WAP Gateway restriction of APN to access specific websites

WAP Gateway restriction of APN to access specific websites SearchSearch
Author Message
ydnar lim
New member
Username: Ramil

Post Number: 3
Registered: 09-2010
Posted on Thursday, September 09, 2010 - 01:14 am:   

Hi Support, is the provisioning below possible? and how can we go about it? how much is the cost for the setup/modification for this?


WAP Gateway restriction of APN to access specific websites

Description Of Change Request:

We need to restrict the IP range 10.22.0.0/16 (wap.operator.com) to access only our MMSC (88.11.134.23 , 88.13.135.24 and 88.11.134.25), and our wap portal http://88.16.134/mysite.php , http://wap.portal.com/.


Reasons for Change Request:

To allow the wap.celoperator.com users to access only those specific URL and web site



Thank you,
Randy
Volubill
Bryce Norwood - NowSMS Support
Board Administrator
Username: Bryce

Post Number: 7922
Registered: 10-2002
Posted on Friday, September 10, 2010 - 01:32 am:   

Hi Randy,

This is possible in NowWAP 2008 and later, and the configuration is described at the following link:

http://blog.nowsms.com/2008/07/one-wap-gateway-for-both-mms-and.html

The restrictions are based upon a combination of source IP (APN) and destination host names.

Within NowWAP, you defined the allowed host/domain names in the "Content Domains to receive X-MSISDN header" setting on the MSISDN page of the NowWAP configuration.

To configure source connections from 10.22.0.0/16 to be only allowed to access these hosts, you would add IncludeMsisdnConnectOnlySourceIP=10.22.*.* to the [WAPGW] section of the WAPGW.INI file. This would tell the WAP gateway that for any requests that come from clients in that IP address range, the gateway should only allow connections to domains/hosts in the "X-MSIDN" list. Connections to the gateway from other client addresses (different APN) would not be restricted. This setting can have a comma delimited list of IP addresses (e.g., 10.10.10.*,10,10.11.*). It does not support net masks ... it can only use the "*" character as a wildcard in parts of the IP address.

-bn
Bryce Norwood
NowSMS Support
ydnar lim
New member
Username: Ramil

Post Number: 4
Registered: 09-2010
Posted on Sunday, September 12, 2010 - 02:23 am:   

Thank you very much for this information Bryce, we really appreciate it.


Regards,
Randy
ydnar lim
New member
Username: Ramil

Post Number: 18
Registered: 09-2010
Posted on Tuesday, January 11, 2011 - 11:06 pm:   

Hi Support,

Can I request for the removal of this thread due to some risk to the confidentially agreement of our customer.

Thank you & regards,
Randy