Page 1 of 1

Web Authentication to Permit IP Address Access

PostPosted: Fri Dec 02, 2011 10:15 am
by chrism
Hi Guys,

Does anyone know if there is anything out there that is already available that has the ability for a user to authenticate their own IP address via a web interface so that their software phone can authenticate with the asterisk server on ViciBox? The idea is to keep people off of asterisk server unless they actually connect to the asterisk server via a web interface and authenticate their IP address. The script would then tell IPtables to allow the connection to go through (via config file edit) or even just update the extensions.conf for that particular extension's IP address (or range).

It doesn't sound like this is something unique to me. Is there anything like there out there already?

Thanks,

Chris

PostPosted: Sat Dec 03, 2011 2:48 pm
by williamconley
We install a package for $200 that will accomplish that task.

We use iptables and a package (in iptables) call "recent" or "xt_recent" which allows a special file to be created that can be added to or removed from "on the fly" to authorize ips. Then we use a mysql table with a web interface to add / remove items from that list. We also use a port other than 80 with a locked down web site that has NO purpose other than login (so nothing is exposed to unauthenticated users).