sr-users June 2008

sr-users@lists.kamailio.org

124 participants
231 discussions

Re: [OpenSER-Users] Radius accounting and Dialog
by David Villasmil 16 Jun '08

16 Jun '08

On Mon, Jun 16, 2008 at 2:29 PM, Iñaki Baz Castillo <ibc(a)in.ilimit.es> wrote: > El Monday 16 June 2008 13:45:07 escribió: > > Jola, ¿tal vez iba para la lista? XDDDDD > > > > > If you manage clients behind NAT with no STUN you need to fix NAT in > SIP > > > signalling. For that you need managing rport, rewritting "Contact" > header > > > and so. > > > Of course, if you are not the responsible of the clients you don't need > > > it. :) > > > > As i'm not responsible for the clients I always do: > > > > setbflag(7); > > force_rport(); > > fix_contact(); > > > > append_hf("P-hint: Route[6]: mediaproxy \r\n"); > > use_media_proxy(); > > > > > > on an INVITE, as I don't care whether they are behind NAT or not. And > > on the REPLYs: > > > > append_hf("P-hint: Onreply-route - fixcontact \r\n"); > > fix_contact(); > > > > if (search("^Content-Type:[ ]*application/sdp")) { > > append_hf("P-hint: onreply_route|usemediaproxy \r\n"); > > use_media_proxy(); > > }; > > You only have to "fix_contact" if the reply is a 180|183 or 2XX > Be careful, if you get a REDIRECT (3XX) whose information is in it > "CONTACT" (who to redirect to), you'll delete the "contact" > > > > > this way if the are behind NAT or not, i'll always fix the contacts > > and force mediaproxy.... > > > > do you think this is correct? > > Have you had problems with calls getting cut off? BYE/CANCEL/ACK that > didn't reach its destination? > If you haven't, the it is correct ;) > >

