sr-users August 2019

sr-users@lists.kamailio.org

65 participants
100 discussions

exit stop procesing or not after a conditional? based on "exit" core docs seems does not explain behaviour
by PICCORO McKAY Lenz 26 Aug '19

26 Aug '19

in my kamailio-asterisk integration i have a exit after the authentication logic, BUT; there's another conditional after the "exit" sentence, so my ask, if there's a exit in that piece of code .. that next conditional will not be executed? Docs seems said "stop execution of script" so all the rest of the logic in file will not be routed? The documentation seems does not explain in good behavior what happened or the kamailio-asterisk wiki page does not have good explanations for that! it's that an error? https://www.kamailio.org/wiki/cookbooks/4.3.x/core#exit - - ``` if (from_uri==myself) {#!ifdef WITH_ASTERISK if (!proxy_authorize("$fd", "sipusers")) {#!else if (!proxy_authorize("$fd", "subscriber")) {#!endif proxy_challenge("$fd", "0"); exit; } if (is_method("PUBLISH")) { if ($au!=$tU) { sl_send_reply("403","Forbidden auth ID"); exit; } } else { if ($au!=$fU) { sl_send_reply("403","Forbidden auth ID"); exit; } } consume_credentials(); # caller authenticated } else { # caller is not local subscriber, then check if it calls # a local destination, otherwise deny, not an open relay here if (!uri==myself) { sl_send_reply("403","Not relaying"); exit; } } } #!endif return; } ``` 8:52 am Lenz McKAY Gerardo (PICCORO) http://qgqlochekone.blogspot.com

2 1

reply cannot be forwarded - no 2nd via
by Ryan McEvoy 25 Aug '19

25 Aug '19

Hello, I have been having an issue using kamailio to load balance to a SIP/MRCP server. I believe that the issue actually lies with the reply being sent from the final recipient, but I wanted to be sure that I understood the problem and to see if there were any possible solutions within Kamailio. I am using the dispatcher module to dispatch SIP INVITES to media resources, in this case I am just using a single host in a single dispatcher group. The configuration that I have has worked just fine for other SIP/MRCP servers, which is why I think the issue is with this target in particular. The INVITE is routed correctly and contains the headers that it should. The invite comes originally from a Freeswitch, arrives at Kamailio, who should then dispatch to a host in the group. x.x.x.x:4901 is Kamailio x.x.x.x:8090 is Freeswitch y.y.y.y:8000 is the final target This is the invite, as received by the final target after dispatched via Kamailio INVITE sip: x.x.x.x:4901 SIP/2.0 Record-Route: <sip: x.x.x.x:4901;transport=tcp;lr> Via: SIP/2.0/TCP x.x.x.x:4901;branch=z9hG4bK3a9a.7f9a4b588cd75108cfea9a2bd9ffa829.0;i=3 Via: SIP/2.0/TCP x.x.x.x:8090;branch=z9hG4bKStXp06Sv7jU7S Max-Forwards: 69 From: <sip: x.x.x.x:8090>;tag=4gHgNcNUDjvFQ To: <sip: x.x.x.x:4901> Call-ID: 6f2a0e9c-3f9e-1238-2aa9-005056854777 CSeq: 8692231 INVITE User-Agent: tts Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, MESSAGE, SUBSCRIBE, NOTIFY, REFER, UPDATE Supported: timer, 100rel Content-Type: application/sdp Content-Disposition: session Content-Length: 281 v=0 o=IPSoft 3367790083977298880 2789991278648035021 IN IP4 x.x.x.x s=- c=IN IP4 x.x.x.x t=0 0 m=application 9 TCP/MRCPv2 1 a=setup:active a=connection:existing a=resource:speechsynth a=cmid:1 m=audio 32038 RTP/AVP 0 a=rtpmap:0 PCMU/8000 a=recvonly a=mid:1 The reply that the server sends back appears to be missing a second Via header, which is preventing Kamailio for routing it correctly (based on the error message from core/forward.c) This is the reply sent by the target destination SIP/2.0 200 OK Via: SIP/2.0/TCP x.x.x.x:8090;branch=z9hG4bKStXp06Sv7jU7S To: <sip: x.x.x.x:4901>;tag=ndszib3k From: <sip: x.x.x.x:8090>;tag=4gHgNcNUDjvFQ Call-ID: 6f2a0e9c-3f9e-1238-2aa9-005056854777 CSeq: 8692231 INVITE Contact: "Voiceware MRCP Server" <sip:vwmrcp@ y.y.y.y:8000;transport=tcp> Content-Type: application/sdp Content-Length: 324 v=0 o=- 1566492047 1566492047 IN IP4 y.y.y.y s=Voiceware MRCP Server 2.15.0.7. Dec 28 2018 c=IN IP4 y.y.y.y t=0 0 m=application 8002 TCP/MRCPv2 1 a=channel:12951125463@speechsynth a=connection:new a=setup:passive a=cmid:1 m=audio 30158 RTP/AVP 0 a=rtpmap:0 pcmu/8000 a=sendonly a=ptime:20 a=mid:1 It is correct that there should still be a 2nd Via header in the 200 OK reply from the target host, right? If so, is there anything else that can be done in Kamailio to handle this, or is this mrcp server simply not complying properly with SIP? There’s no funky natting between these hosts or anything like that. Thanks in advance!

