sr-users December 2016

sr-users@lists.kamailio.org

71 participants
104 discussions

Asterisk Security Advisory (AST-2016-009)
by Matthew Jordan 09 Dec '16

09 Dec '16

Hey all - The Asterisk project just released a security advisory for a security vulnerability in which Asterisk using chan_sip with a proxy can allow for unauthenticated calls. This affects all supported versions of Asterisk (11, 13, 14). Since that may be relevant to those on this mailing list who are not also on the asterisk-users mailing list, I thought it prudent to mention it here as well. A description of the vulnerability follows: Description The chan_sip channel driver has a liberal definition for whitespace when attempting to strip the content between a SIP header name and a colon character. Rather than following RFC 3261 and stripping only spaces and horizontal tabs, Asterisk treats any non-printable ASCII character as if it were whitespace. This means that headers such as Contact\x01: will be seen as a valid Contact header. This mostly does not pose a problem until Asterisk is placed in tandem with an authenticating SIP proxy. In such a case, a crafty combination of valid and invalid To headers can cause a proxy to allow an INVITE request into Asterisk without authentication since it believes the request is an in-dialog request. However, because of the bug described above, the request will look like an out-of-dialog request to Asterisk. Asterisk will then process the request as a new call. The result is that Asterisk can process calls from unvetted sources without any authentication. If you do not use a proxy for authentication, then this issue does not affect you. If your proxy is dialog-aware (meaning that the proxy keeps track of what dialogs are currently valid), then this issue does not affect you. If you use chan_pjsip instead of chan_sip, then this issue does not affect you. The announcement can be seen here: http://lists.digium.com/pipermail/asterisk-announce/2016-December/000662.ht… Thanks again to Walter Doekes for reporting the vulnerability and providing the patch to fix it. Matt -- Matthew Jordan Digium, Inc. | CTO 445 Jan Davis Drive NW - Huntsville, AL 35806 - USA Check us out at: http://digium.com & http://asterisk.org

3 2

IP-based security + registrations
by JLL 09 Dec '16

09 Dec '16

Hello, I would like to know if anyone can help me accomplish the following: I have a Kamailio server (4.2.3 on CentOS 7 x64) and 5 Asterisk servers (1.6.2.13 . I know, it's old but we have a lot of custom modules written for it). I need for certain IP's to be "trusted" (able to send INVITE's to K from the internet - these would be our origination providers), but any other IP's that come along would need to register before sending an INVITE (the REGISTER would be sent to any of the Asterisk servers for validation, if this is possible). Can this be done? Thank you!

2 1

Siremis manual to learn
by Saranga Nagesh 08 Dec '16

08 Dec '16

Hi, I have installed kamailio and Siremis in centos but I don't know how to use Siremis. Can you forward me manual or link to learn about Siremis. Thanks & Best Regards, Nagesh Saranga

2 1

Action: restructuring the source code tree
by Daniel-Constantin Mierla 07 Dec '16

07 Dec '16

Hello, today I am going to do the restructuring of the source code tree as discussed previously. - http://lists.sip-router.org/pipermail/sr-dev/2016-December/037715.html If anyone has patches to push using existing structure, do it before 12:00UTC today. If you need more time, write to sr-dev and let's see how we can find an easy solution. Once I finish with the restructuring, I will send another notification, from that moment the commits can go on as usual. Cheers, Daniel -- Daniel-Constantin Mierla www.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio World Conference - May 8-10, 2017 - www.kamailioworld.com

1 1

Send SIP Info within a dialog using $uac_req(method)="INFO"
by Jonathan Hunter 07 Dec '16