1 0

Re: [OpenSER-Users] Acc/CDRTool Issue
by David Villasmil 16 Jun '08

16 Jun '08

could it be that acc can't find the dictionary.ser? is the path to that file in you /usr/local/etc/radiusclient-ng/dictionary an absolute path? On Mon, Jun 16, 2008 at 2:24 PM, Ali Jawad <ali.jawad(a)splendor.net> wrote: > What config files do you need so that I publish those ? > Thanks > > > -----Original Message----- > From: David Villasmil [mailto:david.villasmil.work@gmail.com] > Sent: Monday, June 16, 2008 3:17 PM > To: Ali Jawad > Subject: Re: [OpenSER-Users] Acc/CDRTool Issue > > For some reason I can't figure out, openser can't either find the file > or can't read it... > > can you post your config? > > On Mon, Jun 16, 2008 at 2:14 PM, Ali Jawad <ali.jawad(a)splendor.net> wrote: >> >> >> Hi >> >> I have debug 6, I put it debug 9 and I am still getting the same ouput >> >> Jun 16 13:12:01 [4977] ERROR:acc:init_acc_rad: failed to read radius dictionary >> Jun 16 13:12:01 [4977] ERROR:acc:mod_init: failed to init radius >> Jun 16 13:12:01 [4977] ERROR:core:init_mod: failed to initialize module acc >> Jun 16 13:12:01 [4977] ERROR:core:main: error while initializing modules >> Jun 16 13:12:01 [4977] DBG:xlog:destroy: destroy module... >> >> >> -----Original Message----- >> From: David Villasmil [mailto:david.villasmil.work@gmail.com] >> Sent: Monday, June 16, 2008 3:10 PM >> To: Ali Jawad >> Subject: Re: [OpenSER-Users] Acc/CDRTool Issue >> >> make the debug higher, like 5 and re-run >> >> On Mon, Jun 16, 2008 at 2:03 PM, Ali Jawad <ali.jawad(a)splendor.net> wrote: >>> Hi >>> >>> I did not reach that far yet, I am still trying to make it run with no errors. >>> >>> Thanks >>> >>> -----Original Message----- >>> From: David Villasmil [mailto:david.villasmil.work@gmail.com] >>> Sent: Monday, June 16, 2008 3:02 PM >>> To: Ali Jawad >>> Subject: Re: [OpenSER-Users] Acc/CDRTool Issue >>> >>> with >>> log_flagyou are telling the system to log accounting on syslog... is >>> that what you want? >>> >>> my whole module config is this: >>> >>> modparam("acc", "radius_config", "/etc/radiusclient-ng/radiusclient.conf") >>> modparam("acc", "radius_flag", 2) >>> modparam("acc", "radius_missed_flag", 3) >>> >>> I don't have any log flag, I'm already logging to radius... >>> >>> On Mon, Jun 16, 2008 at 2:00 PM, David Villasmil >>> <david.villasmil.work(a)gmail.com> wrote: >>>> then take a look at the file's permissions... it all seems ok to me. >>>> >>>> On Mon, Jun 16, 2008 at 1:58 PM, Ali Jawad <ali.jawad(a)splendor.net> wrote: >>>>> Hi >>>>> Yes I did >>>>> >>>>> This is a part of my openser script >>>>> >>>>> modparam("acc", "log_flag", 1) >>>>> modparam("acc", "log_missed_flag", 1) >>>>> >>>>> modparam("acc", "radius_config","/usr/local/etc/radiusclient-ng/radiusclient.conf") >>>>> >>>>> >>>>> >>>>> -----Original Message----- >>>>> From: David Villasmil [mailto:david.villasmil.work@gmail.com] >>>>> Sent: Monday, June 16, 2008 2:55 PM >>>>> To: Ali Jawad >>>>> Subject: Re: [OpenSER-Users] Acc/CDRTool Issue >>>>> >>>>> did you tell the module where to find the dictionary? >>>>> >>>>> this is mine (I'm using 1.3): >>>>> >>>>> modparam("acc", "radius_config", "/etc/radiusclient-ng/radiusclient.conf") >>>>> >>>>> On Mon, Jun 16, 2008 at 1:51 PM, Ali Jawad <ali.jawad(a)splendor.net> wrote: >>>>>> >>>>>> Hi All >>>>>> >>>>>> I did add to in /etc/raddb/dictionary >>>>>> >>>>>> $INCLUDE /usr/share/freeradius/dictionary >>>>>> $INCLUDE /etc/raddb/dictionary.ser >>>>>> >>>>>> I did add in /usr/local/etc/radiusclient-ng/dictionary >>>>>> >>>>>> $INCLUDE /usr/local/etc/radiusclient-ng/dictionary.ser the the LAST line. >>>>>> >>>>>> I did restart radiusd with no problems >>>>>> >>>>>> When I restarted Openser I got >>>>>> >>>>>> Jun 16 12:48:47 [4923] ERROR:acc:init_acc_rad: failed to read radius dictionary >>>>>> Jun 16 12:48:47 [4923] ERROR:acc:mod_init: failed to init radius >>>>>> Jun 16 12:48:47 [4923] ERROR:core:init_mod: failed to initialize module acc >>>>>> Jun 16 12:48:47 [4923] ERROR:core:main: error while initializing modules >>>>>> Jun 16 12:48:47 [4923] DBG:xlog:destroy: destroy module... >>>>>> >>>>>> >>>>>> -----Original Message----- >>>>>> From: David Villasmil [mailto:david.villasmil.work@gmail.com] >>>>>> Sent: Monday, June 16, 2008 2:23 PM >>>>>> To: Ali Jawad >>>>>> Cc: users(a)lists.openser.org >>>>>> Subject: Re: [OpenSER-Users] Acc/CDRTool Issue >>>>>> >>>>>> this is my config: >>>>>> >>>>>> on the server (radius): >>>>>> >>>>>> ls -l /etc/freeradius/dictionary.ser >>>>>> -rw-r--r-- 1 root freerad 4233 2008-06-11 04:03 /etc/freeradius/dictionary.ser >>>>>> >>>>>> my /etc/freeradius/dictionary: >>>>>> >>>>>> $INCLUDE /usr/share/freeradius/dictionary >>>>>> $INCLUDE /etc/freeradius/dictionary.ser >>>>>> >>>>>> >>>>>> on the client (openser): >>>>>> >>>>>> ls -l /etc/radiusclient-ng/ >>>>>> total 48 >>>>>> -rw-r--r-- 1 root root 7375 2008-06-11 04:14 dictionary >>>>>> -rw-r--r-- 1 root root 4233 2008-06-11 04:52 dictionary.ser >>>>>> >>>>>> in the file /etc/radiusclient-ng/dictionary AT THE VERY END: >>>>>> >>>>>> $INCLUDE /etc/radiusclient-ng/dictionary.ser >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> that's it. >>>>>> >>>>>> d >>>>>> On Mon, Jun 16, 2008 at 1:13 PM, Ali Jawad <ali.jawad(a)splendor.net> wrote: >>>>>>> >>>>>>> >>>>>>> Hi Again >>>>>>> >>>>>>> I have re-read the howto and it states that I should comment out the include line for the dictionary.ser file in the dictionary file for radiusclient-ng. Should I do the same for the server ? >>>>>>> I did it for the client by adding the following line to the radiusclient-ng file >>>>>>> >>>>>>> $INCLUDE /usr/local/etc/radiusclient-ng/dictionary.ser >>>>>>> >>>>>>> This gave the following errror >>>>>>> >>>>>>> Jun 16 12:08:12 [4781] ERROR:acc:init_acc_rad: failed to read radius dictionary >>>>>>> Jun 16 12:08:12 [4781] ERROR:acc:mod_init: failed to init radius >>>>>>> Jun 16 12:08:12 [4781] ERROR:core:init_mod: failed to initialize module acc >>>>>>> Jun 16 12:08:12 [4781] ERROR:core:main: error while initializing modules >>>>>>> >>>>>>> However if I do edit the radiusclient.conf file and point the dictionary directly to /usr/local/etc/radiusclient-ng/dictionary.ser openser appears to launch normally. Although nothing is added to the radius db. >>>>>>> >>>>>>> In short. >>>>>>> >>>>>>> Should I include the server as well ? >>>>>>> >>>>>>> Is my include line for the client correct ? >>>>>>> >>>>>>> Thanks. >>>>>>> >>>>>>> >>>>>>> -----Original Message----- >>>>>>> From: users-bounces(a)lists.openser.org [mailto:users-bounces@lists.openser.org] On Behalf Of Iñaki Baz Castillo >>>>>>> Sent: Monday, June 16, 2008 1:01 PM >>>>>>> To: users(a)lists.openser.org >>>>>>> Subject: Re: [OpenSER-Users] Acc/CDRTool Issue >>>>>>> >>>>>>> El Monday 16 June 2008 11:19:58 Ali Jawad escribió: >>>>>>>> Hi >>>>>>>> The server and client are on the same machine. >>>>>>>> >>>>>>>> The freeradius server config files are on /etc/raddb/ >>>>>>>> >>>>>>>> So I did copy it to that dir >>>>>>>> >>>>>>>> [root@localhost radiusclient-ng]# cd /etc/raddb/ >>>>>>>> [root@localhost raddb]# pwd >>>>>>>> /etc/raddb >>>>>>>> [root@localhost raddb]# ls dictionary.ser >>>>>>>> dictionary.ser >>>>>>>> [root@localhost raddb]# >>>>>>> >>>>>>> That's not enough. Check that you FreeRadius "dictionary" file has an #INCLUDE >>>>>>> pointing to that file. >>>>>>> >>>>>>> -- >>>>>>> Iñaki Baz Castillo >>>>>>> ibc(a)in.ilimit.es >>>>>>> >>>>>>> _______________________________________________ >>>>>>> Users mailing list >>>>>>> Users(a)lists.openser.org >>>>>>> http://lists.openser.org/cgi-bin/mailman/listinfo/users >>>>>>> >>>>>>> -- >>>>>>> This message has been scanned for viruses and >>>>>>> dangerous content by MailScanner, and is >>>>>>> believed to be clean. >>>>>>> >>>>>>> >>>>>>> _______________________________________________ >>>>>>> Users mailing list >>>>>>> Users(a)lists.openser.org >>>>>>> http://lists.openser.org/cgi-bin/mailman/listinfo/users >>>>>>> >>>>>> >>>>>> -- >>>>>> This message has been scanned for viruses and >>>>>> dangerous content by MailScanner, and is >>>>>> believed to be clean. >>>>>> >>>>>> >>>>> >>>>> -- >>>>> This message has been scanned for viruses and >>>>> dangerous content by MailScanner, and is >>>>> believed to be clean. >>>>> >>>>> >>>> >>> >>> -- >>> This message has been scanned for viruses and >>> dangerous content by MailScanner, and is >>> believed to be clean. >>> >>> >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > >

