asterisk users - Aug 2009 - ami

I was playing with the AMI today.

Trying to get a setup that only responds to connections on the SAME box. 
like 192.168.1.10
So .10 is my server and I only want responses originating from .10 to 
answer the AMI.

I set bindaddr to 192.168.1.10
I left it as 0.0.0.0

I set permit to be 127.0.0.1/255.255.255.0
I tried 192.168.1.10/255.255.255.0
I tried 192.168.1.10/255.255.255.255

No matter what I was trying from another machine (other than .10) I 
could always "telnet 192.168.1.10 5038"
and get a response.

How do I setup AMI to ONLY response to orginations from .10?

( each time I was stopping and starting asterisk)

Thanks,

Jerry

A more specific subject may get better responses. Maybe something like 
"How to restrict access to AMI to localhost?"

On Mon, 3 Aug 2009, Jerry Geis wrote:
> Trying to get a setup that only responds to connections on the SAME box. 
> like 192.168.1.10 So .10 is my server and I only want responses 
> originating from .10 to answer the AMI.
>
> I set bindaddr to 192.168.1.10
Would binding to 127.0.0.1 make sense?
> I left it as 0.0.0.0
I don't know what this means.
> I set permit to be 127.0.0.1/255.255.255.0
> I tried 192.168.1.10/255.255.255.0
> I tried 192.168.1.10/255.255.255.255
What does manager.conf look like?

Stealing from 
http://www.the-asterisk-book.com/unstable/asterisk-manager-api.html, it 
should look something like:

[admin]
secret = secret5
deny = 0.0.0.0/0.0.0.0
permit = 127.0.0.1/255.255.255.255
read = all,system,call,log,verbose,command,agent,user,config
write = all,system,call,log,verbose,command,agent,user,config

-- 
Thanks in advance,
-------------------------------------------------------------------------
Steve Edwards       sedwards at sedwards.com      Voice: +1-760-468-3867 PST
Newline                                              Fax: +1-760-731-3000