From hw@skalatan.de Wed Oct 30 08:27:10 2019 From: Henning Westerholt To: sr-users@lists.kamailio.org Subject: Re: [SR-Users] Kamailio as SBC for Microsoft Teams Date: Wed, 30 Oct 2019 07:27:04 +0000 Message-ID: <715c2a47-3dde-45e7-6746-3d01fae96aea@skalatan.de> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0027060720==" --===============0027060720== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Great addition, thanks Karsten! Am 30.10.19 um 08:08 schrieb Karsten Horsmann: Hi Henning, nice to see that howto. Thanks. Maybe interesting for the list - i try to verify the ms-teams calls with tls = and use the permission module functions as "helper": # account only INVITEs if (is_method("INVITE")) { setflag(FLT_ACC); # do accounting xlog("L_INFO", "-----------> tls_peer_subject <$tls_peer_subj= ect> tls_peer_subject_cn <$tls_peer_subject_cn> tls_peer_verified <$tls_peer_= verified> tls_peer_server_name <$tls_peer_server_name> \n"); xlog("L_INFO", "-----------> $Ri:$Rp src_user=3D$fU src_domai= n=3D$fd src_ip=3D$si dst_ouser=3D$tU dst_user=3D$rU dst_domain=3D$rd\n"); if($tls_peer_verified =3D=3D -1) { xlog("L_INFO", "tls_peer_subject_cn $tls_peer_subject= _cn is NOT verfied!\n"); return; } $var(dns) =3D $tls_peer_subject_cn; $var(group) =3D allow_address_group($var(dns), $Rp); xlog("L_INFO", "-----------> allow_address_group var(group) $= var(group) var(dns) $var(dns) Rp $Rp\n"); if ($var(group) =3D=3D -1) { xlog("L_INFO", "Trunk is not activate for registrar D= NS_GROUP:[$var(dns)], Source: [$si], Destination: [$Ri] Port:[$Rp]\n"); return; } } Oct 30 07:55:46 sbc1 /usr/sbin/kamailio[2689]: INFO: {1 1 INVITE 34b77c805b47= 5a39a669b03544f87fae}