[OpenSIPS-Users] multidomain, security

[Miha]

tnx Bogdan.

Did that:)

br
miha

Dne 4/1/2014 8:06 PM, piše Bogdan-Andrei Iancu:
> Hello,
>
> If the caller is not a local user you cannot authenticate him (as you 
> do not have any info on that user) - so what you have to do is to 
> limit what such a caller can do - typically only to local subscribers 
> (no media, no PSTN, no other services, just to your users); or simply 
> reject them if you do not want to get calls from foreign domains.
>
> Regards,
>
> Bogdan-Andrei Iancu
> OpenSIPS Founder and Developer
> http://www.opensips-solutions.com
>
> On 19.03.2014 14:20, Miha wrote:
>> Hi,
>>
>> I am doing "proxy_authorize" for "!(method=="REGISTER") && 
>> is_from_local()".
>>
>> I request INVITE is not send from user, which does "not contain" 
>> local_domain (defined in domains table) in INVITE, so this will not 
>> be authenticated as this request will not go to this 
>> "!(method=="REGISTER") && is_from_local()" condition and in my case 
>> this invite will go throught.
>>
>> Was is best practice for droping that kind of invites?
>>
>> Doing this:
>>
>> $avp(port)="5060";
>> if(!$si=="SBC_IP" && !lb_is_destination("$si","$(avp(port){s.int})") 
>> && !is_from_local()){
>> drop;
>> }
>>
>> ?
>>
>> tnx!
>>
>> miha
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>
>