sr-users January 2021

sr-users@lists.kamailio.org

58 participants
67 discussions

Contact header not removed properly Getting some junks
by Devang Dhandhalya 07 Jan '21

07 Jan '21

in my scenario call coming from sbc to kamailio proxy and we route to pbx server in that when kamailio proxy get the call at that time i am removing Contact header using remove_hf("Contact") and adding contact Header using append_hf("$uac_req(hdrs)") for route to PBX server . in that signaling i am getting modified Contact header but old contact header not removed properly some junks are remain in the signaling scenario : SBC ---------> Kamailio proxy ------> PBX before using remove_hf("Contact") INVITE sip:user2@ <sip%3A5678(a)opensips.org>domain.org;transport=UDP SIP/2.0 Via: SIP/2.0/UDP 10.212.xxx.xxx:port;branch=z9hG4bK-524287-1---8c5ac8642f321a9e Max-Forwards: 70 Contact: <sip:user1@10.212.xxx.xxx:39931;transport=UDP> To: <sip:user2@ <sip%3A5678(a)opensips.org>domain.org;transport=UDP> From: <sip:user1@ <sip%3A1234(a)opensips.org>domain.org ;transport=UDP>;tag=891fd646 Call-ID: t9Ff-fCrin_VN1IO9Xf1mA.. CSeq: 2 INVITE Content-Type: application/sdp Proxy-Authorization: Digest username="user1",realm="domain.org <http://opensips.org/> ",nonce="5ff5a660afc72502212b4a611bb0d689efadafab",uri="sip:user2@domain.org <sip%3A5678(a)opensips.org>;transport=UDP",response="f926e3742cbdcb8c68ea9b5 82ac2dc",cnonce="9b3276d6d37aaa6107a835df8e5b3a87",nc=00000001,qop=auth,algorithm=MD5 User-Agent: Z 3.15.40006 rv2.8.20 Allow-Events: presence, kpml, talk Content-Length: 243 v=0 o=Z 0 0 IN IP4 10.212.xxx.xxx s=Z c=IN IP4 10.212.xxx.xxx t=0 0 m=audio 8000 RTP/AVP 3 110 8 0 97 101 a=rtpmap:110 speex/8000 a=rtpmap:97 iLBC/8000 a=fmtp:97 mode=30 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=sendrecv after using remove-hf("Contact") function removing contact header but some junks are left and that eats next To header line and breaks Invite packet INVITE sip:user2@domain.org:;transport=UDP SIP/2.0 Record-Route: <sip:172.xx.xx.xxx;lr=on;ftag=891fd646;vst=AAAAAFFTQVkuCENVXUEpHwNLAQEOSwdcDhwUcG9ydD1VRFA-;vsf=AAAAAFVCQ1U0ChwlAQMMHgBHHwFJVAYVYW5zcG9ydD1VRFA-> Via: SIP/2.0/UDP 172.xx.xx.xxx;branch=z9hG4bKbe4c.9743b885ad3452287530994a2cad6e50.0 Via: SIP/2.0/UDP 10.212.xxx.xxx:39931;rport=39931;received=172.xx.xx.x;branch=z9hG4bK-524287-1---8c5ac8642f321a9e Max-Forwards: 69 sip:user1@172.xx.xx.x:39931;transport=UDPTo: <sip:user2@domain.org <sip%3Adevang3032(a)opensips.org>> From: <sip:user1@domain.org <sip%3Adppatel(a)opensips.org>>;tag=891fd646 Call-ID: t9Ff-fCrin_VN1IO9Xf1mA.. CSeq: 2 INVITE Content-Type: application/sdp User-Agent: Z 3.15.40006 rv2.8.20 Allow-Events: presence, kpml, talk Content-Length: 534 Contact: <sip:user2@172.xx.xx.xxx:5060 <http://sip:dppatel@172.16.16.163:5060/>> v=0 o=Z 0 0 IN IP4 10.212.xxx.xxx s=Z c=IN IP4 172.xx.xx.xxx t=0 0 m=audio 11210 RTP/AVP 3 110 8 0 97 101 a=rtpmap:3 GSM/8000 a=rtpmap:110 speex/8000 a=rtpmap:8 PCMA/8000 a=rtpmap:0 PCMU/8000 a=rtpmap:97 iLBC/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:97 mode=30 a=fmtp:101 0-16 a=sendrecv a=rtcp:11211 a=ice-ufrag:lzjregPe a=ice-pwd:RtA9x3jUWk4yNpJlzPL60nsRck a=candidate:LhtmUSbPt9BJs4ZC 1 UDP 2130706431 172.xx.xx.xxx 11210 typ host a=candidate:LhtmUSbPt9BJs4ZC 2 UDP 2130706430 172.xx.xx.xxx 11211 typ host As you can see Contact header is gone but sip:1234@172.xx.xx.x:39931;transport=UDP part left before To header . and its breake invite packet . Any suggestion will be highly appreciated. -- *Disclaimer* In addition to generic Disclaimer which you have agreed on our website, any views or opinions presented in this email are solely those of the originator and do not necessarily represent those of the Company or its sister concerns. Any liability (in negligence, contract or otherwise) arising from any third party taking any action, or refraining from taking any action on the basis of any of the information contained in this email is hereby excluded. *Confidentiality* This communication (including any attachment/s) is intended only for the use of the addressee(s) and contains information that is PRIVILEGED AND CONFIDENTIAL. Unauthorized reading, dissemination, distribution, or copying of this communication is prohibited. Please inform originator if you have received it in error. *Caution for viruses, malware etc.* This communication, including any attachments, may not be free of viruses, trojans, similar or new contaminants/malware, interceptions or interference, and may not be compatible with your systems. You shall carry out virus/malware scanning on your own before opening any attachment to this e-mail. The sender of this e-mail and Company including its sister concerns shall not be liable for any damage that may incur to you as a result of viruses, incompleteness of this message, a delay in receipt of this message or any other computer problems.

