|
@@ -85,7 +85,9 @@ route{
|
|
} else {
|
|
} else {
|
|
# all other PSTN destinations only for authenticated users
|
|
# all other PSTN destinations only for authenticated users
|
|
# (Cisco GW, which has no digest support, is authenticated
|
|
# (Cisco GW, which has no digest support, is authenticated
|
|
- # by its IP address -- that's for sure not very strong)
|
|
|
|
|
|
+ # by its IP address -- that's for sure not very strong;
|
|
|
|
+ # wth confirmed that we filter packets coming from outside
|
|
|
|
+ # and bearing SRC IP address of a Fokus network)
|
|
if (!(src_ip==195.37.77.110) & !(authorize("iptel.org"))) {
|
|
if (!(src_ip==195.37.77.110) & !(authorize("iptel.org"))) {
|
|
challenge("iptel.org");
|
|
challenge("iptel.org");
|
|
break;
|
|
break;
|
|
@@ -118,7 +120,8 @@ route{
|
|
};
|
|
};
|
|
# requests to gateway must be record-route because the GW accepts
|
|
# requests to gateway must be record-route because the GW accepts
|
|
# only reqeusts coming from our proxy
|
|
# only reqeusts coming from our proxy
|
|
- addRecordRoute();
|
|
|
|
|
|
+ if (method="INVITE")
|
|
|
|
+ addRecordRoute();
|
|
# if you have passed through all the checks, let your call go to GW!
|
|
# if you have passed through all the checks, let your call go to GW!
|
|
rewritehostport("195.37.77.110:5060");
|
|
rewritehostport("195.37.77.110:5060");
|
|
} else {
|
|
} else {
|