- sr-users - kamailio.org

[Serusers] xmlrpc module
by harry gaillac 04 May '05

04 May '05

Hello, I'm looking for documentation on xmlrpc module . Anybody could tell me more about it ? Regards Harry __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/

1 0

[Serusers] I need to alter and duplicate REGISTER saves
by Jerome Martin 04 May '05

04 May '05

Hello everyone, After looking everywhere in the docs and ML archives, I couldn't find a way to solve my problem, so I would appreciate any help. We have several iPBX servers sending REGISTERs to a SER registrar. Some of those servers send us the numbers to register as aor in the form 0XXXXXXXXX (local numbering plan), some other in the form 33XXXXXXXXX (local country code prefix). For various reasons, we need to handle those different REGISTERs simultaneously, and be able to lookup both formats in the location database. What I'm looking for is a way to "duplicate" the REGISTER entries, i.e. when ser receives a REGISTER for 33XXXXXXXXX, I'd like it to save() the 33XXXXXXXXX, but also create an entry for the corresponding 0XXXXXXXXX. Example : SER receives a REGISTER request for 33122334455. I'd like to have two aors in the location database, so that lookup("33122334455") and lookup("0123344556") would both return the same thing. What I have in mind is something like this : if (method=="REGISTER") { # Always save the original aor save("location"); # If the number starts with 33, also save a duplicate aor in the 0XXXXXXXXX format if (search("^From.*sip:33.*")) { # Insert some code to alter the received SIP message and change the # number in order to save the 0XXXXXXXXX aor # ... # ... # ... save("location"); break; } break; }; Can anyone help ? Best Regards, Jerome Martin

3 2

Re: [Serusers] I need to alter and duplicate REGISTER saves
by Jerome Martin 04 May '05

04 May '05

Hi, Thanks for your reply. Alan Litster wrote: >Doing it the way you've suggested would mean modifying the From and To > > Indeed. I already tried that, using the replace() / replace_all() textops functions, but I could not even manage to have the header modified. It just did nothing at all .... Besides, in the recent thread Re: [Serusers] HF replace, someone said that modifying From: and To "is not allowed". But I am wondering ... ain't it the "Contact:" header which is used by register.so/usrloc.so ? >fields, then doing a save. This should in theory all the UAC to register on >the two addresses, it could get a little messy. > > I agree. I anticipate a few issues on that side. >An alternative would be to create an alias, this would be fine if you knew >before hand what format they would register with. > > Well, I know which server will send what format, and I can afford to hardcode the IPs in the ser.cfg. But after reading the section about aliases in the ser Admin's manual, I must confess it is not clear for me. Could you elaborate on that idea ? >>-----Original Message----- >>From: serusers-bounces(a)iptel.org [mailto:serusers-bounces@lists.iptel.org]On >>Behalf Of Jerome Martin >>Sent: 04 May 2005 15:16 >>To: serusers(a)lists.iptel.org >>Subject: [Serusers] I need to alter and duplicate REGISTER saves >> >> >>Hello everyone, >> >>After looking everywhere in the docs and ML archives, I couldn't find a >>way to solve my problem, so I would appreciate any help. >> >>We have several iPBX servers sending REGISTERs to a SER registrar. Some >>of those servers send us the numbers to register as aor in the form >>0XXXXXXXXX (local numbering plan), some other in the form 33XXXXXXXXX >>(local country code prefix). For various reasons, we need to handle >>those different REGISTERs simultaneously, and be able to lookup both >>formats in the location database. >> >>What I'm looking for is a way to "duplicate" the REGISTER entries, i.e. >>when ser receives a REGISTER for 33XXXXXXXXX, I'd like it to save() the >>33XXXXXXXXX, but also create an entry for the corresponding 0XXXXXXXXX. >> >>Example : SER receives a REGISTER request for 33122334455. I'd like to >>have two aors in the location database, so that lookup("33122334455") >>and lookup("0123344556") would both return the same thing. >> >>What I have in mind is something like this : >> >>if (method=="REGISTER") { >> # Always save the original aor >> save("location"); >> >> # If the number starts with 33, also save a duplicate aor in the >>0XXXXXXXXX format >> if (search("^From.*sip:33.*")) { >> >> # Insert some code to alter the received SIP message and change the >> # number in order to save the 0XXXXXXXXX aor >> # ... >> # ... >> # ... >> >> save("location"); >> break; >> } >> break; >>}; >> >>Can anyone help ? >> >>Best Regards, >>Jerome Martin >> >>_______________________________________________ >>Serusers mailing list >>serusers(a)lists.iptel.org >>http://lists.iptel.org/mailman/listinfo/serusers >> >> > >--------------------------------------------------------------------------------------------- >This email, and any files transmitted with it, is copyright and may contain confidential information. >The contents are intended for the use of the addressee(s) only. >Unauthorized use may be unlawful. >If you receive this email by mistake, please advise sender immediately. >The views of the author may not necessarily constitute the views of the company. >Nothing in this mail shall bind the company in any contract or obligation. > >Tel +44 (0) 20 8002 6000 >Fax +44 (0) 20 8002 6060 > >______________________________________________________________________ >This email has been scanned by the MessageLabs Email Security System. >For more information please visit http://www.messagelabs.com/email >______________________________________________________________________ > >

1 0

[Serusers] SER useing XXL extension
by harry gaillac 04 May '05

04 May '05

How can we setup XXL extension in SER ? Harry __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/

1 0

BUGFIX in lookup.c ... was [Serusers] zombie status in location table
by Cesc Santasusana 04 May '05

04 May '05

Hi, I think i found it! I attach three files ... the most important i think is lookup.c.registered_func.c. It contains a modified version of registered() function in lookup.c (registrar module), in which after obtaining the urecord from the database, all the contacts that it contains are checked for validity (which was not done before!!). I think that this is the cause of lookup and registered not returning the same values. Lookup() returned the correct value, registered() did not. Now, they both return the same ... i mean ... they both return the correct value :) The problem was small, in the transition period (in db_mode=1) when the user deregisters and SER still has not erased the contact from the location table (it keeps it in CS_ZOMBIE_S in mode=1, _D in mode=2). The other two files are a dump of the location table and a piece of the SER log file. Version is 0.9.0. Regards, Cesc >>> Jan Janak <jan(a)iptel.org> 04/29/05 03:08PM >>> On 28-04-2005 17:03, Cesc Santasusana wrote: > Hi, > > After de-registration, a contact in the location table is marked as zombie, and after some time, it is deleted from the table. Right? You should not see any contacts in a ZOMBIE_* state. zombie states were used for user location replication some time ago with a special module. If you use db_mode 2 then the contacts should appear as SYNC or DIRTY in the location table and they will be deleted after a while by timer. > Ok, what happens when this user receives a call ... i mean, he is in the location table (as zombie), but he is not registered really on the phone? He will not receive the message, because in the memory cache the contact is marked as deleted. > What do the lookup('location") and registered('location") in this scenario return? If the user does not have any other contact registered then they will return a negative value. > In my config ... a first call to lookup(loc) returns false, and then calling registered(loc) returns true. Is that right? Shouldn't the two functions do the same, just lookup rewrites the uri? They should return the same value. If that does not happen then there is a bug somewhere, in which case I would like to ask you to provide me with more information (SER version, dump of the location table, and so on). Jan. Unclassified

2 1

Re: [Serusers] 0.9.0 Compile Problems on Debian Sarge
by harry gaillac 04 May '05

04 May '05

ok untar ser sources in debian directory update changelog file you need fakeroot bison dpkg-dev libmysql*-dev libradius1-dev packages use aptitude for dep harry --- Ozan Blotter <cosmocid(a)ispro.net.tr> a écrit : > Hi Harry, > > > I'm new on Debian :( i need a step by step > instructions i believe... > cab you please tell me exact commands with filenames > for Installation on > Debian Sarge. > > I have 0.9.0 Source Tar.Gz and want to support MySql > & Radius together. > > FreeRadius, MySql and other libraries regarding to > SER is installed and > ready to use. > > Thanks, > Ozan > > > ----- Original Message ----- > From: "harry gaillac" <gaillacharry(a)yahoo.fr> > To: "Ozan Blotter" <cosmocid(a)ispro.net.tr> > Sent: Wednesday, May 04, 2005 5:36 PM > Subject: Re: [Serusers] 0.9.0 Compile Problems on > Debian Sarge > > > > Hello, > > > > Try make deb in order to build packages > > > > Harry > > --- Ozan Blotter <cosmocid(a)ispro.net.tr> a écrit: > >> I'm on Debian Sarge, i want to build SER modules, > >> radius and mysql and > >> jabber in one time. With Mandrake and Red Hat > there > >> was no problem but now > >> experiencing difficulties with Debian and can't > find > >> information regarding > >> to this... > >> > >> rapid:/ser-0.9.0# make modules=modules/mysql > modules > >> >> it's done without > >> problems :) > >> > >> rapid:/ser-0.9.0# make > modules=modules/auth_radius > >> modules > >> > >> > >> make[1]: Entering directory > >> `/ser-0.9.0/modules/auth_radius' > >> make[1]: Leaving directory > >> `/ser-0.9.0/modules/auth_radius' > >> make[1]: Entering directory > >> `/ser-0.9.0/modules/auth_radius' > >> gcc -fPIC -DPIC -g -O9 -funroll-loops > -Wcast-align > >> -Wall -minline-all-stringops > >> -malign-double -falign-loops -mcpu=athlon > >> -DNAME='"ser"' -DVERSION='"0.9.0"' > >> -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc > >> 3.3"' -D__CPU_i386 -D__OS_linux > >> -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC > >> -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 > >> -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE > >> -DDBG_QM_MALLOC -DFAST_LOCK -DADAPTIVE_WAIT > >> -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 > >> -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD > >> -DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL > >> -DHAVE_ALLOCA_H -I/ser-0.9.0/include -c > authorize.c > >> -o authorize.o > >> gcc -fPIC -DPIC -g -O9 -funroll-loops > -Wcast-align > >> -Wall -minline-all-stringops > >> -malign-double -falign-loops -mcpu=athlon > >> -DNAME='"ser"' -DVERSION='"0.9.0"' > >> -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc > >> 3.3"' -D__CPU_i386 -D__OS_linux > >> -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC > >> -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 > >> -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE > >> -DDBG_QM_MALLOC -DFAST_LOCK -DADAPTIVE_WAIT > >> -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 > >> -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD > >> -DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL > >> -DHAVE_ALLOCA_H -I/ser-0.9.0/include -c > >> authrad_mod.c -o authrad_mod.o > >> authrad_mod.c: In function `mod_init': > >> authrad_mod.c:110: error: `DICT_VENDOR' > undeclared > >> (first use in this > >> function) > >> authrad_mod.c:110: error: (Each undeclared > >> identifier is reported only once > >> authrad_mod.c:110: error: for each function it > >> appears in.) > >> authrad_mod.c:110: error: `vend' undeclared > (first > >> use in this function) > >> authrad_mod.c:134: warning: assignment makes > pointer > >> from integer without a > >> cast > >> authrad_mod.c:139: error: too many arguments to > >> function `rc_conf_str' > >> authrad_mod.c:139: error: too many arguments to > >> function > >> `rc_read_dictionary' > >> authrad_mod.c:144: warning: implicit declaration > of > >> function > >> `rc_dict_findvend' > >> authrad_mod.c:159: error: too many arguments to > >> function `rc_dict_findattr' > >> authrad_mod.c:159: error: too many arguments to > >> function `rc_dict_findval' > >> make[1]: *** [authrad_mod.o] Error 1 > >> make[1]: Leaving directory > >> `/ser-0.9.0/modules/auth_radius' > >> rapid:/ser-0.9.0# > >> > >> _______________________________________________ > >> Serusers mailing list > >> serusers(a)lists.iptel.org > >> http://lists.iptel.org/mailman/listinfo/serusers > >> > > > > > > > > > > > > > > > __________________________________________________________________ > > Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace > de stockage pour vos > > mails ! > > Créez votre Yahoo! Mail sur > http://fr.mail.yahoo.com/ > > __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/

1 0

Re: [Serusers] Re: [Serdev] Problem with Via Branch/Strange Looping Problem with ACK's
by Alex Mack 04 May '05