2 1

about Contact Header Junks
by Devang Dhandhalya 07 Jan '21

07 Jan '21

in my requirement call coming from sbc to kamailio proxy and we route to pbx server in that when kamailio proxy get the call at that time i am removing Contact header using remove_hf("Contact") and adding contact Header using append_hf("$uac_req(hdrs)") for route to PBX server . in that signaling i am getting modified Contact header but old contact header not removed properly some junks are remain in the signaling scenario : SBC ---------> Kamailio proxy ------> PBX before using remove_hf("Contact") INVITE sip:user2@ <sip%3A5678(a)opensips.org>domain.org;transport=UDP SIP/2.0 Via: SIP/2.0/UDP 10.212.xxx.xxx:port;branch=z9hG4bK-524287-1---8c5ac8642f321a9e Max-Forwards: 70 Contact: <sip:user1@10.212.xxx.xxx:39931;transport=UDP> To: <sip:user2@ <sip%3A5678(a)opensips.org>domain.org;transport=UDP> From: <sip:user1@ <sip%3A1234(a)opensips.org>domain.org ;transport=UDP>;tag=891fd646 Call-ID: t9Ff-fCrin_VN1IO9Xf1mA.. CSeq: 2 INVITE Content-Type: application/sdp Proxy-Authorization: Digest username="user1",realm="domain.org <http://opensips.org> ",nonce="5ff5a660afc72502212b4a611bb0d689efadafab",uri="sip:user2@domain.org <sip%3A5678(a)opensips.org>;transport=UDP",response="f926e3742cbdcb8c68ea9b5 82ac2dc",cnonce="9b3276d6d37aaa6107a835df8e5b3a87",nc=00000001,qop=auth,algorithm=MD5 User-Agent: Z 3.15.40006 rv2.8.20 Allow-Events: presence, kpml, talk Content-Length: 243 v=0 o=Z 0 0 IN IP4 10.212.xxx.xxx s=Z c=IN IP4 10.212.xxx.xxx t=0 0 m=audio 8000 RTP/AVP 3 110 8 0 97 101 a=rtpmap:110 speex/8000 a=rtpmap:97 iLBC/8000 a=fmtp:97 mode=30 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=sendrecv after using remove-hf("Contact") function removing contact header but some junks are left and that eats next To header line and breaks Invite packet INVITE sip:user2@domain.org:;transport=UDP SIP/2.0 Record-Route: <sip:172.xx.xx.xxx;lr=on;ftag=891fd646;vst=AAAAAFFTQVkuCENVXUEpHwNLAQEOSwdcDhwUcG9ydD1VRFA-;vsf=AAAAAFVCQ1U0ChwlAQMMHgBHHwFJVAYVYW5zcG9ydD1VRFA-> Via: SIP/2.0/UDP 172.xx.xx.xxx;branch=z9hG4bKbe4c.9743b885ad3452287530994a2cad6e50.0 Via: SIP/2.0/UDP 10.212.xxx.xxx:39931;rport=39931;received=172.xx.xx.x;branch=z9hG4bK-524287-1---8c5ac8642f321a9e Max-Forwards: 69 sip:user1@172.xx.xx.x:39931;transport=UDPTo: <sip:user2@domain.org <sip%3Adevang3032(a)opensips.org>> From: <sip:user1@domain.org <sip%3Adppatel(a)opensips.org>>;tag=891fd646 Call-ID: t9Ff-fCrin_VN1IO9Xf1mA.. CSeq: 2 INVITE Content-Type: application/sdp User-Agent: Z 3.15.40006 rv2.8.20 Allow-Events: presence, kpml, talk Content-Length: 534 Contact: <sip:user2@172.xx.xx.xxx:5060 <http://sip:dppatel@172.16.16.163:5060>> v=0 o=Z 0 0 IN IP4 10.212.xxx.xxx s=Z c=IN IP4 172.xx.xx.xxx t=0 0 m=audio 11210 RTP/AVP 3 110 8 0 97 101 a=rtpmap:3 GSM/8000 a=rtpmap:110 speex/8000 a=rtpmap:8 PCMA/8000 a=rtpmap:0 PCMU/8000 a=rtpmap:97 iLBC/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:97 mode=30 a=fmtp:101 0-16 a=sendrecv a=rtcp:11211 a=ice-ufrag:lzjregPe a=ice-pwd:RtA9x3jUWk4yNpJlzPL60nsRck a=candidate:LhtmUSbPt9BJs4ZC 1 UDP 2130706431 172.16.16.163 11210 typ host a=candidate:LhtmUSbPt9BJs4ZC 2 UDP 2130706430 172.16.16.163 11211 typ host As you can see Contact header is gone but sip:1234@172.xx.xx.x:39931;transport=UDP part left before To header . and its breake invite packet . Any suggestion will be highly appreciated. -- *Disclaimer* In addition to generic Disclaimer which you have agreed on our website, any views or opinions presented in this email are solely those of the originator and do not necessarily represent those of the Company or its sister concerns. Any liability (in negligence, contract or otherwise) arising from any third party taking any action, or refraining from taking any action on the basis of any of the information contained in this email is hereby excluded. *Confidentiality* This communication (including any attachment/s) is intended only for the use of the addressee(s) and contains information that is PRIVILEGED AND CONFIDENTIAL. Unauthorized reading, dissemination, distribution, or copying of this communication is prohibited. Please inform originator if you have received it in error. *Caution for viruses, malware etc.* This communication, including any attachments, may not be free of viruses, trojans, similar or new contaminants/malware, interceptions or interference, and may not be compatible with your systems. You shall carry out virus/malware scanning on your own before opening any attachment to this e-mail. The sender of this e-mail and Company including its sister concerns shall not be liable for any damage that may incur to you as a result of viruses, incompleteness of this message, a delay in receipt of this message or any other computer problems.