3 16

[OpenSER-Users] Acc/CDRTool Issue
by Ali Jawad 16 Jun '08

16 Jun '08

Hi All I have followed this howto http://cdrtool.ag-projects.com/browser/doc/INSTALL.txt I did the CDR Tool installation I installed freeradius and I installed radiusclient-ng I did comment out the radius modules from the exclude list in the openser Makefile I did comment out ENABLE_RADIUS_ACC modules/acc/Makefile I did enter the following info into openser --> modparam("acc", "radius_config","/usr/local/etc/radiusclient-ng/radiusclient.conf") I did edit /usr/local/etc/radiusclient-ng/servers to meet the secret requirements I did add dictionary.ser to /usr/local/etc/radiusclient-ng/ I did restart the freeradius server using radiusd -x Now when I do start openser I do get the following error: Jun 16 10:02:02 [4488] ERROR:acc:init_acc_rad: acc: can't get code for the Sip-Response-Code attribute Jun 16 10:02:02 [4488] ERROR:acc:mod_init: failed to init radius Jun 16 10:02:02 [4488] ERROR:core:init_mod: failed to initialize module acc Jun 16 10:02:02 [4488] ERROR:core:main: error while initializing modules Jun 16 10:02:02 [4488] DBG:xlog:destroy: destroy module... And the radius server does not show any incoming requests. I have been hinted that the error above is related to some dictionary issue. However as mentioned above I did copy the dictionary.ser file to /usr/local/etc/radiusclient-ng/ Any hints please? Thanks.

3 8

Re: [OpenSER-Users] appending into Via header
by Jayesh Nambiar 16 Jun '08

16 Jun '08

Hi, Ok this is what I am planning to do. I am using Cisco 5350 as SBC after my Openser proxy to relay calls. In cisco there is a good option of matching carrier-ids and relay calls to appropriate carriers. Cisco looks at the x-route-tag parameter or tsp parameter which is appended to the Via header to match the carrier-id. So basically Cisco searches for it in the Via header. Thus I need to put this x-route-tag or tsp parameter in the Via header so that Cisco will parse the carrier-id and process calls according to the carrier-id defined. The x-route-tag= or tsp= values will be fetched from the database which will depend on the called number. Now I tried the following and it works but it gets messed up somewhere near the rport parameter in the Via header and the return responses goes to improper ports. subst('/^Via: .*/Via: $(hdr(Via));tsp=1234\r\n/'); The initial INVITE that I get from the UA is similar to the following (i have pasted only the first two lines as the relevant Via headers are present there): INVITE sip:7050@192.168.2.125 SIP/2.0..Via: SIP/2.0/UDP 192.168.2.21:6221;branch=z9hG4bK-d87543-b9072d1e713a491a-1--d87543-;rport..Max-Forwards: 70..Contact: <sip:1234@192.168.2.21:6221>..To: <sip:7050@192.168.2.125>.. When this INVITE is forwarded to my Cisco it goes as follows: INVITE sip:7050@192.168.2.252 SIP/2.0..Record-Route: <sip:192.168.2.125;lr=on;ftag=cc40082e>..Via: SIP/2.0/UDP 192.168.2.21:6221;branch=z9hG4bK-d87543-b9072d1e713a491a-1--d87543-;rport;tsp=1111..Via: SIP/2.0/UDP 192.168.2.125;branch=z9hG4bKd909.4996e851.0..;rport=6221.Max-Forwards: 69..Contact: <sip:1234@192.168.2.21:6221>..To: <sip:7050@192.168.2.125>.. Now if you take a look at the rport parameter above it is completely messed up. The rport becomes a new header. Can someone help me to overcome this problem. Thanks in advance. -- Jayesh ----- Original Message ---- From: Henning Westerholt <henning.westerholt(a)1und1.de> To: Jayesh Nambiar <voip_freak(a)yahoo.co.in> Cc: users(a)lists.openser.org Sent: Monday, 16 June, 2008 5:38:23 PM Subject: Re: [OpenSER-Users] appending into Via header On Monday 16 June 2008, Jayesh Nambiar wrote: > I do not want it to add two times. I have explained as to where I want to > add it in the Via header. I dont want to add it twice in the message. I > know I can easily add a new header but that does not meet my requirement. I > want it to be appended to the Via header that Openser creates while sending > the call to the PSTN gateway. To be precise, the format has to be like: > Via: > SIP/2.0/UDP 192.168.2.125;branch=z9hG4bK7e7c.877b4352;x-route-tag="cid:1234 >" where 192.168.2..125 is my openser and x-route-tag is what I want to > append in the Via header. Thanks again for your help. Hi Jayesh, i don't know anything about your configuration, so i can't help you that much with regards to your requirements, sorry. Please read the documentation for the textops module. Perhaps the "subst" function is something you could use? Its possible to alter existing header content with it. Henning Bring your gang together. Do your thing. Find your favourite Yahoo! group at http://in.promos.yahoo.com/groups/