04 May '05

Hi Zeus! Zeus Ng schrieb: >First, the ACK should follow section 12.2 (indeed 12.2.1.1), Requests within >a Dialog, not section 12.1.2 according to section 13.2.2.4, 2xx Responses. >------ >The UAC core MUST generate an ACK request for each 2xx received from >the transaction layer. The header fields of the ACK are constructed >in the same way as for any request sent within a dialog >------ > > I disagee: the SER is an UAS not an UAC. IMHO, the concernig chapters are 16.6 subpoint 8 ("16.6 Request Forwarding"; "8. Add a Via header field value") and 8.1.1.7 ("8.1.1.7 Via"). Both chapters state the UAS (SER) MUST add a Via with a branch parameter starting with the magic cookie "z9hG4bK". The ACK generated by the UAC looks good to me, anyway. >Second, do you happened to have a line like this in your SER config. > > aliase=your_proxy_name:5080 or aliase=your_proxy_ip:5080? > > > Are you sure about the trailing 'e' in "aliase"? I've two alias-definitions (one for the IP, one for the realm) in my ser.cfg. But they don't have the port added. I've already added the ports in the listen statements. Alex Mack

2 3

Re: [Serusers] Re: [Serdev] Patched free-TLS implementation
by Cesc Santasusana 04 May '05

04 May '05

Hi again, While checking on how to solve this problem, i saw a couple of things. 1 ================== in the same file and function (tls/tls_init.c, function init_ssl_ctx_behavior), there are a couple of log( 2, "CESC: TLS ... statements which i forgot to clean up :D You may want to remove the CESC: ... and maybe turn them into DBG calls .... Aaaaahhh ... if we had a CVS :D 2 ================== I added a feature that allows you to restrict what ciphers are to be used for TLS. I see two main uses for this. First, to allow only highly secure, non-anonymous ciphers (AES with RSA/DSA auth). Or second, for testing purposes, using a NULL encryption algorithm (this way user data can be read ... not in a very nice way in ethereal, but at least read). How to configure this? In my config file i have: listen=tls:IP_LOCAL_SERtcp_accept_aliases = yes tls_certificate="INSTALL_PATH/certs/ser_cert.pem"tls_private_key="INSTALL_PATH/private/ser_prik.pem"tls_ca_list="INSTALL_PATH/certs/ca_list.pem" tls_ciphers_list="NULL-SHA:NULL-MD5:AES256-SHA:AES128-SHA" Note the "tls_ciphers_list" variable. I have set it to use NULL-SHA, so traffic gets authenticated but not encrypted (i do testing). Other possible lists are: SSL_CIPHERS_DEFAULT (this are the ones that are allowed if no tls_ciphers_list is specified, they are the default ones used by OpenSSL). "DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DES-CBC3-MD5:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:RC2-CBC-MD5:DHE-DSS-RC4-SHA:RC4-SHA:RC4-MD5:RC4-MD5:RC4-64-MD5:EXP1024-DHE-DSS-DES-CBC-SHA:EXP1024-DES-CBC-SHA:EXP1024-RC2-CBC-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:DES-CBC-MD5:EXP1024-DHE-DSS-RC4-SHA:EXP1024-RC4-SHA:EXP1024-RC4-MD5:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC2-CBC-MD5:EXP-RC4-MD5:EXP-RC4-MD5" SSL_CIPHERS_AES_HIGH_MEDIUM (this are AES only ciphers, not anonymous, with high and medium security level) "DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA" SSL_CIPHERS_TESTING (of course ... the testing list! the NULL ones are usually not available, so depends on the phone, u won't be able to do this) "NULL-SHA:NULL-MD5:AES256-SHA:AES128-SHA" YET_ANOTHER_LIST (this includes high and medium security algorithms, some without authentication, and a variety of ciphers, not just AES) "ADH-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:ADH-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:DHE-DSS-RC4-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5:ADH-DES-CBC3-SHA:ADH-RC4-MD5:DES-CBC3-MD5:RC2-CBC-MD5:RC4-MD5" Regards, Cesc >>> Alex Mack <amack(a)fhm.edu> 05/04/05 02:01PM >>> >Hi Cesc! > >I compiled in your patch. > >Now I'm facing a new problem: SER wants a client certificate from the >UA. Snom phones immediately reply with an ALERT and break up connection >upon the certificate requests. MS Messenger on the other hand sends at >least a reply - without certificate - and SER rejects the Client Hello >because of the missing client certificate: > >tls_accept: Error in SSL: >tls_error: error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer >did not return a certificate > >Could you please provide some more documentation about the new TLS >options you added? It seems you've implemented support for client >certificates for a two-way certificate authorization - which would be a >good thing if supported by the UAs, which don't right now. So how can I >turn it off again and get back to server side certification? > >Alex Mack >Cesc Santasusana schrieb: >Hi everybody, > >The last i sent is a replacement as a whole for the original code sent by P. Griffiths. Sorry i forgot to mention that. > >The patches for cfg.y and cfg.lex are both in the same file (patch.core.cfg..files.diff) within the zip. I was lazy :) >I resent it as a whole, and not as a diff, because i indented all the code with tabs, instead of spaces (so a diff would be bigger than just sending all the files). > >As for the CVS thing ... i agree with Juha. Either gets into the "official" cvs or we do something about it. The code i think is rather stable as it is (i only tested on my debian linux box, soon i will try on an ARM linux and i will report back on that too). For me, as long as it gets into a CVS, i don't care if it is mantained against HEAD or 0.9.0 (i use 0.9.0 .... so all my patches are against it). > >On a more philosophical level, i understand the "quietness" on iptel's side ... they have their own version, and make money on it. But the thing is that this free version is here to stay ... it is the "problem" of opensource. >Another option would be for them to release their proprietary implementation if they feel that it is a better, more tested one. >In any case, i think that this whole thing needs to be decided fast. > >Regards! > >Cesc > > > > >>>>Alex Mack <amack(a)fhm.edu> 05/03/05 01:26PM >>> >>>> >Hi Cesc! > >Nice to have those fixes in a package. > >Is your cfg.y-patch to be applied *after* cfg.y.patch was applied or >*instead* of cfg.y.patch? > >Or is your version a patched one which replaces the original >implementation as a whole? In that case where's cfg.lex.patch? > >Alex Mack > >Cesc Santasusana schrieb: > > >>Hi, >> >>I really hate to be so pushy, but i dont understand how such an important piece of code as TLS is not moving on into CVS ... or anywhere else by this matter. I will keep sending patches till i get tired (soon). >> >>Anyway ... i thought someone may be interested in a compilation fix for cfg.y introduced with the tls_domains (it would not compile if the cfg.y file had been patched but the tls-core files were not there); a bug fix for the session caching (fixed by turning session caching and resumption off); and an extension (the ability to choose the list of allowed ciphers from the config file). Oh, and all the files have been tabbed, instead of spaced (for indentation). >> >>Enjoy! >> >>Cesc >> >> Unclassified > >> >> >>------------------------------------------------------------------------ >> >>_______________________________________________ >>Serdev mailing list >>serdev(a)lists.iptel.org >>http://lists.iptel.org/mailman/listinfo/serdev >> >> >> > >_______________________________________________ >Serusers mailing list >serusers(a)lists.iptel.org >http://lists.iptel.org/mailman/listinfo/serusers > >_______________________________________________ >Serusers mailing list >serusers(a)lists.iptel.org >http://lists.iptel.org/mailman/listinfo/serusers > > >

1 0

[Serusers] serweb
by harry gaillac 04 May '05

04 May '05

hello, Anybody could tell me more about ser+serweb+xml-rpc ? when i set true (config.php) my_account.php page failed . Harry /* This option is enabling checkbox 'Allow others to see whether or not I'm online'*/ $config->allow_change_status_visibility=false; /* Forwarding to voicemail by group membership. If set to false,is forwarding to voicemail done through admin privileges */ $config->forwarding_to_voicemail_by_group=false; __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/

1 0

Re: [Serusers] Re: [Serdev] Patched free-TLS implementation
by Cesc Santasusana 04 May '05

04 May '05

Hi, Yeah ... I send it with my default config which is using client and server authentication. I use this settings with minisip client (supports client side certs) and for tls between ser proxies. It works perfect. To turn client authentication off, check: tls/tls_init.c file init_ssl_ctx_behavior function the line SSL_CTX_set_verify( _ctx, SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT, 0); means that the server will request a certificate from the client and if it doesn't get one, it will fail. Try changing it with: SSL_CTX_set_verify( _ctx, SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE, 0); this way the server will request a cert, the client will not provide, but on the following renegotiation, the server (ser) will not ask for a cert. And if you want to turn verification off ... completely ... SSL_CTX_set_verify( _ctx, SSL_VERIFY_NONE, 0); this will also work for you if only using tls for ser2phone ... it will not work if you want tls between proxies ... as the ser client will accept ANY certificate from the ser server. And then, from the prompt: > make TLS=1 all && make TLS=1 install ;) This whole verification thing needs to be improved and probably the parameters should be changeable directly from the config file. This and many other parameters should be exchangeable without the need to recompile. Any volunteer for a ser-tls.README? :D Can you provide me with some extra info from the snom phones and the messenger? Do it offline, so you can send me some ethereal captures and ser logs ... Regards, Cesc >>> Alex Mack <amack(a)fhm.edu> 05/04/05 02:01PM >>> Hi Cesc! I compiled in your patch. Now I'm facing a new problem: SER wants a client certificate from the UA. Snom phones immediately reply with an ALERT and break up connection upon the certificate requests. MS Messenger on the other hand sends at least a reply - without certificate - and SER rejects the Client Hello because of the missing client certificate: tls_accept: Error in SSL: tls_error: error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate Could you please provide some more documentation about the new TLS options you added? It seems you've implemented support for client certificates for a two-way certificate authorization - which would be a good thing if supported by the UAs, which don't right now. So how can I turn it off again and get back to server side certification? Alex Mack Cesc Santasusana schrieb: >Hi everybody, > >The last i sent is a replacement as a whole for the original code sent by P. Griffiths. Sorry i forgot to mention that. > >The patches for cfg.y and cfg.lex are both in the same file (patch.core.cfg..files.diff) within the zip. I was lazy :) >I resent it as a whole, and not as a diff, because i indented all the code with tabs, instead of spaces (so a diff would be bigger than just sending all the files). > >As for the CVS thing ... i agree with Juha. Either gets into the "official" cvs or we do something about it. The code i think is rather stable as it is (i only tested on my debian linux box, soon i will try on an ARM linux and i will report back on that too). For me, as long as it gets into a CVS, i don't care if it is mantained against HEAD or 0.9.0 (i use 0.9.0 .... so all my patches are against it). > >On a more philosophical level, i understand the "quietness" on iptel's side ... they have their own version, and make money on it. But the thing is that this free version is here to stay ... it is the "problem" of opensource. >Another option would be for them to release their proprietary implementation if they feel that it is a better, more tested one. >In any case, i think that this whole thing needs to be decided fast. > >Regards! > >Cesc > > > > >>>>Alex Mack <amack(a)fhm.edu> 05/03/05 01:26PM >>> >>>> >Hi Cesc! > >Nice to have those fixes in a package. > >Is your cfg.y-patch to be applied *after* cfg.y.patch was applied or >*instead* of cfg.y.patch? > >Or is your version a patched one which replaces the original >implementation as a whole? In that case where's cfg.lex.patch? > >Alex Mack > >Cesc Santasusana schrieb: > > >>Hi, >> >>I really hate to be so pushy, but i dont understand how such an important piece of code as TLS is not moving on into CVS ... or anywhere else by this matter. I will keep sending patches till i get tired (soon). >> >>Anyway ... i thought someone may be interested in a compilation fix for cfg.y introduced with the tls_domains (it would not compile if the cfg.y file had been patched but the tls-core files were not there); a bug fix for the session caching (fixed by turning session caching and resumption off); and an extension (the ability to choose the list of allowed ciphers from the config file). Oh, and all the files have been tabbed, instead of spaced (for indentation). >> >>Enjoy! >> >>Cesc >> >> Unclassified > >> >> >>------------------------------------------------------------------------ >> >>_______________________________________________ >>Serdev mailing list >>serdev(a)lists.iptel.org >>http://lists.iptel.org/mailman/listinfo/serdev >> >> >> > >_______________________________________________ >Serusers mailing list >serusers(a)lists.iptel.org >http://lists.iptel.org/mailman/listinfo/serusers > >_______________________________________________ >Serusers mailing list >serusers(a)lists.iptel.org >http://lists.iptel.org/mailman/listinfo/serusers > > >