2 1

Dispatcher SNI Questions
by Tim Chubb 06 Jan '21

06 Jan '21

Hi All Is it possible to explicitly define the tls cert to be used per destination by dispatcher? I'm attempting to integrate with a service that requires domain name presented to match that of the cert. Where the use of dispatcher is probably not as intended anyway as it targets the same set of destinations multiple times (primary and secondary endpoints for the service im integrating with), with multiple distinct set id's (basically a set per customer for multi tenancy) which expects a sip ping per account to verify that connection is alive and healthy. #Example Dispatcher list #Account 1 1 sip:a.cloudservice.com:5061;transport=tls 8 1 socket=tls:10.0.0.2:5061;ping_sni=sip.account1.com;ping_from=sip:sip.account1.com:5061 1 sip:b.cloudservice.com:5061;transport=tls 8 1 socket=tls:10.0.0.2:5061;ping_sni=sip.account1.com;ping_from=sip:sip.account1.com:5061; #Account 2 2 sip:a.cloudservice.com:5061;transport=tls 8 1 socket=tls:10.0.0.2:5061;ping_sni=sip.account2.com;ping_from=sip:sip.account2.com:5061; 2 sip:b.cloudservice.com:5061;transport=tls 8 1 socket=tls:10.0.0.2:5061;ping_sni=sip.account2.com;ping_from=sip:sip.account2.com:5061; Currently I'm running a solution based around certs with multiple SAN (subject alternative name) defined, but this is a pain to administrate, and not as scalable as I would like. I want to be able to define multiple client:any tls profiles and explicitly send via that profile. Its easy enough to do that in config using the tls xavps to define a server name and/or id. But for the sip options ping by dispatcher to work you need to specify the server name or id before the tm:local-request event route fire's. I've resorted to hacking away at dispatcher to see what would happen if I set the tls server name or id before the OPTIONS message is sent, and it works great for the first tls client profile matched, but any others you define re-use the initial tcp connection so reuses the first connections tls config, thus presenting the wrong cert (I'm probably wrong but logs show only one tls complete_init() related to dispatcher pings and the second set's pings skips all the tls init logging so suggests some thing is cached/reused, and logging on the service indicates cert name mismatch with set1s cert being offered) So I've hit a bit of a dead end, is there a way to force a new tcp connection per server name/id I fear outbound SNI might be a bit of a can of worms, for it to work nicely with dispatcher as is, would be an extension of the proto:host:port format to include a name or id, maybe something like: tls(name=sub.domain.com):10.0.0.5:5061 But that looks like it would have a lot of wide reaching knock-on effects, so setting it as an attribute like ping_from works fine as I'm currently doing, if I could force a new connection from dispatch.c.... The other thing that's occurred to me is that it might be better to stop trying to adapt a small percentage of dispatcher's functionality and trying to hammer a round peg into a square hole and instead try and create a new module similar to dispatcher in so much that it sends pings (that's all I really need in this case) and use dispatcher as intended with a single set of non-repeated destinations for routing. This would also allow much simpler integration with MS teams (if added ability to set contact address on the background pings) as well as the service im trying to integrate, and a more natural data set to be used as in my example you can see the only difference is the customers domain between each set. How I would imagine it to work would be to create a tls connection per customer domain, then iterate through the connections per destination in pseudo json the data would look like this: { Destinations:[ [1,["a.cloudservice.com","b.cloudservice.com"]], [2,["sip.pstnhub.microsoft.com", "sip2.pstnhub.microsoft.com", "sip3.pstnhub.microsoft.com"] ], Sources:[ {uri:"sip.account1.com",destinationMapping:[1]}, {uri:"sip.account2.com",destinationMapping:[1,2]} ] } And would just run in the background sending pings with SNI support, and if based on dispatcher should make it easy enough adapt things like the destination up and down event routes, and would allow me to use Kamailio much like I would use nginx for web stuff as a reverse proxy and handle TLS offload on my edge gateway proxy. Any thoughts?, im frustratingly close to having something that will do if I could get a new connection to be created, but I fear my use case might be sufficiently different from dispatchers to make a new module a sensible approach.. Regards Tim.

