[acl]
type=acl
acl=permit_login_phones
deny=0.0.0.0/0.0.0.0
permit=192.168.2.0/24

[11]
type = endpoint
context = internal
disallow = all
allow = alaw
aors = 11
auth = auth_11
transport=system-udp
acl=permit_login_phones

dial-peer voice 91234567 voip
 destination-pattern 91234567
 session protocol sipv2
 session target ipv4:192.168.333.333
 codec g711alaw

[2921_8m]
type=peer
host=192.168.222.222
dtmfmode=rfc2833
context=allow_mezhg
disallow=all
allow=alaw
allow=ulaw
allow=g729
qualify=yes
jbforce=yes
insecure=invite

 == Using SIP RTP TOS bits 96
  == Using SIP RTP CoS mark 5
  == Using UDPTL TOS bits 96
  == Using UDPTL CoS mark 5
Sending to 192.168.333.333 : 5060 (no NAT)
Found RTP audio format 8
Found RTP audio format 19
Found audio description format PCMA for ID 8
Found audio description format CN for ID 19
Capabilities: us - 0x8000e (gsm|ulaw|alaw|h263), peer - audio=0x8 (alaw)/video=0x0 (nothing)/text=0x0 (nothing), combined - 0x8 (alaw)
Non-codec capabilities (dtmf): us - 0x1 (telephone-event), peer - 0x2 (CN), combined - 0x0 (nothing)
Peer audio RTP is at port 192.168.333.333:16400
Looking for 91234567 in sip (domain 192.168.222.222)

<--- Reliably Transmitting (no NAT) to 192.168.333.333:5060 --->
SIP/2.0 404 Not Found
Via: SIP/2.0/UDP 192.168.333.333:5060;x-route-tag="tgrp:2292068";branch=z9hG4bK8E55;received=192.168.333.333
From: <sip:192.168.333.333>;tag=33B13570-1889
To: <sip:91234567@192.168.222.222>;tag=as7e419fb9
Call-ID: 6ADAC80A-BD6A11E2-B467C3BC-D8B58A70@192.168.333.333
CSeq: 101 INVITE
Server: Asterisk PBX 1.6.2.17.2
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO
Supported: replaces, timer
Content-Length: 0


<------------>
[May 16 18:21:44] NOTICE[11425]: chan_sip.c:20314 handle_request_invite: Call from '' to extension '91234567' rejected because extension not found in context 'sip'.

#cat cftest2.cf

bundle agent test2 {   
        files: 
                "/tmp/cf_test_file_2"   
                comment => "get file from server",
                #perms => system("644"),
                #create => "true";
                copy_from => secure_cp("/var/cfengine/masterfiles/true","myhost");
}
bundle server access_rules {
        access:
                "/var/cfengine/masterfiles/true"
                comment => "Test permit rule",
                admit => { "0.0.0.0/0" };
                #allowusers => { "root" };
}

# cat promises.cf

body common control  {
        bundlesequence => { 
                "def",
                "test1",
                "test2",
         };
        inputs => { 
                "def.cf",
                "cfengine_stdlib.cf",
                "cftest1.cf",
                "cftest2.cf",
        };
        version => "Community Promises.cf 1.0.0";
}

cf3> Summarize control promises
cf3> Granted access to paths :
cf3> Path: /var/cfengine/masterfiles/true (encrypt=0)
cf3>    Admit: 0.0.0.0/0 root=
cf3> Denied access to paths :
cf3> Path: /var/cfengine/masterfiles/true
cf3> Granted access to literal/variable/query data :
cf3> Denied access to literal/variable/query data :
cf3>  -> Host IPs allowed connection access :
cf3> Host IPs denied connection access :
cf3> Host IPs allowed multiple connection access :
cf3> Host IPs from whom we shall accept public keys on trust :
cf3> Users from whom we accept connections :
cf3> Host IPs from NAT which we don't verify :
cf3> Allowing 111.11.22.192 to connect without (re)checking ID
cf3> Non-verified Host ID is 111.11.pppoe.mtu-net.ru (Using skipverify)
cf3> Non-verified User ID seems to be root (Using skipverify)
cf3>  -> Public key identity of host "111.11.22.192" is "MD5=f95fc3a9c59099a28bfe847346d4ecae"
cf3> A public key was already known from 111.11.pppoe.mtu-net.ru/111.11.22.192 - no trust required
cf3> Adding IP 111.11.22.192 to SkipVerify - no need to check this if we have a key
cf3> The public key identity was confirmed as root@111.11.pppoe.mtu-net.ru
cf3>  -> Strong authentication of client 111.11.pppoe.mtu-net.ru/111.11.22.192 achieved
cf3>  -> Receiving session key from client (size=256)...
cf3> Filename /var/cfengine/masterfiles/true is resolved to /var/cfengine/masterfiles/true
cf3> Found a matching rule in access list (/var/cfengine/masterfiles/true in /var/cfengine/masterfiles/true)
cf3> Host 111.11.pppoe.mtu-net.ru denied access to /var/cfengine/masterfiles/true
cf3> Access control in sync
cf3> From (host=111.11.pppoe.mtu-net.ru,user=root,ip=111.11.22.192)
cf3> REFUSAL of request from connecting host: (SYNCH 1362407127 STAT /var/cfengine/masterfiles/true)
cf3> Terminating thread...

# usb_printerid  /dev/usb/lp0
GET_DEVICE_ID string:
MFG:Hewlett-Packard;MDL:HP LaserJet 1020;CMD:ACL;CLS:PRINTER;DES:HP LaserJet 1020;FWVER:20050309;