1 0

[Serusers] 0.9.0 Compile Problems on Debian Sarge
by Ozan Blotter 04 May '05

04 May '05

I'm on Debian Sarge, i want to build SER modules, radius and mysql and jabber in one time. With Mandrake and Red Hat there was no problem but now experiencing difficulties with Debian and can't find information regarding to this... rapid:/ser-0.9.0# make modules=modules/mysql modules >> it's done without problems :) rapid:/ser-0.9.0# make modules=modules/auth_radius modules make[1]: Entering directory `/ser-0.9.0/modules/auth_radius' make[1]: Leaving directory `/ser-0.9.0/modules/auth_radius' make[1]: Entering directory `/ser-0.9.0/modules/auth_radius' gcc -fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall -minline-all-stringops -malign-double -falign-loops -mcpu=athlon -DNAME='"ser"' -DVERSION='"0.9.0"' -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc 3.3"' -D__CPU_i386 -D__OS_linux -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE -DDBG_QM_MALLOC -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL -DHAVE_ALLOCA_H -I/ser-0.9.0/include -c authorize.c -o authorize.o gcc -fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall -minline-all-stringops -malign-double -falign-loops -mcpu=athlon -DNAME='"ser"' -DVERSION='"0.9.0"' -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc 3.3"' -D__CPU_i386 -D__OS_linux -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE -DDBG_QM_MALLOC -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL -DHAVE_ALLOCA_H -I/ser-0.9.0/include -c authrad_mod.c -o authrad_mod.o authrad_mod.c: In function `mod_init': authrad_mod.c:110: error: `DICT_VENDOR' undeclared (first use in this function) authrad_mod.c:110: error: (Each undeclared identifier is reported only once authrad_mod.c:110: error: for each function it appears in.) authrad_mod.c:110: error: `vend' undeclared (first use in this function) authrad_mod.c:134: warning: assignment makes pointer from integer without a cast authrad_mod.c:139: error: too many arguments to function `rc_conf_str' authrad_mod.c:139: error: too many arguments to function `rc_read_dictionary' authrad_mod.c:144: warning: implicit declaration of function `rc_dict_findvend' authrad_mod.c:159: error: too many arguments to function `rc_dict_findattr' authrad_mod.c:159: error: too many arguments to function `rc_dict_findval' make[1]: *** [authrad_mod.o] Error 1 make[1]: Leaving directory `/ser-0.9.0/modules/auth_radius' rapid:/ser-0.9.0#

1 0

[Serusers] SER 0.9.0 on Debian Sarge (Compiling Problems)
by Ozan Blotter 04 May '05

04 May '05

I want both Mysql & Radius Modules on SER 0.9.0, just changed system into Debian Sarge, i have all libraries and rest of reqs as it says, while compiling on Red Hat 9.0 - ES 3.0 - CentOS or Mandrake 9.1 - 10.0 it never happened but now on Debian i meet below problems :( static_modules= static_modules_path=$(addprefix modules/, $(static_modules)) extra_sources=$(wildcard $(addsuffix /*.c, $(static_modules_path))) extra_objs=$(extra_sources:.c=.o) static_defs= $(foreach mod, $(static_modules), \ -DSTATIC_$(shell echo $(mod) | tr [:lower:] [:upper:]) ) override extra_defs+=$(static_defs) $(EXTRA_DEFS) export extra_defs modules=$(filter-out $(addprefix modules/, \ $(exclude_modules) $(static_modules)), \ <<<<<<<<<<<<<<<<<<<<<< this is line 77 <<<<<<<<<<< $(wildcard modules/*)) modules:=$(filter-out $(modules), $(addprefix modules/, $(include_modules) )) \ $(modules) modules_names=$(shell echo $(modules)| \ sed -e 's/modules\/$[^/ ]*$\/*/\1.so/g' ) modules_basenames=$(shell echo $(modules)| \ sed -e 's/modules\/$[^/ ]*$\/*/\1/g' ) #modules_names=$(patsubst modules/%, %.so, $(modules)) modules_full_path=$(join $(modules), $(addprefix /, $(modules_names))) rapid:/ser-0.9.0# make modules=modules/mysql modules make[1]: Entering directory `/ser-0.9.0/modules/mysql' ../../Makefile.rules:77: dbase.d: No such file or directory ../../Makefile.rules:77: db_con.d: No such file or directory ../../Makefile.rules:77: db_mod.d: No such file or directory ../../Makefile.rules:77: my_con.d: No such file or directory ../../Makefile.rules:77: my_id.d: No such file or directory ../../Makefile.rules:77: my_pool.d: No such file or directory ../../Makefile.rules:77: res.d: No such file or directory ../../Makefile.rules:77: row.d: No such file or directory ../../Makefile.rules:77: utils.d: No such file or directory ../../Makefile.rules:77: val.d: No such file or directory make[1]: Leaving directory `/ser-0.9.0/modules/mysql' make[1]: Entering directory `/ser-0.9.0/modules/mysql'

1 0

[serusers] problem to register
by michael p 04 May '05

04 May '05

hi when i try to start my registration there is this error appears in the log diagnostic of my UAC: 4:32:06.8 Proxy slot #0 () - Failed to register! error-code: 401, msg: 'Unauthorized'. Retry in 40 second(s). AOR: '<sip:michael@toto.koko.com>', proxy: toto.koko.com', firewall-proxy: 'F'. i don't understand thanks

2 1

[Serusers] pstn phone keeps ringing!!!
by Llanos Serna García-Conde 04 May '05

04 May '05

2 1

[Serusers] Re: [Serdev] Patched free-TLS implementation
by Cesc Santasusana 04 May '05

04 May '05

Hi everybody, The last i sent is a replacement as a whole for the original code sent by P. Griffiths. Sorry i forgot to mention that. The patches for cfg.y and cfg.lex are both in the same file (patch.core.cfg..files.diff) within the zip. I was lazy :) I resent it as a whole, and not as a diff, because i indented all the code with tabs, instead of spaces (so a diff would be bigger than just sending all the files). As for the CVS thing ... i agree with Juha. Either gets into the "official" cvs or we do something about it. The code i think is rather stable as it is (i only tested on my debian linux box, soon i will try on an ARM linux and i will report back on that too). For me, as long as it gets into a CVS, i don't care if it is mantained against HEAD or 0.9.0 (i use 0.9.0 .... so all my patches are against it). On a more philosophical level, i understand the "quietness" on iptel's side ... they have their own version, and make money on it. But the thing is that this free version is here to stay ... it is the "problem" of opensource. Another option would be for them to release their proprietary implementation if they feel that it is a better, more tested one. In any case, i think that this whole thing needs to be decided fast. Regards! Cesc >>> Alex Mack <amack(a)fhm.edu> 05/03/05 01:26PM >>> Hi Cesc! Nice to have those fixes in a package. Is your cfg.y-patch to be applied *after* cfg.y.patch was applied or *instead* of cfg.y.patch? Or is your version a patched one which replaces the original implementation as a whole? In that case where's cfg.lex.patch? Alex Mack Cesc Santasusana schrieb: >Hi, > >I really hate to be so pushy, but i dont understand how such an important piece of code as TLS is not moving on into CVS ... or anywhere else by this matter. I will keep sending patches till i get tired (soon). > >Anyway ... i thought someone may be interested in a compilation fix for cfg.y introduced with the tls_domains (it would not compile if the cfg.y file had been patched but the tls-core files were not there); a bug fix for the session caching (fixed by turning session caching and resumption off); and an extension (the ability to choose the list of allowed ciphers from the config file). Oh, and all the files have been tabbed, instead of spaced (for indentation). > >Enjoy! > >Cesc > Unclassified > > > >------------------------------------------------------------------------ > >_______________________________________________ >Serdev mailing list >serdev(a)lists.iptel.org >http://lists.iptel.org/mailman/listinfo/serdev > > _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

2 1

Re: [Serusers] setflag...max number
by Cesc Santasusana 04 May '05

04 May '05

Hi, I think there is also a module (gflags) which allows more flags (not sure), and that has a fifo interface. I think it is not completely finished, but may work. The description of it in the c file: * gflags module: global flags; it keeps a bitmap of flags * in shared memory and may be used to change behaviour * of server based on value of the flags. E.g., * if (is_gflag("1")) { t_relay_to_udp("10.0.0.1","5060"); } * else { t_relay_to_udp("10.0.0.2","5060"); } * The benefit of this module is the value of the switch flags * can be manipulated by external applications such as web interface * or command line tools. Cesc >>> Iqbal <iqbal(a)gigo.co.uk> 05/03/05 07:43PM >>> so if I want to set more than 31 flags, what do I do Iqbal Cesc Santasusana wrote: >no ... flags are stored in a 32-bit integer, each flag being one of the bits (set or reset), so u have flags 0 to 31 to set. > >cesc > > > >>>>Iqbal <iqbal(a)gigo.co.uk> 05/03/05 05:08PM >>> >>>> >>>> >Hi > >Is there a max number, I set one at 51, and got an error, is this a >feature.. > >Iqbal > >_______________________________________________ >Serusers mailing list >serusers(a)lists.iptel.org >http://lists.iptel.org/mailman/listinfo/serusers Unclassified > > >. > > >

1 0

[Serusers] Load/stress test on SER server
by Onur Devran Cakir 04 May '05

04 May '05

I am looking for a software for challanging the load limits of preinstalled SER server. There are both free (i.e. sip bomber) and priced (i.e. winsip) products. Free products are installed on Linux platforms, but the others can be setup on windows. If you know such programs, please inform me about the test results and your experience on those products. Any other software will be beneficial for me.. Thanks, Dev __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

[Serusers] Failure_route and Current URI Set
by Aaron W 04 May '05

04 May '05

I want to allow users to have multiple numbers that they can be found at. For example, I want to have SER ring my SIP phone first, then my cell phone, then department admin, and finally my voicemail. However, a different user may want to first ring his sip phone, then Dave's SIP phone and then to voice mail. I created a custom table called "followme" and in it I have two columns, username and newusername. In my failure_route[1] I call exec_dset("junk(a)junk.com;/etc/ser/follow $USER") and it will return the correct value. This works pretty well as long as the returned value is an external number that I pass off to the PBX. However, I want to be able to do one of two things. 1) I want to run the returned value through Lookup(location) 2) I want to have condition statements based on the returned URI. For example I want to have: if (uri =~"^xyz@) I think the issue is that the exec_dset really does an append branch, so that the original URI is not changed. I already have found taht I need the junk(a)junk.com in my exec_dset command so taht SER recongizes a new branch. But how can I work with that branch? I hope this makes sense.... Aaron

2 1

Re: [Serusers] HELP: how to get correct call duration??
by Charles Wang 04 May '05

04 May '05

Hi, I think that the ACK after INVITE is only the callee(UAC) receives my INVITE and ready to start RINGING. But this time is not the really Call Start. Generally, the start time of call should be callee hangup the phone after ringing. Do you have any idea about it? On 4/28/05, info(a)beeplove.com <info(a)beeplove.com> wrote: > > Actually, to get call duration, you need to use ACK and BYE (both should > have status 200). > INVITE sends an request to other party to initiate a call. > Other party send ACK with status 200 to receive the call. > > Original Message: > ----------------- > From: Charles Wang lazy.charles(a)gmail.com > Date: Thu, 28 Apr 2005 02:49:42 +0800 > To: serusers(a)lists.iptel.org > Subject: [Serusers] HELP: how to get correct call duration?? > > > Hi, ALL: > > I know ser can insert INVITE & BYE records to acc table. > Maybe the timestamp of BYE record is correct but the timestamp > of INVITE is not equal to the call start(after the callee answered). > Is there any method to generate a record with timestamp when the callee > answer? > I think that it should be the callee responses "200 OK" after "100 Trying". > How to do it??? > > -- > > Best Regards > Charles > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers > > -------------------------------------------------------------------- > mail2web - Check your email from the web at > http://mail2web.com/ . > > -- Best Regards Charles

2 6

[Serusers] List of authorized UAs, how?
by Enrique Vadillo 03 May '05

03 May '05

Hi all, I'd like to know if there's some way i can have a list of authorized UAs i am willing to deal with -rejecting all others- using SER. I have noticed that there are some broken UAs like X-Pro v2 and surely some others, that don't even send the BYE and there's no way i can have reliable accounting with those UAs. If anyone has found a way to do this, or has some patch, please lemme know. Thanks in advance! Enrique Vadillo.

