diff options
| author | twilson <twilson@f38db490-d61c-443f-a65b-d21fe96a405b> | 2010-05-20 17:54:02 +0000 |
|---|---|---|
| committer | twilson <twilson@f38db490-d61c-443f-a65b-d21fe96a405b> | 2010-05-20 17:54:02 +0000 |
| commit | 8a617fe9cf109c886774044e62b18b9088fcdab1 (patch) | |
| tree | 425bb6c293a143992c2bfc921c1a1e5618f62a83 /configs | |
| parent | 08bff6ef2e0e043bf34fdb0c4bffb55ca2471c65 (diff) | |
Add support for direct media ACLs
directmediapermit/directmediadeny support to restrict which peers can do
directmedia based on ip address. In some networks not all phones are fully
routed, i.e. not all phones can ping each other. This patch adds a way to
restrict directmedia for certain peers between certain networks.
(closes issue #16645)
Reported by: raarts
Patches:
directmediapermit.patch uploaded by raarts (license 937)
Tested by: raarts
Review: https://reviewboard.asterisk.org/r/467/
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@264626 f38db490-d61c-443f-a65b-d21fe96a405b
Diffstat (limited to 'configs')
| -rw-r--r-- | configs/sip.conf.sample | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/configs/sip.conf.sample b/configs/sip.conf.sample index dcaab14e6..a9ed6fad9 100644 --- a/configs/sip.conf.sample +++ b/configs/sip.conf.sample @@ -786,6 +786,13 @@ srvlookup=yes ; Enable DNS SRV lookups on outbound calls ; callers INVITE. This will also fail if directmedia is enabled when ; the device is actually behind NAT. +;directmediadeny=0.0.0.0/0 ; Use directmediapermit and directmediadeny to restrict +;directmediapermit=172.16.0.0/16; which peers should be able to pass directmedia to each other + ; (There is no default setting, this is just an example) + ; Use this if some of your phones are on IP addresses that + ; can not reach each other directly. This way you can force + ; RTP to always flow through asterisk in such cases. + ;ignoresdpversion=yes ; By default, Asterisk will honor the session version ; number in SDP packets and will only modify the SDP ; session if the version number changes. This option will @@ -1017,6 +1024,8 @@ srvlookup=yes ; Enable DNS SRV lookups on outbound calls ; contactdeny ; is to register at the same IP as a SIP provider, ; ; then call oneself, and get redirected to that ; ; same location). +; directmediapermit +; directmediadeny ; unsolicited_mailbox ; use_q850_reason |