Restricting node not working

AllStarLink
1

Running ASL3 under Debian and added a node we need to restrict, using the options under Node Setting in the asl-menu.

After adding the restricted node (12345), in order to make sure it was added to the “blocked nodes” I ran CLI> database show

And get:

Connected to Asterisk 20.11.0+asl3-3.2.0-2.deb12 currently running on dmr (pid = 1299860)
dmrCLI> database show
/denylist/577770/12345 : block node 12345 from connecting to node 577770
/denylist/577771/12345 : block node 12345 from connecting to node 577771
/denylist/[577770] : [12345]
/denylist/[577771] : [12345]
/pbx/UUID : 4f67666f-3386-4729-83d8-b5eb0accd4d0
5 results found.
dmrCLI>

Note: the real node number of the restricted node was replaced with 12345 for the purpose of solving this issue.

The problem is that the supposedly restricted node still can connect to our nodes, so adding the node to the “blocked” list is not blocking it.

What am I missing here?
Thanks
N2IX

2

With these two DB entries, node 12345 should be blocked from connecting to nodes 577770 and 577771.

Where did these DB entries come from? Did you enter DB commands from the CLI? I don’t believe they would have any ill effect but they also won’t help.

As for why the access list is (or is not) working, did you make any changes to the extensions.conf file? Asking because that’s where the access list checks are made.

3

Thanks for the reply, yes I followed some link about being able to manipulate the access list via the CLI and I guess the last two entries were added with no effect:
/denylist/[577770] : [12345]
/denylist/[577771] : [12345]

Later on I learned that it shouldn’t be done this way and instead via the ASL-MENU utility, so now the DB has two records that were added via CLI. I havenot checked extensions.conf but will do now.

Thanks
N2IX

4

One thing to note is that the allow/block settings are handled a new way in ASL3. You should be fine if you only used asl-menu to make changes to extensions.conf. But, you may have issues if you copied over (or otherwise made) changes that worked on (or were targeted for) non-ASL3 installs.