2 1

[Serusers] Getting Started - Issue 4 covers PSTN Gateway Support
by Simon Miles 03 May '05

03 May '05

Dear All, After a month and over 200 downloads, we have updated the Getting Started documentation. We now cover in-depth description of supporting PSTN gateways as well as updating some bugs that we had previously found. So please download the new version 4 ! ! <http://www.ONsip.org> www.ONsip.org Feedback we have so far received is very positive and we hope that by sharing with you our own experiences we are making the SER community wider and more knowledgeable. Regards Paul, Simon, Greger

1 0

[Serusers] Loose routing question
by Michael Ulitskiy 03 May '05

03 May '05

Hello, I'm trying to comprehend loose routing concept and I have a question that concerns me. As far as I understand loose routing says that if there're Route headers in a message it should be forwarded according to the URIs set in Route headers. I thought that this is true only within a dialog, but RFC3261 (part 16.6) says: "Requests establishing a dialog may contain a preloaded Route header field." Also SER manual says: " the failure not to include loose routing in your scripts may lead to infinite loops. Make sure that you include the following script fragment immediately after request sanity checks" and provide the following piece of code: if (loose_route()) { t_relay(); break; }; which as far as I understand unconditionally forwards message if Route header is present. So I'm wondering what about security? If I follow this guidelines how I would shield my PSTN gateway if anyone can construct message and pre-load it with URI of my gateway and all my proxies must honor it. For example I have a PSTN gateway on ip address 10.1.1.5 and proxy on 10.1.1.10 that supposed to interface outside world. So I guess if someone construct a message like this: INVITE sip:12345@somewhere.com SIP/2.0 ... Route: <sip:12345@10.1.1.5;lr> my proxy will forward it to PSTN gateway and it will make outbound call. Is this true? Please enlighten me on this. Thank you, Michael

7 20

[Serusers] permissions Module
by Leon Sun 03 May '05

03 May '05

Hi, Is anyone using permissions Module? I read docu from web and I have no idea about format of permission&deby files. Would anyone kindly provide this format? Great thanks. Leon Sun

2 2

RE: [serusers] mysql.so
by Ricardo Martinez 03 May '05

03 May '05

Michael. By "tar" you mean the rpm installation?. If so i'm not sure what to do, i'm sending this mail to the mail list to see if someone can give you a hand. Regards, Ricardo.- > -----Mensaje original----- > De: michael p [mailto:mikep3000@hotmail.com] > Enviado el: Martes, 03 de Mayo de 2005 12:17 > Para: rmartinez(a)redvoiss.net > Asunto: RE: [serusers] mysql.so > > > thanks but i didn't install ser with the source but with the tar > > so what can i do? > > thanks > > regards > > M. > > >From: Ricardo Martinez <rmartinez(a)redvoiss.net> > >To: 'michael p' <mikep3000(a)hotmail.com>, serusers(a)lists.iptel.org > >Subject: RE: [serusers] mysql.so > >Date: Tue, 3 May 2005 12:16:37 -0400 > > > >Hello > >You must re-compile you ser, but this time make sure you > edit the Makefile > >file in the line "exclude_modules?=" and remove mysql module. > >That should work. > > > >Regards, > >Ricardo.- > > > > > > > -----Mensaje original----- > > > De: michael p [mailto:mikep3000@hotmail.com] > > > Enviado el: Martes, 03 de Mayo de 2005 12:10 > > > Para: serusers(a)lists.iptel.org > > > Asunto: [serusers] mysql.so > > > > > > > > > hi > > > > > > i don't find the modules mysql.so that has to be in > > > /usr/lib/ser/modules > > > > > > i don't know it's not there > > > > > > i can't modify the file /etc/ser/ser.cfg cause this module > > > doesn't exist > > > > > > anyone knows why? > > > > > > where can i find it? > > > > > > thanks > > > > > > M. > > > > > > > > > _______________________________________________ > > > Serusers mailing list > > > serusers(a)lists.iptel.org > > > http://lists.iptel.org/mailman/listinfo/serusers > > > > >

2 1

[Serusers] ser and asterisk
by G.Marshall 03 May '05

03 May '05

I appreciate this has probably been asked time and time before, but I can not find any documentation on it which works in my situation. I have tried nathelper.cfg, rtp.cfg, al.cfg but to no avail. I have even tried home grown cfg's |---------sipsak for external registration | | rtpproxy \|/ + sip server <-> ser <-> asterisk ^ ^ | | \|/ \|/ sip phone mgcp/iax phone The ser and asterisk programs are running on the same box. This box has an external and internal interface. ser listens to 5060, asterisk sip listens to 5061. Internal phones connect to the internal interface of this box. I used fix_nated_contact to modify the contact header, however, looking at the xlog output this does not appear to be happenning. /usr/local/sbin/ser[7077]: time [Tue May 3 17:04:33 2005] method <REGISTER> r-uri <iptel.tgfslp.dalmany.co.uk> src_ip <192.168.4.5> contact header <Line A <sip:5561@192.168.4.5:5061>;expires=3600> Does anyone have any suggestions on how to fix this problem? Unfortunately, I need this setup to proxy rtp through the box. Many thanks, Spencer

1 0

[serusers] serctl
by michael p 03 May '05

03 May '05

hi everybody, anyone knows where is there a tutorial about serctl? i don't understand how to use it? i'm trying to enter some lines but when i do enter it doesn't happen things. that stays on serctl thanks

3 2

[Serusers] serweb
by "Sebastian Kühner" 03 May '05

03 May '05

Hello, I have a problem with serweb. When I load my page with http://192.168.1.223/iptel/admin/index.php always appears "error in SQL query, line: 30" On line 30 there is a following SQL-Request: select phplib_id from subscriber where username='root' and password='' and perms='admin' and domain='192.168.1.223' The problem that I saw now is that I don't have "perms" in my table subscriber? What is wrong? I'm using ser 0.9.0 and serweb 2004-7-24... Thanks! Sebastian -- +++ Lassen Sie Ihren Gedanken freien Lauf... z.B. per FreeSMS +++ GMX bietet bis zu 100 FreeSMS/Monat: http://www.gmx.net/de/go/mail

1 0

RE: [serusers] mysql.so
by Ricardo Martinez 03 May '05

03 May '05

Hello You must re-compile you ser, but this time make sure you edit the Makefile file in the line "exclude_modules?=" and remove mysql module. That should work. Regards, Ricardo.- > -----Mensaje original----- > De: michael p [mailto:mikep3000@hotmail.com] > Enviado el: Martes, 03 de Mayo de 2005 12:10 > Para: serusers(a)lists.iptel.org > Asunto: [serusers] mysql.so > > > hi > > i don't find the modules mysql.so that has to be in > /usr/lib/ser/modules > > i don't know it's not there > > i can't modify the file /etc/ser/ser.cfg cause this module > doesn't exist > > anyone knows why? > > where can i find it? > > thanks > > M. > > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers >

1 0

[serusers] mysql.so
by michael p 03 May '05

03 May '05

hi i don't find the modules mysql.so that has to be in /usr/lib/ser/modules i don't know it's not there i can't modify the file /etc/ser/ser.cfg cause this module doesn't exist anyone knows why? where can i find it? thanks M.

1 0

Re: [Serusers] connect to a pstn
by "Sebastian Kühner" 03 May '05

03 May '05

Where do I have to put the username, password (secret) while registering to a pstn with ser? Maybe that I can put it to my uri, but in this case I loose the telefone-number of the destination. Sorry, but I don't understand how to do this... maybe that I have to sleep a little bit more ;-) > You can register asterisk with SER and your > pstn-gateway with SER > > SER will forward call to pstn > --- "Sebastian Kühner" <SebastianKuehner(a)gmx.de> a > écrit: > > Hello, > > > > The problem of this example is, that the user has to > > register to ser before > > connecting to the pstn-gateway. But I have the > > problem that ser has to > > register to the pstn-gateway before passing the call > > (with the username, > > fromuser,... like above). The pstn.cfg only forwards > > to the pstn-gateway > > without registration... > > > > > hello, > > > > > > Look at pstn.cfg from ser sources > > > > > > Harry > > > --- "Sebastian Kühner" <SebastianKuehner(a)gmx.de> a > > > écrit: > > > > Hello, > > > > > > > > I am using asterisk to connect to a > > PSTN-Gateway. I > > > > have to register to this > > > > pstn gateway before passing calls with: > > > > > > > > [broadvoice] > > > > type=friend > > > > username=xxxxxxxxxxx > > > > fromuser=xxxxxxxxxx > > > > secret=xxxxxxxxxx > > > > host=sip.broadvoice.com > > > > port=5060 > > > > context=ext_default > > > > dtmfmode=inband > > > > fromdomain=sip.broadvoice.com > > > > canreinvite=no > > > > dtmfmode=inband > > > > insecure=very > > > > permit=xxx.xxx.xxx.xxx/32 > > > > qualify=yes > > > > > > > > > > > > Now I want to put through the calls with ser. > > Has > > > > anyone an idea how to do > > > > that in ser? > > > > > > > > Thanks! > > > > > > > > Sebastian > > > > > > > > -- > > > > +++ Neu: Echte DSL-Flatrates von GMX - Surfen > > ohne > > > > Limits +++ > > > > Always online ab 4,99 Euro/Monat: > > > > http://www.gmx.net/de/go/dsl > > > > > > > > _______________________________________________ > > > > Serusers mailing list > > > > serusers(a)lists.iptel.org > > > > http://lists.iptel.org/mailman/listinfo/serusers > > > > > > > > > > > > > > > > > > > > > > > > > > > > __________________________________________________________________ > > > > > Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace > > de stockage pour vos > > > mails ! > > > Créez votre Yahoo! Mail sur > > http://fr.mail.yahoo.com/ > > > > > > > -- > > +++ Lassen Sie Ihren Gedanken freien Lauf... z.B. > > per FreeSMS +++ > > GMX bietet bis zu 100 FreeSMS/Monat: > > http://www.gmx.net/de/go/mail > > > > > > > > > __________________________________________________________________ > Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos > mails ! > Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ > -- +++ Lassen Sie Ihren Gedanken freien Lauf... z.B. per FreeSMS +++ GMX bietet bis zu 100 FreeSMS/Monat: http://www.gmx.net/de/go/mail

1 0

Re: [Serusers] Loose routing question
by Juha Heinanen 03 May '05

03 May '05

Cesc Santasusana writes: > Fair enough, but then what do you do against fake BYE messages? If > you do not authenticate them somehow, anybody could sniff the INV > message (and OK/ACK), take the needed fields, and tear down the > session. there is very little you can do to prevent that unless you use tls for signaling. -- juha

1 0

[Serusers] sipsak problem
by rcrdsip rcrdsip 03 May '05

03 May '05

hello, i'm testing sipsak. ./sipsak -M -B "test " -s sip:dummy@X.X.X.2:5060 this command work well. Then i want to use the -f file option: ./sipsak -f test.txt -s sip:dummy@X.X.X.2:5060 with the file test.txt: MESSAGE sip:dummy@X.X.X.2:5060 SIP/2.0 From: <sip:sipsak@X.X.X.1> To: <sip:dummy@X.X.X.2:5060> Call-ID: <1234567(a)X.X.X.1> CSeq: 2 MESSAGE Content-Type: text/plain Content-Length: 5 User-Agent: sipsak 0.8.12 Line-based text data: text/plain test The command wait for 20s and finish with: ** give up retransmissioning.... and i don't capture any SIP messages with ethereal. A idea? thanks

2 1

Re: [Serusers] Loose routing question
by Cesc Santasusana 03 May '05

03 May '05

Fair enough, but then what do you do against fake BYE messages? If you do not authenticate them somehow, anybody could sniff the INV message (and OK/ACK), take the needed fields, and tear down the session. Of course, even if you protect against fake BYEs, there is still CANCEL messages, which according to the RFC cannot be challenged at all ... so maybe just drop them all? I am just thinking outloud on how to harden a sip system ... Cesc >>> Juha Heinanen <jh(a)tutpro.com> 05/03/05 04:07PM >>> Cesc Santasusana writes: > For example, Kphone can resend an INV if challenged which contains > the auth-data. On the other hand, if a kphone is the receiver of the > INV, and it hangs up, kphone generates a BYE message which does NOT > contain auth-data. Thus, ser will challlenge the kphone back, kphone > will reply with a CANCEL and resend the BYE without (again) the > auth-data, entering an endless loop. Ain't it funny? bye is not initial request, but in-dialog request. it doesn't make sense to authenticate them, because you may not even know if the sender of bye is your local user or not. for initial requests you always know this and thus can authenticate them. -- juha Unclassified

1 0

Re: [Serusers] Loose routing question
by Cesc Santasusana 03 May '05

03 May '05

I actually gave up trying to this kind of checks on routed messages. Why? Not all phones behave the same way and some had problems when authentication (digest) was required for messages different than INVITE. For example, Kphone can resend an INV if challenged which contains the auth-data. On the other hand, if a kphone is the receiver of the INV, and it hangs up, kphone generates a BYE message which does NOT contain auth-data. Thus, ser will challlenge the kphone back, kphone will reply with a CANCEL and resend the BYE without (again) the auth-data, entering an endless loop. Ain't it funny? By the way ... i notified this to kphone developers ... no news :( I repeat, i tried other phones and it worked fine: minisip, polycom hardphone (has many other bugs ...), snom, ... But i agree with Juha (and this makes it twice this afternoon) ... you should authenticate them as you would with any other message. Try using a phone which supports TLS and then you are good to go :) Regards, Cesc >>> Juha Heinanen <jh(a)tutpro.com> 05/03/05 11:58AM >>> >Klaus Darilion writes: > > > What would be a normal (out-of-dialog) check? > >the same checks you do for initial requests that don't have Route >header, i.e., check if domain of request uri is local, authenticate >caller if local, etc. > >-- juha > _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers Unclassified