1 0

Re: [OpenSER-Users] appending into Via header
by Jayesh Nambiar 16 Jun '08

16 Jun '08

Hi Henning, Thanks for your reply. I do not want it to add two times. I have explained as to where I want to add it in the Via header. I dont want to add it twice in the message. I know I can easily add a new header but that does not meet my requirement. I want it to be appended to the Via header that Openser creates while sending the call to the PSTN gateway. To be precise, the format has to be like: Via: SIP/2.0/UDP 192.168.2.125;branch=z9hG4bK7e7c.877b4352;x-route-tag="cid:1234" where 192.168.2..125 is my openser and x-route-tag is what I want to append in the Via header. Thanks again for your help. w/regards, Jayesh ----- Original Message ---- From: Henning Westerholt <henning.westerholt(a)1und1.de> To: users(a)lists.openser.org Cc: Jayesh Nambiar <voip_freak(a)yahoo.co.in> Sent: Monday, 16 June, 2008 2:57:52 PM Subject: Re: [OpenSER-Users] appending into Via header On Monday 16 June 2008, Jayesh Nambiar wrote: > I had a requirement of appending a text in the VIA header while forwarding > the request to the PSTN gateway. For eg: > When the call is forwarded to a PSTN gateway from my Openser server, I > needed the Via header to be as follows: Via: SIP/2.0/UDP > 192.168.2.125;branch=z9hG4bK7e7c..877b4352;x-route-tag="cid:1234" > x-route-tag="cid:1234" is what I want to append to the Via header that is > going out of my proxy. I do not want to disturb the first Via header that > has come in from the UA, I only want to append the text in the Via header > when the message goes out of Openser proxy. Can someone please guide me on > which module can help me in doing this or what would be the right approach. > Thanks in advance, > -- Jayesh Hi Jayesh, take a look at the textops modules, there are functions present to add/ manipulate header fields. I don't understand why you need to append the same parameter "x-route-tag" two times.. Instead of modifiying the VIA perhaps its possible to just add some new header, e.g. X-Route-Tag, this should be easier. Henning Unlimited freedom, unlimited storage. Get it now, on http://help.yahoo.com/l/in/yahoo/mail/yahoomail/tools/tools-08.html/

