Uncomment this if you want to use digest 
authentication
			if (!www_authorize("p2t.com", "subscriber")) {
				www_challenge("p2t.com", "0");
				break;
			};

			save("location");
			break;
		};
		
		if (method=="SUBSCRIBE" || method=="PUBLISH") {
                       if (t_newtran()) {
                               handle_subscription("registrar");
				break;
                       };
               };        

		lookup("aliases");
		if (!uri==myself) {
			append_hf("P-hint: outbound alias\r\n"); 
			route(1);
			break;
		};

		# native SIP destinations are handled using our USRLOC DB
		if (!lookup("location")) {
			sl_send_reply("404", "Not Found");
			break;
		};
	};
	append_hf("P-hint: usrloc applied\r\n"); 
	route(1);
}

route[1] 
{
	# send it out now; use stateful forwarding as it works reliably
	# even for UDP2TCP
	if (!t_relay()) {
		sl_reply_error();
	};
}




Do you have any idea of what's happening???
Thanks again...
Gustavo.

_______________________________________________
Serusers mailing list
serusers@lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers

 

    



------------------------------

Message: 8
Date: Sat, 11 Mar 2006 16:15:46 -0500
From: "Script Head" <scripthead@gmail.com>
Subject: Re: [Serusers] backup mysql server
To: serusers@lists.iptel.org
Message-ID:
	<451eb55c0603111315n4f702d3dhc127074d6dacdf47@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

You could use something like sqlrelay (http://sqlrelay.sourceforge.net/) or
pgpool (for PostgreSQL) to implement failover. Both of those applications
provide failover features.

On 3/11/06, Rosario Pingaro <rpingar@italycom.it> wrote:
  
is it possible to configure a second mysql server for backup?

if yes how?
Thanks
 Rosario

_______________________________________________
Serusers mailing list
serusers@lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers



    
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/serusers/attachments/20060311/5cb7a23e/attachment.htm

------------------------------

Message: 9
Date: Sat, 11 Mar 2006 16:50:26 -0500
From: "Script Head" <scripthead@gmail.com>
Subject: Re: [Serusers] Uninstall SER?
To: serusers@lists.iptel.org
Message-ID:
	<451eb55c0603111350g264aa21bu62048f47cfb69b2c@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

Running on make install should overwrite the binaries so essentially you do
not need to uninstall anything.
If you want to, you can track down the binaries and remove them by hand.


On 3/11/06, KaiFu Chan <s1160956@ss23.mcu.edu.tw> wrote:
  
Hi all:

    Do I need to uninstall SER if I want to update SER v0.9.4 to SER
v0.9.6? How can I uninstall SER? The command "make uninstall" do not work.
Thanks!

Sincerely

Caxton

_______________________________________________
Serusers mailing list
serusers@lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers



    
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/serusers/attachments/20060311/330d12bf/attachment.html

------------------------------

Message: 10
Date: Sun, 12 Mar 2006 05:26:22 +0000
From: "Kapil Dhawan" <sersavvy@hotmail.com>
Subject: Re: [Serusers] Uninstall SER?
To: scripthead@gmail.com
Cc: serusers@lists.iptel.org
Message-ID: <BAY21-F204D80C49B36173FF7F67EC0E30@phx.gbl>
Content-Type: text/plain; format=flowed

No need to uninstall but if you still want

  
From: "Script Head" <scripthead@gmail.com>
To: serusers@lists.iptel.org
Subject: Re: [Serusers] Uninstall SER?
Date: Sat, 11 Mar 2006 16:50:26 -0500

Running on make install should overwrite the binaries so essentially you do
not need to uninstall anything.
If you want to, you can track down the binaries and remove them by hand.


On 3/11/06, KaiFu Chan <s1160956@ss23.mcu.edu.tw> wrote:
    
Hi all:

    Do I need to uninstall SER if I want to update SER v0.9.4 to SER
v0.9.6? How can I uninstall SER? The command "make uninstall" do not 
      
work.
    
Thanks!

Sincerely

Caxton

_______________________________________________
Serusers mailing list
serusers@lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers



      


  
_______________________________________________
Serusers mailing list
serusers@lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
    

_________________________________________________________________
One and only Ash. Find out all about her. Only on MSN Search 
http://server1.msn.co.in/profile/aishwarya.asp



------------------------------

Message: 11
Date: Sun, 12 Mar 2006 05:42:27 +0000
From: "Kapil Dhawan" <sersavvy@hotmail.com>
Subject: RE: [Serusers] Authentication Based On IP Addresses
To: g.uslu@teles.com
Cc: serusers@lists.iptel.org
Message-ID: <BAY21-F60438C328B846DFB4B719C0E30@phx.gbl>
Content-Type: text/plain; format=flowed

in ser.cfg
        if (loose_route()) {
                # mark routing logic in request
                append_hf("P-hint: rr-enforced\r\n");
                route(1);
                break;
        };

        if(method=="INVITE"){
        if (src_ip==x1.y1.z1.w1){
        if (uri=~"^sip:001*@*"){
                rewritehost("x.y.z.w");
                t_relay_to_udp("x.y.z.w","5060");
                break;
       };
       };
       };

This states that if Call is coming from x1.y1.z1.w1 and 00 as prefix then 
forward it to your Provider.

  
From: Gokhan Uslu <g.uslu@teles.com>
To: "'serusers@lists.iptel.org'" <serusers@lists.iptel.org>
Subject: [Serusers] Authentication Based On IP Addresses
Date: Sat, 11 Mar 2006 18:58:24 +0100


Hi All...
I am using SER  and FREERADIUS
I want to authenticate all the clients based on IP addresses. How to
proceed...? where to make the changes?
can any one give me the sample code function?...Thanks for any hint...

Gokhan USLU


    


  
_______________________________________________
Serusers mailing list
serusers@lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
    

_________________________________________________________________
NRIs: Still paying for money transfers? Now send Money2India for FREE! 
http://ads.mediaturf.net/event.ng/Type=click&FlightID=20273&AdID=65990&TargetID=11172&Targets=11172&Values=202,414,1093,1264,3122&Redirect=http:%2F%2Fwww.icicinri.net%2Fmoney2india%2F%3Fm2i%3DBAC-MSN%26att%3DMSNTLM2I70CHAR%26rfr%3DMSNTLM2I70CHAR



------------------------------

_______________________________________________
Serusers mailing list
serusers@lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers


End of Serusers Digest, Vol 35, Issue 13
****************************************