07 Dec '16

Hi Guys, Is it still the case that when using uac_req_send, you cant send withing a specific dialog?I can modify call-id, but I presume tags may be more of a problem?See old post below from 2015; > I am familiar with uac_req_send. but how do I send it with in a > specific dialog and with data in the INFO req ? sending a new request inside a dialog is not possible with uac_req_send(). It is not easy over all because you change the sequence order (CSeq value). Practically, you need to track how many requests you sent from the middle to update (and restore in reply) when caller or callee sends a new request. dialog module can track changes in CSeq for requests sent to callee, being used now for authentication of INVITE to another provider, when Kamailio adds the credentials. But for more you would need to extend the dialog module. I just need to send a SIP info within an established dialog to stop some function up stream, so wondered if this is still a blocker? Many thanks Jon

2 40

Error using Siremis 4.3.0
by Diogenes Aviles 07 Dec '16

07 Dec '16

I'm using Siremis 4.3.0 and PHP7. Installation was OK, but running siremis I have some problems in Administration-User Management. When I select an user there is the following error: [2016-12-06 23:18:47 (GMT)] An exception occurred while executing this script: Error message: #256, Unable to location template file system_internal_error.tpl. Script name and line number of error: /var/www/siremis-4.3.0/openbiz/bin/Resource.php:283 *function:* errorHandler ( 256, "Unable to location template file system_internal_error.tpl.", "/var/www/siremis-4.3.0/openbiz/bin/Resource.php", 283, Array(11) ) @ /var/www/siremis-4.3.0/openbiz/bin/sysheader.inc 117 *function:* userErrorHandler ( 256, "Unable to location template file system_internal_error.tpl.", "/var/www/siremis-4.3.0/openbiz/bin/Resource.php", 283, Array(11) ) @ *function:* trigger_error ( "Unable to location template file system_internal_error.tpl.", 256 ) @ /var/www/siremis-4.3.0/openbiz/bin/Resource.php 283 *function:* getTplFileWithPath ( "system_internal_error.tpl", "email" ) @ /var/www/siremis-4.3.0/openbiz/bin/BizSystem.php 544 *function:* getTplFileWithPath ( "system_internal_error.tpl", "email" ) @ /var/www/siremis-4.3.0/siremis/modules/service/userEmailService.php 108 *function:* SystemInternalErrorEmail ( Array(2), Null ) @ /var/www/siremis-4.3.0/siremis/modules/common/form/ErrorForm.php 34 *function:* Report ( ) @ /var/www/siremis-4.3.0/openbiz/bin/BizController.php 310 *function:* invoke ( ) @ /var/www/siremis-4.3.0/openbiz/bin/BizController.php 110 Regards -- Diogenes

2 1

Getting destination ip
by David Villasmil 06 Dec '16

06 Dec '16

Hello Guys, I'm wondering how do I get destination IP on a reply? Regards, David Villasmil email: david.villasmil.work(a)gmail.com phone: +34669448337 ᐧ

3 7

Re: [SR-Users] Local messages are malformed in Kamailio 4.4.X
by g.Helio 06 Dec '16

06 Dec '16

2 1

Limiting Registration Contacts
by Colin Morelli 05 Dec '16

05 Dec '16

Hey all, I know Kamailio's registrar module has a max_contacts parameter that will limit the number of active contacts for an AOR. However, is there any mechanism to control what happens when that number is hit? When using a web client where every page refresh registers a new contact with Kamailio, it would be useful to automatically roll off the oldest registrations and replace to make room for the new ones. I know this can be manually accomplished with sqlops, but I was hoping something like this already existed. Best, Colin

3 5

INFO: modules purple and iptrtpproxy moved to obsolete folder
by Daniel-Constantin Mierla 05 Dec '16

05 Dec '16

Hello, be aware that the modules purple and iptrtpproxy were moved to obsolete folder. They were not compiling for several years and nobody showed interest in updating them. If anyone wast to rescue them, she/he is welcome to get them back and upgrade the code to work with current versions of their dependencies. Cheers, Daniel -- Daniel-Constantin Mierla www.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio World Conference - May 8-10, 2017 - www.kamailioworld.com

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users December 2016