2 1

Re: [Serusers] Loose routing question
by Juha Heinanen 03 May '05

03 May '05

Cesc Santasusana writes: > For example, Kphone can resend an INV if challenged which contains > the auth-data. On the other hand, if a kphone is the receiver of the > INV, and it hangs up, kphone generates a BYE message which does NOT > contain auth-data. Thus, ser will challlenge the kphone back, kphone > will reply with a CANCEL and resend the BYE without (again) the > auth-data, entering an endless loop. Ain't it funny? bye is not initial request, but in-dialog request. it doesn't make sense to authenticate them, because you may not even know if the sender of bye is your local user or not. for initial requests you always know this and thus can authenticate them. -- juha

1 0

[Serusers] connect to a pstn
by "Sebastian Kühner" 03 May '05

03 May '05

Hello, I am using asterisk to connect to a PSTN-Gateway. I have to register to this pstn gateway before passing calls with: [broadvoice] type=friend username=xxxxxxxxxxx fromuser=xxxxxxxxxx secret=xxxxxxxxxx host=sip.broadvoice.com port=5060 context=ext_default dtmfmode=inband fromdomain=sip.broadvoice.com canreinvite=no dtmfmode=inband insecure=very permit=xxx.xxx.xxx.xxx/32 qualify=yes Now I want to put through the calls with ser. Has anyone an idea how to do that in ser? Thanks! Sebastian -- +++ Neu: Echte DSL-Flatrates von GMX - Surfen ohne Limits +++ Always online ab 4,99 Euro/Monat: http://www.gmx.net/de/go/dsl

1 0

[Serusers] Re: [Serdev] Patched free-TLS implementation
by Alex Mack 03 May '05

03 May '05

Hi Cesc! Nice to have those fixes in a package. Is your cfg.y-patch to be applied *after* cfg.y.patch was applied or *instead* of cfg.y.patch? Or is your version a patched one which replaces the original implementation as a whole? In that case where's cfg.lex.patch? Alex Mack Cesc Santasusana schrieb: >Hi, > >I really hate to be so pushy, but i dont understand how such an important piece of code as TLS is not moving on into CVS ... or anywhere else by this matter. I will keep sending patches till i get tired (soon). > >Anyway ... i thought someone may be interested in a compilation fix for cfg.y introduced with the tls_domains (it would not compile if the cfg.y file had been patched but the tls-core files were not there); a bug fix for the session caching (fixed by turning session caching and resumption off); and an extension (the ability to choose the list of allowed ciphers from the config file). Oh, and all the files have been tabbed, instead of spaced (for indentation). > >Enjoy! > >Cesc > >Unclassified > > > >------------------------------------------------------------------------ > >_______________________________________________ >Serdev mailing list >serdev(a)lists.iptel.org >http://lists.iptel.org/mailman/listinfo/serdev > >

2 1

Re: [Serusers] Proxy-to-Proxy authentication
by Victor Huertas Garcia 03 May '05

03 May '05

Thank you very much for your answer, Cesc. Now I have an idea about this issue. Regards Victor >From: "Cesc Santasusana" <cesc.santasusana(a)nl.thalesgroup.com> >To: <vhuertas(a)hotmail.com>, <serusers(a)lists.iptel.org> >Subject: Re: [Serusers] Proxy-to-Proxy authentication >Date: Tue, 03 May 2005 10:53:06 +0200 > >Hi, > >TLS was meant exactly for that. The RFC specifies it as a hop by hop >security (auth + crypto) mechanism > >I think SER has a module that allows it to authenticate via Digest (UAC >module). I have not tried it, because with the availability of a free TLS >implementation for SER, and TLS being a mandatory feature for proxies ... >why go along with such an simple mechanism as digest? > >The only poblem many people see with using tls is that it requires a tcp >connection, thus for high traffic servers it may be a problem (though u can >use force_tcp_alias, and reuse the same socket for same P2P connections, >thus reducing the connection setup delay associated with tcp and specially >with tls). > >If tcp/tls is not an option in your network, then probably you could think >of IPSec (works for both tcp and udp) ... or maybe you want to implement >something fancier ... say ... tunnel SIP messages withing S/MIME protected >sip messages :D > >Regards, > >Cesc > > >>> "Victor Huertas Garcia" <vhuertas(a)hotmail.com> 05/02/05 06:01PM >>> > > >Hi all! > >I'm newie in this mailing list and I am working with SER at this momen in a >project. > >However I have a doubt I would like to clarify. > >Does anyone know if there is a way to perform SIP Proxy to SIP Proxy >authentication (I mean in SIP protocol in general)? > >If a SIP proxy receives an INVITE from another SIP Proxy, how does the >proxy >which receives the INVITE that the originating proxy can be trusted? > >I have read something about TLS but I took it from an article of 2003... >Which is the most used method nowadays? > >Thank you very much for your attentio > >Regards > >Victor >Unclassified > >_______________________________________________ >Serusers mailing list >serusers(a)lists.iptel.org >http://lists.iptel.org/mailman/listinfo/serusers >

1 0

[Serusers] [Serdev] Patched free-TLS implementation
by Juha Heinanen 03 May '05

03 May '05

Cesc Santasusana writes: > I really hate to be so pushy, but i dont understand how such an > important piece of code as TLS is not moving on into CVS ... or > anywhere else by this matter. I will keep sending patches till i get > tired (soon). before cesc gets tired, could someone please commit the tls code to CVS HEAD. it is then much easier to patch against. -- juha

1 0

[Serusers] Patched free-TLS implementation
by Cesc Santasusana 03 May '05

03 May '05

Hi, I really hate to be so pushy, but i dont understand how such an important piece of code as TLS is not moving on into CVS ... or anywhere else by this matter. I will keep sending patches till i get tired (soon). Anyway ... i thought someone may be interested in a compilation fix for cfg.y introduced with the tls_domains (it would not compile if the cfg.y file had been patched but the tls-core files were not there); a bug fix for the session caching (fixed by turning session caching and resumption off); and an extension (the ability to choose the list of allowed ciphers from the config file). Oh, and all the files have been tabbed, instead of spaced (for indentation). Enjoy! Cesc Unclassified

1 0

[Serusers] NAT with multiple SERs
by Andreas Granig 03 May '05

03 May '05

Hi all! We've two SERs balanced via DNS-SRV, and Contacts are replicated via SIP between the Registrars. Now I've implemented transparent NAT support, but there's a "small" problem :o) Let's say UAC-1 registers at SER-1, which replicates the contact to SER-2. Outgoing calls from UAC-1 via SER-1 or SER-2 work great, and so do calls from PSTN via SER-1 to UAC-1. But since there's no NAT-binding for UAC-1 to SER-2, incoming calls from SER-2 to UAC-1 can't work. Does anybody know how to address this issue? Thanks, Andy

5 26

[Serusers] exec_dset problem
by karl 03 May '05

03 May '05

Hi, has anybody came across this strange problem? when I am using exec_dset to fork my request to more than 3 additional URIs (actually PSTN locations through my gateway), ser is only forking to the last three. Furthermore it seems that this limitation is not present when using the lookup function to fork a request to multiple registered sip locations. This leads me to think that this problem is not associated with the MAX_BRANCHES in config.h file --------------------------------- Do you Yahoo!? Yahoo! Small Business - Try our new resources site!

1 1

Re: [Serusers] Proxy-to-Proxy authentication
by Cesc Santasusana 03 May '05

03 May '05

Hi, TLS was meant exactly for that. The RFC specifies it as a hop by hop security (auth + crypto) mechanism I think SER has a module that allows it to authenticate via Digest (UAC module). I have not tried it, because with the availability of a free TLS implementation for SER, and TLS being a mandatory feature for proxies ... why go along with such an simple mechanism as digest? The only poblem many people see with using tls is that it requires a tcp connection, thus for high traffic servers it may be a problem (though u can use force_tcp_alias, and reuse the same socket for same P2P connections, thus reducing the connection setup delay associated with tcp and specially with tls). If tcp/tls is not an option in your network, then probably you could think of IPSec (works for both tcp and udp) ... or maybe you want to implement something fancier ... say ... tunnel SIP messages withing S/MIME protected sip messages :D Regards, Cesc >>> "Victor Huertas Garcia" <vhuertas(a)hotmail.com> 05/02/05 06:01PM >>> Hi all! I'm newie in this mailing list and I am working with SER at this momen in a project. However I have a doubt I would like to clarify. Does anyone know if there is a way to perform SIP Proxy to SIP Proxy authentication (I mean in SIP protocol in general)? If a SIP proxy receives an INVITE from another SIP Proxy, how does the proxy which receives the INVITE that the originating proxy can be trusted? I have read something about TLS but I took it from an article of 2003... Which is the most used method nowadays? Thank you very much for your attentio Regards Victor Unclassified _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

1 0

[Serusers] SER-0.9.1 + MediaProxy + Cisco3600
by smy＠addm.com 03 May '05

03 May '05

Hi all, I'm a newbie and I've been searching through the entire mailing (including www.onsip.org) for a solution regarding landing of calls to a Cisco 3600 GW. I've configured my SER based on the "Getting Started for mediaproxy" document found on www.onsip.org, and it worked great between UAs. Based on all the info I've found on this list + suggestions from others, I came up with the following config file. I've managed to have the UAs to dial out via the cisco, yet once the PSTN side picks up, no sound could be heard (both ways). I know the Cisco is working for sure, since my friend is using AUVTECH SIP Server and is landing calls properly via the same gateway. I'm greatful for any help on this issue!! ================================================================== route { if (!mf_process_maxfwd_header("10")) { sl_send_reply("483", "Too Many Hops"); break; }; if (msg:len > max_len) { sl_send_reply("513", "Message Overflow"); break; }; if (method=="INVITE" && client_nat_test("1")) { record_route_preset("202.67.215.28:5080;nat=yes"); # insert IP address } else if (method!="REGISTER") { record_route(); }; end_media_session(); }; if (loose_route()) { if (has_totag() && method=="INVITE") { if (client_nat_test("1") || search("^Route:.*;nat=yes")) { setflag(6); use_media_proxy(); }; }; route(1); break; }; # labeled all transaction for accounting setflag(1); setflag(2); # ----------------------------------------------------------------- # Call Type Processing Section # ----------------------------------------------------------------- if (uri==myself) { if (method=="INVITE") { route(3); break; } else if (method=="REGISTER") { route(2); break; }; if (!lookup("location")) { sl_send_reply("404", "User Not Found"); break; }; route(1); }; } route[1] { # ----------------------------------------------------------------- # Default Message Handler # ----------------------------------------------------------------- t_on_reply("1"); if (!t_relay()) { if (method=="INVITE" || method=="ACK") { end_media_session(); }; sl_reply_error(); }; } route[2] { # ----------------------------------------------------------------- # REGISTER Message Handler # ---------------------------------------------------------------- sl_send_reply("100", "Trying"); # ----------------------------------------------------------------- # Testing script for unconditional registration of PSTN gateway # ----------------------------------------------------------------- #if (src_ip==61.234.124.150){ # save("location_cscisco3600"); #}; # ----------------------------------------------------------------- if (!search("^Contact: \*") && client_nat_test("1")) { setflag(6); fix_nated_register(); force_rport(); }; if (!www_authorize("","subscriber")) { www_challenge("","0"); break; }; if (!check_to()) { sl_send_reply("401", "Unauthorized"); break; }; consume_credentials(); if (!save("location")) { sl_reply_error(route[3] { # ----------------------------------------------------------------- # INVITE Message Handler # ----------------------------------------------------------------- if (client_nat_test("1")) { setflag(7); force_rport(); fix_nated_contact(); }; # ----------------------------------------------------------------- # INVITE Message Handler # ----------------------------------------------------------------- #if (lookup("location_cscisco3600"){ # t_relay_to_udp("61.234.124.150"); # } # ----------------------------------------------------------------- lookup("aliases"); if (uri!=myself) { route(1); break; }; # -------------------------------------------------------- # PSTN Gateway config for Call Landing # -------------------------------------------------------- if (uri=~"^sip:8676[0-9]*@.*") { #rewritehostport("211.147.240.67:5060"); #rewritehostport("210.21.105.91:5060"); setflag(1); rewritehostport("61.234.124.150:5060"); force_rport(); #fix_nated_contact(); #force_rtp_proxy(); #t_relay(); #use_media_proxy(); # forward(uri:host, uri:port); if (!t_relay()) { sl_reply_error(); }; ); break; } # --------------------------------------------------------- if (!lookup("location")) { sl_send_reply("404", "User Not Found"); break; }; if (!proxy_authorize("","subscriber")) { proxy_challenge("","0"); break; } else if (!check_from()) { sl_send_reply("403", "Use From=ID"); break; }; consume_credentials(); if (isflagset(6) || isflagset(7)) { use_media_proxy(); }; route(1); } onreply_route[1] { if ((isflagset(6) || isflagset(7)) && (status=~"(180)|(183)|2[0-9][0-9]")) { if (!search("^Content-Length:\ 0")) { use_media_proxy(); }; }; if (client_nat_test("1")) { fix_nated_contact(); }; } }; } ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

1 0

[Serusers] Cannot open Serweb pages
by Alexandros Hatziandreou 03 May '05

03 May '05

Hello, I desperately need to run a ser installation... After reading through the instructions, I have finally managed to make ser work. After that, I also followed the instructions and mysql seems to be working fine as well. (at least I can see the users I added so that should be a good sign!) Now I am trying to configure serweb so that others can connect to my sip server and add themselves etc but try as I may, I can not get it to work... I have made all the changes to the php files as suggested by the manual but when I try to open any of the webpages at the webserver's address all I get is : Database error: pconnect(localhost,administrator(a)oug.gr, $Password) failed. MYSQL Error: () Session halted. What is this? Can someone please help? Thanks you very much in advance, Alexandros.