2 1

Pre-loaded routes verification
by Duarte Rocha 04 Jan '21

04 Jan '21

Greetings, I'm doing a migration from a opensips system to kamailio one and i'm trying to replicate its functionalities. The system is a Registrar with a pstn gateway. I noticed that on the opensips version, loose_route() is called on initial requests and it seems to be used to protect against preloaded routes. However, on the default Kamailio configuration file loose_route() is only called on requests in-dialog and the verification mentioned above is not used. Why doesn't Kamailio includes this verification? Is there are any security concerns not using it? Best Regards,

2 1

using kamailio 5.4 with the websocket or xmlhttprequest
by Daniel Hermann N'don 04 Jan '21

04 Jan '21

Hello everyone, I'm a beginner in kamailio technology, and I would like to know how to communicate with kamailio from the web.

3 3

Unable to connect sip with Kamailio
by Rohit Kumar 04 Jan '21

04 Jan '21

Hello everyone, I'm beginner in Kamailio, I want to connect my asterisk Server with Kamailio. Can you please help me in this context. I shall be very thankful to you. Regards, Rohit Kumar On Thu, Dec 31, 2020, 16:31 <sr-users-request(a)lists.kamailio.org> wrote: > Send sr-users mailing list submissions to > sr-users(a)lists.kamailio.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users > or, via email, send a message with subject or body 'help' to > sr-users-request(a)lists.kamailio.org > > You can reach the person managing the list at > sr-users-owner(a)lists.kamailio.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of sr-users digest..." > > > Today's Topics: > > 1. using kamailio 5.4 with the websocket or xmlhttprequest > (Daniel Hermann N'don) > 2. Re: using kamailio 5.4 with the websocket or xmlhttprequest > (Antony Stone) > 3. Re: using kamailio 5.4 with the websocket or xmlhttprequest > (Daniel Hermann N'don) > 4. Using a specific log level for "script" ? (Chaigneau, Nicolas) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 30 Dec 2020 14:15:19 +0000 > From: Daniel Hermann N'don <danielhermann.ndon(a)outlook.com> > To: "sr-users(a)lists.kamailio.org" <sr-users(a)lists.kamailio.org> > Subject: [SR-Users] using kamailio 5.4 with the websocket or > xmlhttprequest > Message-ID: > < > MWHPR05MB291167705F86195717CA7E3181D70(a)MWHPR05MB2911.namprd05.prod.outlook.com > > > > Content-Type: text/plain; charset="iso-8859-1" > > Hello everyone, I'm a beginner in kamailio technology, and I would like to > know how to communicate with kamailio from the web. >

2 1

Using a specific log level for "script" ?
by Chaigneau, Nicolas 04 Jan '21

04 Jan '21

Hello, Is it possible to set a specific log level for the Kamailio script ? I've seen that the < debugger > module allows to do that with modules or < core > : https://kamailio.org/docs/modules/5.4.x/modules/debugger.html#dbg.p.mod_lev… So I've tried to do : modparam("debugger", "mod_level_mode", 1) modparam("debugger", "mod_hash_size", 5) modparam("debugger", "mod_level", "my_module=3") // this works modparam("debugger", "mod_level", "core=3") // also works modparam("debugger", "mod_level", "script=3") // nope... But it doesn't seem to work for < script >... :/ Regards, Nicolas. This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.

2 4

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users January 2021