2 1

Re: [OpenSER-Users] Radius accounting and Dialog
by David Villasmil 16 Jun '08

16 Jun '08

the script didn't fit, here it is: # # $Id: openser.cfg 1676 2007-02-21 13:16:34Z bogdan_iancu $ # # simple quick-start config script # Please refer to the Core CookBook at http://www.openser.org/dokuwiki/doku.php # for a explanation of possible statements, functions and parameters. # # ----------- global configuration parameters ------------------------ debug=3 # debug level (cmd line: -dddddddddd) fork=yes log_stderror=no # (cmd line: -E) children=10 port=5060 listen=MY.OPENSER.IP.COM disable_dns_blacklist=true # ------------------ module loading ---------------------------------- #set module path mpath="//lib/openser/modules/" # Uncomment this if you want to use SQL database #loadmodule "mysql.so" loadmodule "mysql.so" loadmodule "sl.so" loadmodule "tm.so" loadmodule "rr.so" loadmodule "maxfwd.so" loadmodule "usrloc.so" loadmodule "registrar.so" loadmodule "textops.so" loadmodule "uri.so" loadmodule "uri_db.so" loadmodule "domain.so" loadmodule "permissions.so" #loadmodule "group.so" loadmodule "mi_fifo.so" loadmodule "lcr.so" loadmodule "avpops.so" loadmodule "xlog.so" loadmodule "mediaproxy.so" loadmodule "acc.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "auth.so" loadmodule "auth_db.so" # ----------------- setting module-specific parameters --------------- modparam("mi_fifo", "fifo_name", "/tmp/openser_fifo") modparam("registrar", "received_avp", "$avp(i:42)") modparam("usrloc", "db_mode", 2) modparam("usrloc", "nat_bflag", 4) modparam("auth_db", "calculate_ha1", 1) modparam("auth_db", "password_column", "password") modparam("rr", "enable_full_lr", 1) #modparam("auth_db|permissions|uri_db|usrloc","db_url","mysql://openser:openserrw@localhost /openser") modparam("auth_db|permissions|usrloc|uri_db|domain|lcr|avpops|avp_url","db_url","mysql://openser:password@localhost /openser") modparam("permissions", "db_mode", 1) modparam("permissions", "trusted_table", "trusted") modparam("avpops", "avp_table", "usr_preferences") modparam("mediaproxy","natping_interval",20) modparam("mediaproxy","mediaproxy_socket", "/var/run/mediaproxy/mediaproxy.sock") modparam("mediaproxy","sip_asymmetrics","/etc/openser/sip-clients") modparam("mediaproxy","rtp_asymmetrics","/ect/openser/rtp-clients") modparam("lcr", "contact_avp", "$avp(i:711)") modparam("lcr|tm", "fr_inv_timer_avp", "$avp(i:704)") modparam("lcr", "gw_uri_avp", "$avp(i:709)") modparam("^auth$|lcr", "rpid_avp", "$avp(i:302)") modparam("lcr", "ruri_user_avp", "$avp(i:500)") modparam("lcr", "dm_flag", 25) modparam("acc", "radius_config", "/etc/radiusclient-ng/radiusclient.conf") modparam("acc", "radius_flag", 2) modparam("acc", "radius_missed_flag", 3) modparam("acc", "radius_extra", "User-Name=$Au;Calling-Station-Id=$from;Called-Station-Id=$to;Sip-Translated-Request-URI=$ruri;Sip-RPid=$avp(s:rpid);Source-IP=$si;Source-Port=$sp;Canonical-URI=$avp(s:can_uri);Billing-Party=$avp(s:billing_party);Divert-Reason=$avp(s:divert_reason);X-RTP-Stat=$hdr(X-RTP-Stat);Contact=$hdr(contact);Event=$hdr(event);SIP-Proxy-IP=$avp(s:sip_proxy_ip);ENUM-TLD=$avp(s:enum_tld)") # ------------------------- request routing logic ------------------- # main routing logic route{ # # -- 1 -- Request Validation # if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); exit; }; if (msg:len >= 2048 ) { sl_send_reply("513", "Message too big"); exit; }; # # -- 2 -- Routing Preprocessing # ## Record-route all except Register ## Mark packets with nat=yes ## This mark will be used to identify the request in the loose ## route section if(!is_method("REGISTER")){ record_route(";nat=yes"); }; ##Loose_route packets if (has_totag()) { #sequential request withing a dialog should # take the path determined by record-routing if (loose_route()) { if(method=="BYE") { #Account BYE transactions setflag(2); }; #Check authentication of re-invites if(method=="INVITE" && (!allow_trusted())) { if (!proxy_authorize("","subscriber")) { proxy_challenge("","1"); exit; } else if (!check_from()) { sl_send_reply("403", "Forbidden, use From=ID"); exit; }; }; if(method=="BYE" || method=="CANCEL") { end_media_session(); }; ##Detect requests in the dialog behind NAT and flag with 6 route(1); } else { sl_send_reply("404","Not here"); } exit; } #CANCEL processing if (is_method("CANCEL")) { if (t_check_trans()) { end_media_session(); t_relay(); }; exit; } t_check_trans(); # # -- 3 -- Determine Request Target # if (method=="REGISTER") { route(2); } else { route(3); }; } route[1] { # # -- 4 -- Forward request to target # # Forward statefully t_on_reply("1"); t_on_failure("1"); if (!t_relay()) { sl_reply_error(); }; exit; } route[2] { ## Register