1 0

[Serusers] softphone
by Ernesto Lucero 03 May '05

03 May '05

Hi Does anybody have any softphones for free to use with sip Thanks Ernesto Lucero Valadez

5 4

[Serusers] Re: [Serdev] Problem with Via Branch/Strange Looping Problem with ACK's
by reticent 03 May '05

03 May '05

For reference: The "Cisco_7960" traces exhibit strict_routing, and shows the SER looping problem The "Ambit_vg20" traces show the proper (RFC3261, Reference #1 at the bottom of the email) behaviour and works perfectly. *SER_SIP_PROXY*:15061 is SER *SER_SIP_PROXY*:5080 is Asterisk Both SER and Asterisk are on the same server *SIP_UAC* is the client device There are two traces for each session, one taken from the external interface (ETH0) and one from loopback (LO) In the "Cisco_7960" traces, the Cisco 7960 responds to the session initiating "200 OK" with an ACK that seems to follow Strict Routing behaviour. The issue is that the ACK does NOT match the loose_route() statement in the SER config and eventually hits a t_relay, however the RURI is that of the SER proxy itself so it routes to itself over and over again. What i expect is that it should hit loose_route() (or perhaps strict_route() ), which should replace the RURI with the information in the "Route:" header which would allow it to be properly routed to its destination. This same problem seems to happen with BYE messages as well (same situation and results) ----------------------- Reference #1: Section 12.1.2 of RFC3261 states: -- The route set MUST be set to the list of URIs in the Record-Route header field from the response, taken in reverse order and preserving all URI parameters. If no Record-Route header field is present in the response, the route set MUST be set to the empty set. This route set, even if empty, overrides any pre-existing route set for future requests in this dialog. The remote target MUST be set to the URI from the Contact header field of the response. --

2 1

Re: [Serusers] Testing
by harry gaillac 03 May '05

03 May '05

I'm in France. Can you provide me your domain and you sip address where i may call you . Do you set up srv and naptr records ? My domain : nxs.yi.org My address: sip:bob@nxs.yi.org however my name is harry . Sorry I don't speak english fluently but it's just for testing . Can send me back reply at 3:00 PM it's early in France Regards Harry --- "Edgardo O. Gonzales II" <edgardo.g(a)pacific.net.ph> a écrit: > > sounds great .. so how do we start .. what are the > parameters you need so > that I can set it up .. by the way > where is your location .. > can you provide me the ip address of your server so > that I can check > routings and latency from my location .. > > thanks, > ed > > At 11:37 AM 5/3/2005, harry gaillac wrote: > >I would be happy to participate > > > >Harry > > > >--- "Edgardo O. Gonzales II" > ><edgardo.g> a écrit: > > > > > > > > > Hi! > > > > > > We're done with the basic configuration of ser > as > > > voip gateway .. This > > > time, were now > > > on the stage of testing.. Anyone on the list > wanted > > > to participate .. We > > > will try > > > to setup gateway to gateway connection .. > > > > > > Need it asap.. > > > > > > > > > thanks, > > > ed > > > > > > _______________________________________________ > > > Serusers mailing list > > > serusers(a)lists.iptel.org > > > http://lists.iptel.org/mailman/listinfo/serusers > > > > > > > > > > > > > > > > >__________________________________________________________________ > >Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace > de stockage pour vos > >mails ! > >Créez votre Yahoo! Mail sur > http://fr.mail.yahoo.com/ > > __________________________________________________________________ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/

2 1

[Serusers] Testing
by Edgardo O. Gonzales II 03 May '05

03 May '05

Hi! We're done with the basic configuration of ser as voip gateway .. This time, were now on the stage of testing.. Anyone on the list wanted to participate .. We will try to setup gateway to gateway connection .. Need it asap.. thanks, ed

1 0

[Serusers] ser-0.9.1 stable release
by Java Rockx 02 May '05

02 May '05

Hi All. Now that it's May can anyone say when ser-0.9.1 will be promoted to stable? Regards, Paul

2 2

[Serusers] serweb problem
by jurugy foerijgoi 02 May '05

02 May '05

2 1

[Serusers] don't succeed the install
by michael p 02 May '05

02 May '05

hi everybody i don't succeed to install ser on my debian written: "... dev:/var/www/dev/michael# dpkg -i ser_0.8.14_i386.deb (Lecture de la base de données... 45264 fichiers et répertoires déjà installés.) Préparation du remplacement de ser 0.8.14 (en utilisant ser_0.8.14_i386.deb) ... Stopping ser: ser. Dépaquetage de la mise à jour de ser ... Paramétrage de ser (0.8.14) ... Restarting ser: serERROR: loading config file(/etc/ser/ser.cfg): No such file or directory invoke-rc.d: initscript ser, action "restart" failed. ser failed to (re)start. Perhaps your configuration requires additional modules (e.g. ser-mysql-module, ser-jabber-module or ser-radius-modules). Next try to install any additional ser modules you might need and then (re)start ser by executing the command '/etc/init.d/ser start|restart'. ..." i try to install ser-mysql-module but it doesn't change please help me thanks Michael ps: the install notes are not very well understanding . is there something else?

2 1

[Serusers] HELP ser with mysql 4 won't start
by Ertugrul Akyurek 02 May '05

02 May '05

Hi all I am a newbee to linux but I have to install and run ser. I did it before with mysql 3.23 that comes with FC 3 and ser ver. was 8.1.14 Now I am on suse 9.1, sql 4 and I tried 8.1.14, 8.8, 8.9 and 9.0. I don't know which one now, but one of these asked for libmysqlclien.so.10 but I had 12 so I symlinked 10 to 12 with ln -s libmysqlclien.so.12 libmysqlclien.so.10 Now I am trying 8.1.14 and here is my conf file: # # $Id: ser.cfg,v 1.21.4.1 2003/11/10 15:35:15 andrei Exp $ # # simple quick-start config script # # ----------- global configuration parameters ------------------------ debug=7 # debug level (cmd line: -dddddddddd) fork=no log_stderror=yes # (cmd line: -E) /* Uncomment these lines to enter debugging mode debug=7 fork=no log_stderror=yes */ check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) #port=5060 #children=4 fifo="/tmp/ser_fifo" # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- modparam("usrloc", "db_mode", 2) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line #modparam("usrloc", "db_mode", 2) # -- auth params -- # Uncomment if you are using auth module # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # modparam("auth_db", "password_column", "password") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if ( msg:len > max_len ) { sl_send_reply("513", "Message too big"); break; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol record_route(); # loose-route processing if (loose_route()) { t_relay(); break; }; # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri==myself) { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication if (!www_authorize("my_ip", "subscriber")) { www_challenge("my_ip", "0"); break; }; save("location"); break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; # forward to current uri now; use stateful forwarding; that # works reliably even if we forward from TCP to UDP if (!t_relay()) { sl_reply_error(); }; } _______________________________________________________________ And here is what I get (the important part I believe): Listening on 160.75.114.107 [160.75.114.107]:5060 Aliases: konak:5060 konak.vadi:5060 WARNING: no fork mode 0(11307) DEBUG: init_mod: mysql 0(11307) mysql - initializing 0(11307) DEBUG: init_mod: sl_module stateless - initializing 0(11307) DEBUG: register_fifo_cmd: new command (sl_stats) registered 0(11307) DEBUG: MD5 calculated: 35f101c4519482cd72086674c284d714 0(11307) DEBUG: init_mod: tm 0(11307) TM - initializing... 0(11307) Call-ID initialization: '7f7e7deb' 0(11307) DEBUG: register_fifo_cmd: new command (t_uac_dlg) registered 0(11307) DEBUG: register_fifo_cmd: new command (t_uac_cancel) registered 0(11307) DEBUG: register_fifo_cmd: new command (t_hash) registered 0(11307) DEBUG: lock_initialize: lock initialization started 0(11307) DEBUG: register_fifo_cmd: new command (t_stats) registered 0(11307) DEBUG: MD5 calculated: 16de7e07c182837aae8ddf6ca34bb96f 0(11307) DEBUG: MD5 calculated: 9b4e6e19c32016239a80d97510abe487 0(11307) DEBUG: init_mod: rr 0(11307) rr - initializing 0(11307) DEBUG: init_mod: maxfwd_module Maxfwd module- initializing 0(11307) DEBUG: init_mod: usrloc 0(11307) usrloc - initializing 0(11307) DEBUG: register_fifo_cmd: new command (ul_stats) registered 0(11307) DEBUG: register_fifo_cmd: new command (ul_rm) registered 0(11307) DEBUG: register_fifo_cmd: new command (ul_rm_contact) registered 0(11307) DEBUG: register_fifo_cmd: new command (ul_dump) registered 0(11307) DEBUG: register_fifo_cmd: new command (ul_flush) registered 0(11307) DEBUG: register_fifo_cmd: new command (ul_add) registered 0(11307) DEBUG: register_fifo_cmd: new command (ul_show_contact) registered 0(11307) find_export: found <db_use_table> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_init> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_close> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_query> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_raw_query> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_free_query> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_insert> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_delete> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_update> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) mod_init(): Database connection opened successfuly 0(11307) DEBUG: init_mod: registrar 0(11307) registrar - initializing 0(11307) find_export: found <sl_send_reply> in module sl_module [/usr/local/lib/ser/modules/sl.so] 0(11307) find_export: found <ul_bind_usrloc> in module usrloc [/usr/local/lib/ser/modules/usrloc.so] 0(11307) find_export: found <ul_register_udomain> in module usrloc [/usr/local/lib/ser/modules/usrloc.so] 0(11307) find_export: found <ul_get_all_ucontacts> in module usrloc [/usr/local/lib/ser/modules/usrloc.so] 0(11307) find_export: found <ul_insert_urecord> in module usrloc [/usr/local/lib/ser/modules/usrloc.so] 0(11307) find_export: found <ul_delete_urecord> in module usrloc [/usr/local/lib/ser/modules/usrloc.so] 0(11307) find_export: found <ul_get_urecord> in module usrloc [/usr/local/lib/ser/modules/usrloc.so] 0(11307) find_export: found <ul_lock_udomain> in module usrloc [/usr/local/lib/ser/modules/usrloc.so] 0(11307) find_export: found <ul_unlock_udomain> in module usrloc [/usr/local/lib/ser/modules/usrloc.so] 0(11307) find_export: found <ul_release_urecord> in module usrloc [/usr/local/lib/ser/modules/usrloc.so] 0(11307) find_export: found <ul_insert_ucontact> in module usrloc [/usr/local/lib/ser/modules/usrloc.so] 0(11307) find_export: found <ul_delete_ucontact> in module usrloc [/usr/local/lib/ser/modules/usrloc.so] 0(11307) find_export: found <ul_get_ucontact> in module usrloc [/usr/local/lib/ser/modules/usrloc.so] 0(11307) find_export: found <ul_update_ucontact> in module usrloc [/usr/local/lib/ser/modules/usrloc.so] 0(11307) DEBUG: init_mod: auth 0(11307) auth module - initializing 0(11307) find_export: found <sl_send_reply> in module sl_module [/usr/local/lib/ser/modules/sl.so] 0(11307) DEBUG: init_mod: auth_db 0(11307) auth_db module - initializing 0(11307) find_export: found <db_use_table> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_init> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_close> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_query> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_raw_query> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_free_query> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_insert> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_delete> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <db_update> in module mysql [/usr/local/lib/ser/modules/mysql.so] 0(11307) find_export: found <pre_auth> in module auth [/usr/local/lib/ser/modules/auth.so] 0(11307) find_export: found <post_auth> in module auth [/usr/local/lib/ser/modules/auth.so] 0(11307) find_export: found <sl_send_reply> in module sl_module [/usr/local/lib/ser/modules/sl.so] 0(0) fixing /usr/local/lib/ser/modules/maxfwd.so mf_process_maxfwd_header 0(0) fixing /usr/local/lib/ser/modules/sl.so sl_send_reply 0(0) fixing /usr/local/lib/ser/modules/sl.so sl_send_reply 0(0) fixing /usr/local/lib/ser/modules/rr.so record_route 0(0) fixing /usr/local/lib/ser/modules/rr.so loose_route 0(0) fixing /usr/local/lib/ser/modules/tm.so t_relay 0(0) fixing /usr/local/lib/ser/modules/auth_db.so www_authorize 0(0) fixing /usr/local/lib/ser/modules/auth.so www_challenge 0(0) fixing /usr/local/lib/ser/modules/registrar.so save 0(0) query="select username,contact,expires,q,callid,cseq,replicate,state,flags,user_agent from location " 0(0) preload_udomain(): Table is empty 0(0) fixing /usr/local/lib/ser/modules/registrar.so lookup 0(0) fixing /usr/local/lib/ser/modules/sl.so sl_send_reply 0(0) fixing /usr/local/lib/ser/modules/tm.so t_relay 0(0) fixing /usr/local/lib/ser/modules/sl.so sl_reply_error 0(0) INFO: udp_init: SO_RCVBUF is initially 111616 0(0) DEBUG: udp_init: trying SO_RCVBUF: 223232 0(0) DEBUG: setting SO_RCVBUF; set=223232,verify=223232 0(0) DEBUG: udp_init: trying SO_RCVBUF: 225280 0(0) DEBUG: setting SO_RCVBUF; set=225280,verify=223232 0(0) DEBUG: setting SO_RCVBUF has no effect 0(0) INFO: udp_init: SO_RCVBUF is finally 223232 1(11309) DBG: open_uac_fifo: opening fifo... 1(11309) DEBUG: FIFO created @ /tmp/ser_fifo 1(11309) DEBUG: fifo /tmp/ser_fifo opened, mode=432 1(11309) DEBUG: init_mod_child (-1): tm 1(11309) DEBUG: callid: '7f7e7deb-11309(a)160.75.114.107' 1(11309) DEBUG: init_mod_child (-1): usrloc 1(11309) DEBUG: init_mod_child (-1): auth_db 1(11309) connect_db(): No enough memory 1(11309) db_init(): Error while trying to connect database 1(11309) auth_db:init_child(): Unable to connect database 1(11309) init_mod_child(): Error while initializing module auth_db 1(11309) timer: init_child failed 1(11309) INFO: signal 15 received 1(11309) Memory status (pkg): 1(11309) fm_status (0x80d9840): 1(11309) heap size= 1047440 1(11309) dumping free list: 1(11309) hash = 1 fragments no.: 3, bucket size: 8 - 8 (first 8) 1(11309) hash = 2 fragments no.: 1, bucket size: 16 - 16 (first 16) 1(11309) hash = 3 fragments no.: 1, bucket size: 24 - 24 (first 24) 1(11309) hash = 5 fragments no.: 2, bucket size: 40 - 40 (first 40) 1(11309) hash = 24 fragments no.: 1, bucket size: 192 - 192 (first 192) 1(11309) hash = 265 fragments no.: 1, bucket size: 524288 - 1048576 (first 0) 1(11309) TOTAL: 9 free fragments = 336 free bytes 1(11309) ----------------------------- 2(11310) INFO: SIGCHLD received: we do not worry about grand-children 2(11310) INFO: fifo process starting: 11310 2(11310) DEBUG: init_mod_child (-2): tm 2(11310) DEBUG: callid: '7f7e7deb-11310(a)160.75.114.107' 2(11310) DEBUG: init_mod_child (-2): usrloc 2(11310) DEBUG: init_mod_child (-2): auth_db 2(11310) connect_db(): No enough memory 2(11310) db_init(): Error while trying to connect database 2(11310) auth_db:init_child(): Unable to connect database 2(11310) init_mod_child(): Error while initializing module auth_db 2(11310) ERROR: open_uac_fifo: init_child failed 2(11310) opening fifo server failed 2(11310) INFO: signal 15 received 2(11310) Memory status (pkg): 2(11310) fm_status (0x80d9840): 2(11310) heap size= 1047440 2(11310) dumping free list: 2(11310) hash = 1 fragments no.: 3, bucket size: 8 - 8 (first 8) 2(11310) hash = 2 fragments no.: 1, bucket size: 16 - 16 (first 16) 2(11310) hash = 3 fragments no.: 1, bucket size: 24 - 24 (first 24) 2(11310) hash = 5 fragments no.: 2, bucket size: 40 - 40 (first 40) 2(11310) hash = 24 fragments no.: 1, bucket size: 192 - 192 (first 192) 2(11310) hash = 265 fragments no.: 1, bucket size: 524288 - 1048576 (first 0) 2(11310) TOTAL: 9 free fragments = 336 free bytes 2(11310) ----------------------------- 2(11310) INFO: SIGCHLD received: we do not worry about grand-children 2(11310) INFO: signal 2 received 2(11310) Memory status (pkg): 2(11310) fm_status (0x80d9840): 2(11310) heap size= 1047440 2(11310) dumping free list: 2(11310) hash = 1 fragments no.: 3, bucket size: 8 - 8 (first 8) 2(11310) hash = 3 fragments no.: 1, bucket size: 24 - 24 (first 24) 2(11310) hash = 5 fragments no.: 2, bucket size: 40 - 40 (first 40) 2(11310) hash = 24 fragments no.: 1, bucket size: 192 - 192 (first 192) 2(11310) hash = 265 fragments no.: 1, bucket size: 524288 - 1048576 (first 0) 2(11310) TOTAL: 8 free fragments = 320 free bytes 2(11310) ----------------------------- I am sure I have enough memory, I actually can't even make any meaning of this error message. When I start ser in normal mode (not debug) it says it is listening and serctl moni is cycling all well, but the server doesn't seem to run then either. Please at least offer me something to try. So far I had many problems with this but I overcame them one by one but I am totally desperate against this one. And please don't forget that I am a newbee at linux Thanx already Ertugrul

