My logic saves the user that is registering into the location table without challenging them for a password or checking that the user or domain is local to the OpenSIPs instance. If you are looking for something more you might want to provide more detail.<div><br></div><div>This would allow fake accounts to register if they are from a friendly IP.<span></span><br><br>On Wednesday, December 31, 2014, Satish Patel <<a href="mailto:satish.txt@gmail.com">satish.txt@gmail.com</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">How it will help if i want to allow only IP auth for specific user but not registration auth? How your logic deal with User level?<div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Dec 31, 2014 at 12:22 PM, Duane Larson <span dir="ltr"><<a href="javascript:_e(%7B%7D,'cvml','duane.larson@gmail.com');" target="_blank">duane.larson@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Would you not just do something like this?<div><br></div><div>If(FriendlyIP && is_method("REGISTER"))</div><div>{</div><div><div> if (t_newtran()) {</div><div> save("location");</div><div> }</div><div><br></div><div> exit;</div></div><div>}</div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div>On Wed, Dec 31, 2014 at 10:22 AM, Satish Patel <span dir="ltr"><<a href="javascript:_e(%7B%7D,'cvml','satish.txt@gmail.com');" target="_blank">satish.txt@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr">Hi,<div><br></div><div>We have many users using both registration method and IP auth method to send calls but i wants if they use IP Auth method then we can disable registration method ( just prevention from hacking attack). </div><div><br></div><div>I believe registration is only required for incoming calls to find user location, right? How do i tell opensips don't accept user registration method even opensips challenge for proxy auth. any suggestion? </div></div>
<br></div></div>_______________________________________________<br>
Users mailing list<br>
<a href="javascript:_e(%7B%7D,'cvml','Users@lists.opensips.org');" target="_blank">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
<br></blockquote></div><br></div>
<br>_______________________________________________<br>
Users mailing list<br>
<a href="javascript:_e(%7B%7D,'cvml','Users@lists.opensips.org');" target="_blank">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
<br></blockquote></div><br></div>
</blockquote></div>