2 1

Wrong ACL to Provider kamailio+asterisk+uac
by Zhan Bazarov 25 Aug '19

25 Aug '19

Hello! Please, is it possible to change from/to headers in ACK message to provider? this is exactly our case, please, look it when u get a chance. http://sip-router.1086192.n5.nabble.com/Wrong-ACK-to-Provider-td130050.html…

2 13

set_rtpengine_set question
by Juha Heinanen 24 Aug '19

24 Aug '19

When set_rtpengine_set() is called with two parameters before rtpengine_offer(), e.g. set_rtpengine_set("1", "2"); rtpengine_offer(); it was not clear to me from rtpengine README, if the sets need to reversed when set_rtpengine_set() is called before rtpengine_answer(), i.e., set_rtpengine_set("2", "1"); rtpengine_answer(); or can the order of the sets be the same as it was in case of rtpengine_offer()? -- Juha

1 1

Dealing with optional SRTP
by Mark Boyce 24 Aug '19

24 Aug '19

Hi all (Using Kamailio + RTPEngine, both current stable versions) Just wondering what current best practice is for dealing with “optional SRTP” such as those generated by Yealink devices. (I know this breaks the RFC but lots of things seem to use this method.) Where the device SDP message looks like; m=audio 50004 RTP/AVP 8 97 101 a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:uhJOWOXPuzMeBmrbx2wAKohuveAvZeMEJTzfE7GT a=crypto:2 AES_CM_128_HMAC_SHA1_32 inline:yF+EhR3RtxSDCGtLCnEAl3Zrdut4b8cfFQP+hFqf An unencrypted RTP/AVP media line but with crypto lines showing that the device will support SRTP encryption but it is not mandatory. The system of offer SRTP and try and catch on not supported/acceptable here fail feels a little clumsy and relies on how gracefully the device sends “not acceptable here”. I’m wondering if I just short cut it and say that if a device offers a acceptable crypto line then Kamailio sends back a SAVP response. Naturally this question is then closely followed by how to do optional SRTP invites originating from Kamailio without just directly manipulating lines? Feels like there should be an RTPEngine setting for Optional? RTP/AVP+SAVP ? Thoughts? Mark

1 0

Kamailio as an Outbound Proxy - Strange Sip Flow
by Diogo Hartmann 23 Aug '19

23 Aug '19

Hello Kamailio experts, We have a Kamailio as outbound proxy in front of Asterisks PjSIP. There is a strange behavior after 200 OK: - ACK comes from Asterisk Public IP instead of coming from the internal IP address. - BYE can not be processed (404 not here) SNGREP print attached. Has anyone ever experienced this? I can provide more information if needed, just let me know what info. Thanks! Diogo Hartmann

2 5

Cant finish call
by przeqpiciel 23 Aug '19

23 Aug '19

Hi all, I am totally new with Kamailio but i have needs to build small cluster of Asterisk. Right now I could succesfully register to asterisk via kamailio and even make a call to hear tt-weasels but Asterisk cant close call My infrastructure diagram is here http://www.asciidraw.com/#Draw6816041626716434245/903175935 This is what probably I need is to know how to tell to Asterisk that send BYE to private IP of Kamailio instead public IP of Kamailio, am I right ?

1 0

TCP: Strange Device Behaviour
by Carsten Bock 23 Aug '19

23 Aug '19

Hi, I have a device here, which does some sort of strange things: I have SIP Message, e.g. with a length of 1100 Bytes and the devices adds "0" to the end to meet the MTU of the network (for a single TCP frame), some sort of TCP padding. The following TCP Frame contains only the next message. Looking at the trace in Wireshark, sngrep or similar, all of them try to re-assemble the next message in the TCP stream, but however don't decode them as SIP due to to first couple of zero's in the message. Looking at Kamailio, it seems not to have any issues with this and decodes/parses the message properly (they show up on Homer properly); however it also forwards the message INCLUDING the first couple of zero's even on UDP. To make it complitely irritating, the phone itself would ignore such packets, if we would forward them to the phone with starting zeros. Has anyone seen anything like this and is it standards-compliant? Any proper and easy way to get rid of the starting "zero's" from a message before forwarding these messages? I could always "hack" something into src/core/tcp_read.c, but I wonder if there is already a proper way? Any ideas anyone? Thanks, Carsten -- Carsten Bock I Managing Director ng-voice GmbH Millerntorplatz 1 I 20359 Hamburg I Germany www.ng-voice.com Mobile +49 (0)179-20 21 244 I Direct +49 (0)40-52 47 593-40 I Fax +49 (0)40-52 47 593-99 Sitz der Gesellschaft: Hamburg Registergericht: Amtsgericht Hamburg, HRB 120189 Geschäftsführer: Carsten Bock, Dr. David Bachmann Ust-ID: DE279344284 Hier finden Sie unsere handelsrechtlichen Pflichtangaben: http://www.ng-voice.com/imprint/