2 1

[Serusers] sorry -- cannot open write fifo
by Ramakrishnan_S 02 May '05

02 May '05

Hi I have installed latest version of SER. I have been getting this error message "sorry -- cannot open write fifo" . There is a permission on the FIFO for httpd process to read and write. But still I am getting error. Any pointers for to resolve this will be helpful. Can any one help please. Thanks Rama DISCLAIMER: This email (including any attachments) is intended for the sole use of the intended recipient/s and may contain material that is CONFIDENTIAL AND PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying or distribution or forwarding of any or all of the contents in this message is STRICTLY PROHIBITED. If you are not the intended recipient, please contact the sender by email and delete all copies; your cooperation in this regard is appreciated.

3 2

[Serusers] Forcing TCP using exec_dset?
by Evan Borgström 02 May '05

02 May '05

Hey All, We've got SER deployed as a man in the middle proxy situation where both sides need to be talking TCP. The problem here is that there is a LOT of NAT going on between the client and the eventual end point that unfortunately cannot be removed from the situation. Right now I've got everything fixed up and working for whenever clients send messages so that all the fixing up and rewriting takes place and then transaction kicks in and the rest of the dialog completes as expected. The problem comes in when the far end server sends a message to the client. I've got a script on the backend that builds the correct URI and passes it back to ser using exec_dset, the only problem is that exec_dset() followed by t_relay() forces the packet to be sent via UDP, which the client is not expecting and thus it times out. I've tried appending ;transport=tcp to the URI that the script returns however I get routing errors when I do this. Is there anyway (without using t_relay_to_tcp()) to force the packets being sent to use TCP? -Evan

1 0

[Serusers] error: 400; check if you use aliases in SER
by Leon Sun 02 May '05

02 May '05

Hi, I am using ser 0.9.0 and ser is working with Mysql auth without problem. I can login with default user 'admin' and password 'heslo'. I received an error 'error: 400; check if you use aliases in SER' when I tried to use 'serctl add leonsun leonsun leonsun(a)mydomain.com'. If I went to Mysql and inserted user and password into subscriber manually, I could use it to login. The funny thing is there is always this message whenever I input right or wrong password. [root@sip ser]# serctl add leonsun leonsun leonsun(a)mydomain.com MySql password: #any input whatever it's correct or not error: 400; check if you use aliases in SER Could anyone please advice? Thanks

1 0

RE: [Serusers] check_ser plugin for nagios.
by Ricardo Martinez 02 May '05

02 May '05

Hello. Thanks for your answers. Finally i was able to monitor my SER with NAGIOS and SIPSAK, maybe not a easy task for those who never used NAGIOS. I'm aware that sipsak support NAGIOS compliant responses, but despite of this the interaction between NAGIOS and SIPSAK is not so clear. I used the script that i found in http://lists.iptel.org/pipermail/serusers/2004-January/005195 with some modifications for the anwswers. I would like to ask one more question. What other kind of test would be useful to monitor SER using NAGIOS? Can i use sipsak to monitor a B2BUA? Thanks! Ricardo.- > -----Mensaje original----- > De: Matt Schulte [mailto:mschulte@netlogic.net] > Enviado el: Lunes, 02 de Mayo de 2005 11:45 > Para: Edgardo O. Gonzales II; Ricardo Martinez; serusers(a)lists.iptel.org > Asunto: RE: [Serusers] check_ser plugin for nagios. > > > I just implemented sipsak this morning for Nagios, sipsak natively > supports Nagios compliant responses. This accomplishes the following > that check_tcp doesn't. > > layer7 response (layer3 is fine and dandy but why not go all the way) > checks for correct callflow > checks authentication (if needed??) > > > Ironically enough I just slapped it in and it works fine. > sample syntax: > sipsak -s sip:+10005551234@full.uri.blah -H your.local.hostname -u > sip_user -a sip_password -N > > The -N makes it respond in compliance to Nagios. > > > -----Original Message----- > From: Edgardo O. Gonzales II [mailto:edgardo.g@pacific.net.ph] > Sent: Friday, April 29, 2005 7:37 PM > To: Ricardo Martinez; 'serusers(a)lists.iptel.org' > Subject: Re: [Serusers] check_ser plugin for nagios. > > > > use the tcp check on nagios then monitor the port ex : 5060 > > thanks, > ed > > At 04:05 AM 4/30/2005, Ricardo Martinez wrote: > >Hello list. > > I'm trying to use nagios to check my ser status, so far i > >found a script in : > >http://lists.iptel.org/pipermail/serusers/2004-January/005195. html and >i tested it without any luck. Does someone have any check_ser that >works ok?. I will really appreciate. > >Thanks > >Ricardo Martinez.- > >_______________________________________________ >Serusers mailing list >serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

1 0

[Serusers] installing php
by Llanos Serna García-Conde 02 May '05

02 May '05

1 0

[Serusers] Proxy-to-Proxy authentication
by Victor Huertas Garcia 02 May '05

02 May '05

Hi all! I'm newie in this mailing list and I am working with SER at this momen in a project. However I have a doubt I would like to clarify. Does anyone know if there is a way to perform SIP Proxy to SIP Proxy authentication (I mean in SIP protocol in general)? If a SIP proxy receives an INVITE from another SIP Proxy, how does the proxy which receives the INVITE that the originating proxy can be trusted? I have read something about TLS but I took it from an article of 2003... Which is the most used method nowadays? Thank you very much for your attentio Regards Victor

1 0

[Serusers] ser to asterisk (another domain)
by "Sebastian Kühner" 02 May '05

02 May '05

Hello, I want to make a call from ser to asterisk but it doesn't work. My asterisk-Server is running on 192.168.1.222 and my ser-Server on 192.168.1.223. If I want to make a call to sip:12@192.168.1.222 there appears the message: "Proxy Authentication Required". For routing to asterisk I use the following code: if (!(uri==myself)) { route(2); break; }; route[2] { # outbound requests are allowed only for registered BigU users if (!(src_ip==192.168.1.223) & !(proxy_authorize("192.168.1.223", "subscriber"))) { # ACK and CANCEL have no security mechanisms so they are just # noted /*if (method=="ACK" | method=="BYE") { log(1, "LOG: failed outbound authentication for ACK granted\n"); } else if (method=="CANCEL") { log(1, "LOG: failed outbound authentication for CANCEL granted\n"); }else {*/ proxy_challenge("192.168.1.223", "0"); break; #}; }; # to maintain credibility of our proxy, we check From in INVITEs if (!src_ip==192.168.1.223 & method=="INVITE" & !check_from()) { log(1, "LOG: Spoofed from attempt\n"); sl_send_reply("403", "Use From=id next time"); break; }; append_hf("P-hint: OUTBOUND ON INTERNET\r\n"); if (!t_relay()) { sl_reply_error(); break; }; } Thanks! -- +++ Neu: Echte DSL-Flatrates von GMX - Surfen ohne Limits +++ Always online ab 4,99 Euro/Monat: http://www.gmx.net/de/go/dsl

1 0

[Serusers] RE: confirm a7b970894e016f5f9dd51266a05184244f831ebc
by Victor Huertas Garcia 02 May '05

02 May '05

>From: serusers-request(a)lists.iptel.org >Reply-To: serusers-request(a)lists.iptel.org >To: vhuertas(a)hotmail.com >Subject: confirm a7b970894e016f5f9dd51266a05184244f831ebc >Date: Mon, 02 May 2005 17:50:52 +0200 > >Mailing list subscription confirmation notice for mailing list >Serusers > >We have received a request from 213.170.46.30 for subscription of your >email address, "vhuertas(a)hotmail.com", to the serusers(a)lists.iptel.org >mailing list. To confirm that you want to be added to this mailing >list, simply reply to this message, keeping the Subject: header >intact. Or visit this web page: > > >http://lists.iptel.org/mailman/confirm/serusers/a7b970894e016f5f9dd51266a05… > > >Or include the following line -- and only the following line -- in a >message to serusers-request(a)lists.iptel.org: > > confirm a7b970894e016f5f9dd51266a05184244f831ebc > >Note that simply sending a `reply' to this message should work from >most mail readers, since that usually leaves the Subject: line in the >right form (additional "Re:" text in the Subject: is okay). > >If you do not wish to be subscribed to this list, please simply >disregard this message. If you think you are being maliciously >subscribed to the list, or have any other questions, send them to >serusers-owner(a)lists.iptel.org.