request handler if (is_uri_host_local()) { if (!www_authorize("", "subscriber")) { www_challenge("", "1"); exit; }; if (!check_to()) { sl_send_reply("403", "Forbidden"); exit; }; setbflag(6); force_rport(); save("location"); exit; } else if { sl_send_reply("403", "Forbidden"); }; } route[3] { ## Requests handler if (method=="INVITE") { # Account INVITE packets setflag(2); # Account Missed calls setflag(3); # Radius Extra $avp(s:sip_proxy_ip)="MY.OPENSER.IP.COM"; }; if (is_from_local()){ # From an internal domain -> check the credentials and the FROM if(!allow_trusted()){ if (!proxy_authorize("","subscriber")) { proxy_challenge("","0"); exit; } else if(!check_from()) { sl_send_reply("403", "Forbidden, use From=ID"); exit; }; }; #unconditional call forward if(avp_db_load("$ru/username","$avp(s:callfwd)")) { avp_pushto("$ru", "$avp(s:callfwd)"); route(1); exit; } consume_credentials(); #verify aliases, if found replace R-URI. lookup("aliases"); if (is_uri_host_local()) { # -- Inbound to Inbound xlog("L_INFO","OPENSER: INBOUND -> INBOUND ($tU)"); route(10); } else { # -- Inbound to outbound xlog("L_INFO","OPENSER: INBOUND -> OUTBOUND ($tU)"); route(11); }; } else { #From an external domain ->do not check credentials #Verify aliases, if found replace R-URI. lookup("aliases"); if (is_uri_host_local()) { xlog("L_INFO","OPENSER: OUTBOUND -> INBOUND ($tU)"); #-- Outbound to inbound route(12); } else { xlog("L_INFO","OPENSER: OUTBOUND -> OUTBOUND ($tU)"); # -- Outbound to outbound route(13); }; }; } route[4] { # routing to the public network if (!load_gws()) { sl_send_reply("503", "Unable to load gateways"); exit; } if(!next_gw()){ sl_send_reply("503", "Unable to find a gateway"); exit; } t_on_failure("2"); if (!t_relay()) { sl_reply_error(); }; exit; } route[6] { # # -- NAT handling -- # append_hf("P-hint: Route[6]: mediaproxy \r\n"); use_media_proxy(); } route[10] { #from an internal domain -> inbound #Native SIP destinations are handled using the location table #Gateway destinations are handled by regular expressions append_hf("P-hint: inbound->inbound \r\n"); xlog("L_INFO","LOOKING FOR: $tU"); if (uri=~"^sip:55613") { # ECHO TEST xlog("L_INFO","IN ROUTE 613"); route(6); rewritehostport("fwdnat2.pulver.com:5060"); if (!t_relay()) { sl_reply_error(); }; exit; }; if (uri=~"^sip:301") { # ECHO TEST route(6); rewritehostport("blueface.ie"); if (!t_relay()) { sl_reply_error(); }; exit; }; # # if (uri=~"^sip:1[2-9][0-9]{9}@") { # if (is_user_in("credentials","ld")) { # strip(1); # prefix("+1"); # route(6); # route(4); # exit; # } else { # sl_send_reply("403", "No permissions for long distance"); # exit; # }; # }; # # if (uri=~"^sip:011[0-9]*@") { # if (is_user_in("credentials","int")) { # strip(3); # prefix("+"); # route(6); # route(4); # exit; # } else { # sl_send_reply("403", "No permissions for international calls"); # }; # }; if (!lookup("location")) { if (does_uri_exist()) { ## User not registered at this time. ## Use the IP Address of your e-mail server revert_uri(); prefix("u"); rewritehostport("192.168.1.171"); #Use the IP address of your voicemail server route(6); route(1); } else { sl_send_reply("404", "Not Found"); exit; } sl_send_reply("404", "Not Found"); exit; }; route(6); route(1); } route[11] { # from an internal domain -> outbound # Simply route the call outbound using DNS search append_hf("P-hint: inbound->outbound \r\n"); route(1); } route[12] { # From an external domain -> inbound # Verify aliases, if found replace R-URI. lookup("aliases"); if (!lookup("location")) { sl_send_reply("404", "Not Found"); exit; }; route(1); } route[13] { #From an external domain outbound #we are not accepting these calls append_hf("P-hint: outbound->inbound \r\n"); sl_send_reply("403", "Forbidden"); exit; } failure_route[1] { ##-- ##-- If cancelled, exit. ##-- if (t_was_cancelled()) { exit; }; ##-- ##-- If busy send to the e-mail server, prefix the "b" ##-- character to indicate busy. ##-- if (t_check_status("486")) { revert_uri(); prefix("b"); rewritehostport("192.168.1.171"); append_branch(); route(1); exit; }; ##-- ##-- If timeout (408) or unavailable temporarily (480), ##-- prefix the uri with the "u"character to indicate ##-- unanswered and send to the e-mail ##-- sever ##-- if (t_check_status("408") || t_check_status("480")) { revert_uri(); prefix("u"); rewritehostport("192.168.1.171"); append_branch(); route(1); exit; }; } failure_route[2] { if(!next_gw()) { t_reply("503", "Service not available, no more gateways"); exit; }; t_on_failure("2"); t_relay(); } onreply_route[1] { # #-- On-replay block routing -- # append_hf("P-hint: onreply_route|usemediaproxy \r\n"); use_media_proxy(); exit; }