1 0

About STIR/SHAKEN - Caller Identity
by Daniel-Constantin Mierla 23 Aug '19

23 Aug '19

Hello, at couple of events I participated during the past few months, I was asked about support of STIR/SHAKEN (caller identity authentication/verification), which is a hot topic these days at least in USA, aiming to combat "fraudulent" robo-calling. Therefore I thought of share some details with everyone in the community about the state in Kamailio, writing to both devs and users, the information being relevant for everyone. We already have the (related) module named auth_identity, available since 2008 (iirc): - https://www.kamailio.org/docs/modules/stable/modules/auth_identity.html But it implements the previous iteration of the specs for caller identity, respectively RFC 4474: - https://tools.ietf.org/html/rfc4474 However, that RFC is obsoleted by 8224 (the latest core specs for STIR/SHAKEN): - https://tools.ietf.org/html/rfc8224 Then, there are also RFCs 8225 and 8226 to add to the core specs. Should anyone be interested to implement STIR/SHAKEN specs in a modules, I would suggest to start from auth_identity -- might not be much work to update it to become conform with latest specs (a new module can be created, of course, even when starting from auth_identity). However, these specs are about signing the SIP request (the INVITE) with special PKI certificate. It can be done easily with embedded scripts such as Lua or Python (inline execution in native kamailio.cfg or using kemi scripts). At Kamailio World 2019, one of the participants I discussed with told me they already implemented using Lua. That's it for a starting point, if anyone wants to discuss more, just reply to sr-users and add your comments or ask the questions. If someone wants to go ahead and work on a C module, announce yourself to avoid duplicate work of others, and use sr-dev if you need assistance on module development. Cheers, Daniel -- Daniel-Constantin Mierla -- www.asipto.com www.twitter.com/miconda -- www.linkedin.com/in/miconda

2 2

Unable to start kamailio_pcscf.service
by Jack R 23 Aug '19

23 Aug '19

1. Followed steps from Step # 3 to Step # 16 : https://github.com/open5gs/nextepc/blob/master/docs/_docs/guide/04-setting-… 2. When I run last command >systemctl start kamailio_icscf kamailio_pcscf kamailio_scscfthe root@ubuntu18-04:/etc/init.d# *systemctl start kamailio_icscf kamailio_pcscf kamailio_scscf* Job for kamailio_pcscf.service failed because the control process exited with error code. See "systemctl status kamailio_pcscf.service" and "journalctl -xe" for details. 3. All services start but not kamailio_pcscf: root@ubuntu18-04:/etc/init.d# *systemctl status kamailio_pcscf.service* ● kamailio_pcscf.service - LSB: Start the Kamailio SIP proxy server Loaded: loaded (/etc/init.d/kamailio_pcscf; generated) Active: failed (Result: exit-code) since Mon 2019-08-19 09:05:30 UTC; 45min ago Docs: man:systemd-sysv-generator(8) Process: 52271 ExecStart=/etc/init.d/kamailio_pcscf start (code=exited, status=1/FAILURE) Aug 19 09:05:30 ubuntu18-04 kamailio_pcscf[52271]: 0(52294) INFO: pv [pv_shv.c:60]: shvar_init_locks(): locks array size 16 Aug 19 09:05:30 ubuntu18-04 kamailio_pcscf[52271]: ERROR: bad config file (1 errors) Aug 19 09:05:30 ubuntu18-04 kamailio_pcscf[52271]: 0(52294) WARNING: <core> [core/mem/q_malloc.c:480]: qm_free(): WARNING: free(0) called from cdp_avp: cdp_avp_mod.c: cdp Aug 19 09:05:30 ubuntu18-04 kamailio_pcscf[52271]: 0(52294) INFO: cdp [cdp_mod.c:255]: cdp_exit(): CDiameterPeer child stopping ... Aug 19 09:05:30 ubuntu18-04 kamailio_pcscf[52271]: 0(52294) INFO: cdp [cdp_mod.c:257]: cdp_exit(): ... CDiameterPeer child stopped Aug 19 09:05:30 ubuntu18-04 kamailio_pcscf[52271]: 0(52294) INFO: <core> [core/sctp_core.c:53]: sctp_core_destroy(): SCTP API not initialized Aug 19 09:05:30 ubuntu18-04 kamailio_pcscf[52271]: * Aug 19 09:05:30 ubuntu18-04 systemd[1]: kamailio_pcscf.service: Control process exited, code=exited status=1 Aug 19 09:05:30 ubuntu18-04 systemd[1]: kamailio_pcscf.service: Failed with result 'exit-code'. Aug 19 09:05:30 ubuntu18-04 systemd[1]: Failed to start LSB: Start the Kamailio SIP proxy server. lines 1-16/16 (END) Please advise. Thanks and Regards.

2 10

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users August 2019