[OpenSIPS-Users] Block user from registration

[Ali Pey]

You can also consider using the permissions module. If the src IP is there,
then you can accept the request, otherwise, drop the message.

Regards,
Ali Pey


On Wed, Dec 31, 2014 at 1:30 PM, Duane Larson <duane.larson at gmail.com>
wrote:

> My logic saves the user that is registering into the location table
> without challenging them for a password or checking that the user or domain
> is local to the OpenSIPs instance.  If you are looking for something more
> you might want to provide more detail.
>
> This would allow fake accounts to register if they are from a friendly IP.
>
>
> On Wednesday, December 31, 2014, Satish Patel <satish.txt at gmail.com>
> wrote:
>
>> How it will help if i want to allow only IP auth for specific user but
>> not registration auth? How your logic deal with User level?
>>
>>
>> On Wed, Dec 31, 2014 at 12:22 PM, Duane Larson <duane.larson at gmail.com>
>> wrote:
>>
>>> Would you not just do something like this?
>>>
>>> If(FriendlyIP && is_method("REGISTER"))
>>> {
>>>                 if (t_newtran()) {
>>>                         save("location");
>>>                 }
>>>
>>>                 exit;
>>> }
>>>
>>> On Wed, Dec 31, 2014 at 10:22 AM, Satish Patel <satish.txt at gmail.com>
>>> wrote:
>>>
>>>> Hi,
>>>>
>>>> We have many users using both registration method and IP auth method to
>>>> send calls but i wants if they use IP Auth method then we can disable
>>>> registration method ( just prevention from hacking attack).
>>>>
>>>> I believe registration is only required for incoming calls to find user
>>>> location, right? How do i tell opensips don't accept user registration
>>>> method even opensips challenge for proxy auth. any suggestion?
>>>>
>>>> _______________________________________________
>>>> Users mailing list
>>>> Users at lists.opensips.org
>>>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>>> <https://contactmonkey.com/api/v1/tracker?cm_session=2fbf233d-c6f2-4110-af3e-5cf568144048&cm_type=link&cm_link=fe5ffb6c-5456-4123-ac5e-ec6209f257ac&cm_destination=http://lists.opensips.org/cgi-bin/mailman/listinfo/users>
>>>>
>>>>
>>>
>>> _______________________________________________
>>> Users mailing list
>>> Users at lists.opensips.org
>>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>> <https://contactmonkey.com/api/v1/tracker?cm_session=2fbf233d-c6f2-4110-af3e-5cf568144048&cm_type=link&cm_link=b28e5084-e043-4bf9-916b-9dab1b052364&cm_destination=http://lists.opensips.org/cgi-bin/mailman/listinfo/users>
>>>
>>>
>>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> <https://contactmonkey.com/api/v1/tracker?cm_session=2fbf233d-c6f2-4110-af3e-5cf568144048&cm_type=link&cm_link=923b7e39-fb38-4de5-8d98-57ed954673a8&cm_destination=http://lists.opensips.org/cgi-bin/mailman/listinfo/users>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20150101/633f1511/attachment.htm>