4 6

[OpenSER-Users] Proxy Cache Register
by Julien mangeard 16 Jun '08

16 Jun '08

Hi, I don't known if it's possible but I try to use Openser for caching REGISTER requests. I have make a schema with the ideal registration flow : http://img225.imageshack.us/img225/930/registerlj0.png. What do you think about it ? Can I make that with the existing module ? Best Regards, -- Julien Mangeard 06.84.39.57.78

2 2

[OpenSER-Users] appending into Via header
by Jayesh Nambiar 16 Jun '08

16 Jun '08

Hi All, I had a requirement of appending a text in the VIA header while forwarding the request to the PSTN gateway. For eg: When the call is forwarded to a PSTN gateway from my Openser server, I needed the Via header to be as follows: Via: SIP/2.0/UDP 192.168.2.125;branch=z9hG4bK7e7c.877b4352;x-route-tag="cid:1234" x-route-tag="cid:1234" is what I want to append to the Via header that is going out of my proxy. I do not want to disturb the first Via header that has come in from the UA, I only want to append the text in the Via header when the message goes out of Openser proxy. Can someone please guide me on which module can help me in doing this or what would be the right approach. Thanks in advance, -- Jayesh Bring your gang together. Do your thing. Find your favourite Yahoo! group at http://in.promos.yahoo.com/groups/

2 1

[Serusers] xlite registration error 500 : Server Internal error
by muhammad akl 15 Jun '08

15 Jun '08

hey all , my problem is a bit strange . i have succeeded in compiling ser 0.9.7 on solaris 10 x86 arch and the compilation process went smoothly without any troubles ( i mean the last time i compiled ser ) after that i have configured Ser to work with MySQL 5 and aslo there werent any problems happened the problem is : i have added some users in the subscriber table to check that ser is preconfigured correctly using x-lite softphone and also there weren't any problems for the first time i registered with xlite , the problem appears when i unregistered the account and leave SER running for several hours without any user'registration ( about 10 hrs SER is idle or more ) So my question is : is there any pre-determined period that ser shouldnt be idle ? or it there any configuration responsible for determining the max time that SER can rest in idle status ? the error message that appears in the x-lite winow is " Registration error 500 : Server internal Error " Note : when i do restarting SER all things are fine and i can be able to registration without any error , the error appear when i do unregistration and SER is idle thanks in advance

3 3

[OpenSER-Users] tls certificate name mismatch
by Jeremy George 15 Jun '08

15 Jun '08

Hello all, I'm using Countpath softphones and openser 1.3.0-tls with this configuration: disable_tls = 0 listen = tls:xx.xx.xx.xx:5061 tls_verify_server = 0 tls_verify_client = 0 tls_require_client_certificate = 0 tls_method = TLSv1 tls_certificate = "/usr/local/etc/openser/tls/user/user-cert.pem" tls_private_key = "/usr/local/etc/openser/tls/user/user-privkey.pem" tls_ca_list = "/usr/local/etc/openser/tls/user/user-calist.pem" I ran "openserctl tls rootCA" and "openserctl tls user". And, scp'd and imported cacert.pem into the trusted certificate store on a windows xp machine. It's worked last fall when I was experimenting, but now I'm getting: "registration error: 503 - certificate name mismatch" I've looked through the mailing list and can't find a thread on this. Am I the only one? Thoughts? Thanks for any and all help. - Jeremy

2 1

← Newer
1
...
9
10
11
12
13
14
15
...
24
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users June 2008