1 0

RE: [Serusers] check_ser plugin for nagios.
by Matt Schulte 02 May '05

02 May '05

I just implemented sipsak this morning for Nagios, sipsak natively supports Nagios compliant responses. This accomplishes the following that check_tcp doesn't. layer7 response (layer3 is fine and dandy but why not go all the way) checks for correct callflow checks authentication (if needed??) Ironically enough I just slapped it in and it works fine. sample syntax: sipsak -s sip:+10005551234@full.uri.blah -H your.local.hostname -u sip_user -a sip_password -N The -N makes it respond in compliance to Nagios. -----Original Message----- From: Edgardo O. Gonzales II [mailto:edgardo.g@pacific.net.ph] Sent: Friday, April 29, 2005 7:37 PM To: Ricardo Martinez; 'serusers(a)lists.iptel.org' Subject: Re: [Serusers] check_ser plugin for nagios. use the tcp check on nagios then monitor the port ex : 5060 thanks, ed At 04:05 AM 4/30/2005, Ricardo Martinez wrote: >Hello list. > I'm trying to use nagios to check my ser status, so far i >found a script in : >http://lists.iptel.org/pipermail/serusers/2004-January/005195.html and >i tested it without any luck. Does someone have any check_ser that >works ok?. I will really appreciate. > >Thanks > >Ricardo Martinez.- > >_______________________________________________ >Serusers mailing list >serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers _______________________________________________ Serusers mailing list serusers(a)lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers

1 0

[Serusers] ser to asterisk
by "Sebastian Kühner" 02 May '05

02 May '05

Hello, I want to make a call from ser to asterisk but it doesn't work. My asterisk-Server is running on 192.168.1.222 and my ser-Server on 192.168.1.223. If I want to make a call to sip:12@192.168.1.222 there appears the message: "Proxy Authentication Required". For routing to asterisk I use the following code: if (!(uri==myself)) { route(2); break; }; route[2] { # outbound requests are allowed only for registered BigU users if (!(src_ip==192.168.1.223) & !(proxy_authorize("192.168.1.223", "subscriber"))) { # ACK and CANCEL have no security mechanisms so they are just # noted /*if (method=="ACK" | method=="BYE") { log(1, "LOG: failed outbound authentication for ACK granted\n"); } else if (method=="CANCEL") { log(1, "LOG: failed outbound authentication for CANCEL granted\n"); }else {*/ proxy_challenge("192.168.1.223", "0"); break; #}; }; # to maintain credibility of our proxy, we check From in INVITEs if (!src_ip==192.168.1.223 & method=="INVITE" & !check_from()) { log(1, "LOG: Spoofed from attempt\n"); sl_send_reply("403", "Use From=id next time"); break; }; append_hf("P-hint: OUTBOUND ON INTERNET\r\n"); if (!t_relay()) { sl_reply_error(); break; }; } Thanks! -- +++ Lassen Sie Ihren Gedanken freien Lauf... z.B. per FreeSMS +++ GMX bietet bis zu 100 FreeSMS/Monat: http://www.gmx.net/de/go/mail

1 0

[Serusers] SERWEB problems
by harry gaillac 02 May '05

02 May '05

Hello, I posted to you and serusers mailing list many mails about serweb in the past . You have been adding new features to serweb however I would have liked finding more documentation and roadmap for serweb project . Could you tell me more about XXL ? I downloaded the latest release two day ago (unstable) by hoping it would run well with ser (unstable) . I still wish to test accounting, missed call, message stored, ... but after setting up serweb I get these messages after a user is logged. Regards Harry Warning: require_and_agregate_methods(../../data_layer/method.clear_proxy_xxl.php): failed to open stream: No such file or directory in /var/www/serweb/html/data_layer.php on line 120 Fatal error: require_and_agregate_methods(): Failed opening required '../../data_layer/method.clear_proxy_xxl.php' (include_path='.:/usr/share/php:/usr/share/pear') in /var/www/serweb/html/data_layer.php on line 120 ___________________________________________________________________________________________________ Le nouveau Yahoo! Messenger est arrivé ! Découvrez toutes les nouveautés pour dialoguer instantanément avec vos amis. A télécharger gratuitement sur http://fr.messenger.yahoo.com

1 0

[Serusers] starting SER - ld.preload.so
by Gerard Wagener 02 May '05

02 May '05

Hello, I have some problems with launching SER. When I start it, I receive no error, the return value of SER is 0, but I cannot find SER's PID (ps -A | grep "ser"). when I started SER with strace (strace ser start) I noticed that the access to ld.preload.so fails, because I have no such file. Does anybody know where I can obtain this library? Has the glibc to be pachted? Or is the problem somewhere else? Here's my configuration: Suse Linux 9.3 ser 0.9.0 glibc 2.3.3-118 kernel 2.6.8-24.14 gcc 3.3.4 bison 1.875 flex 2.5.4 make 3.80 sed 4.1.2 coreutils 5.2.1 Ser was installed as follows tar -vzxf ser-0.9.0_src.tar.gz cd ser-0.9.0 make all make install Thanks a lot, G�rard __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

[Serusers] don't succeed the install
by michael p 02 May '05

02 May '05

hi everybody i don't succeed to install ser on my debian written: "... dev:/var/www/dev/michael# dpkg -i ser_0.8.14_i386.deb (Lecture de la base de données... 45264 fichiers et répertoires déjà installés.) Préparation du remplacement de ser 0.8.14 (en utilisant ser_0.8.14_i386.deb) ... Stopping ser: ser. Dépaquetage de la mise à jour de ser ... Paramétrage de ser (0.8.14) ... Restarting ser: serERROR: loading config file(/etc/ser/ser.cfg): No such file or directory invoke-rc.d: initscript ser, action "restart" failed. ser failed to (re)start. Perhaps your configuration requires additional modules (e.g. ser-mysql-module, ser-jabber-module or ser-radius-modules). Next try to install any additional ser modules you might need and then (re)start ser by executing the command '/etc/init.d/ser start|restart'. ..." i try to install ser-mysql-module but it doesn't change please help me thanks Michael ps: the install notes are not very well understanding . is there something else?

1 0

[Serusers] sorry about misspelling
by Ertugrul Akyurek 02 May '05

02 May '05

Sorry but at my recent mail I said I wanted to install 8.1.14, obviously there is no ver. like that and I meant 8.14. Sorry about the misspellings and all but it is 4:30 am here :)

1 0

[Serusers] Cant see other activity aside from INVITE
by Edgardo O. Gonzales II 01 May '05

01 May '05

Hi! My accounting is working but im wondering why its only logging INVITE activity.. Where is the other activity. Here's the example : | Edgardo Gonzales <sip:edgardo.g@abc.com.ph>;tag=2823768407 | <sip:100@abc.com.ph>;tag=2823768407 | 486 | INVITE | sip:100@abc.com.ph | sip:edgardo.g@210.23.237.236:5060 | sip:edgardo.g@abc.com.ph | sip:100@abc.com.ph | 6314BDAF-C1FC-4122-9E25-E8BD24B339A8(a)210.23.237.236 | edgardo.g | abc.com.ph | 2823768407 | 2823768407 | 2005-05-01 08:09:11 | 2005-05-01 16:09:11 | | Alvin Clavo De Comer <sip:alvin.c@abc.com.ph>;tag=471711666 | <sip:200@abc.com.ph>;tag=471711666 | 486 | INVITE | sip:200@abc.com.ph | sip:alvin.c@210.23.237.151:5060 | sip:alvin.c@abc.com.ph | sip:200@abc.com.ph | A02CF2C7-50B2-4560-A9F6-134AFBB0F125(a)210.23.237.151 | alvin.c | abc.com.ph | 471711666 | 471711666 | 2005-05-01 08:10:39 | 2005-05-01 16:10:39 | I was able to make a call by the way .. Here's my config also on my ser.cfg loadmodule "/usr/lib/ser/modules/acc.so" # -- acc parameters -- modparam("acc", "log_level", 1) modparam("acc", "log_flag", 1) modparam("acc", "log_missed_flag", 3) modparam("acc", "db_url", "mysql://ser:heslo@localhost/ser") modparam("acc", "db_flag", 2) modparam("acc", "failed_transactions", 1) if (!method == "REGISTER" || !method == "INFO" ) { setflag(1); setflag(2); } thanks, ed

1 0

[Serusers] strict_routing() function in rr module, where has it gone?
by reticent 30 Apr '05

30 Apr '05

I have several different UAC's that insist on doing strict routing and this is causing me some moderate issues as i can find no way to deal with the situation on SER. According to the documentation that comes with the "rr" module there is supposed to be a function called "strict_route()" that does exactly what i want (move the value from the "Route:" header into the RURI), however the module does not provide this function. I'm curious if this functionality has been folded into loose_route or if it has simply dissappeared? There is a section in the source code of rr_mod.c that allows you to enable the function "record_route_strict()" and it also talks about enabling "strict_route()" however i have had no success with it. tavis

3 4

RE: [Serusers] ACC into mysql
by Edgardo O. Gonzales II 30 Apr '05

30 Apr '05

thank you so much .. I finally made it work after I rebuild everything just to make sure my installation and compilation is clean .. With regards to call routing, can you give me an example where we can communicate with other gatekeeper thanks, ed At 09:13 PM 4/26/2005, Matt Schulte wrote: >This particular config (I don't think?) won't log to a DB, additionally >you need to setflag(1); somewhere in your config. We tried to set on >"outbound" only originally and didn't have much luck so I set it near the >top. To log to (my)sql you will additionally need to set another flag and >setup similar mod params: > > >modparam("acc", "db_url", "mysql://ser:serro@blah.mysql.haha/dbname") ># Note flag 2, you will need to setflag(1); AND setflag(2); >modparam("acc", "db_flag", 2) >#Note this one logs all failed calls from the invite response, I find it >useful >modparam("acc", "failed_transactions", 1) ># In your route config use something like the following > ># This is pretty much near the top, while ACC won't log reg's or INFO >anyway, I just thought it'd be a little cleaner to have >... >if (!method == "REGISTER" || !method == "INFO" ) { > setflag(1); > setflag(2); >} >... > ># Doing the above ensure everything gets tagged including BYE's. A good >reason why your BYE's may not get ># tagged is possibly because record-route could be relaying the call >before the flag gets set, just a thought.. >-----Original Message----- >From: Edgardo O. Gonzales II [mailto:edgardo.g@pacific.net.ph] >Sent: Tuesday, April 26, 2005 1:29 AM >To: Kofi Obiri-Yeboah >Cc: serusers(a)lists.iptel.org >Subject: RE: [Serusers] ACC into mysql >Importance: High > > >Thanks again for your help .. Here's my running ser.cfg >Hope you can help me make my accounting work.. > >thanks, >ed > >================================================================ ># ----------- global configuration parameters ------------------------ > >#debug=3 >#fork=yes >#log_stderror=no > >#debug=7 >#fork=no >#log_stderror=yes > >check_via=no >dns=no >rev_dns=no >#port=5060 >#children=4 >fifo="/tmp/ser_fifo" > ># ------------------ module loading ---------------------------------- > >loadmodule "/usr/local/ser/lib/ser/modules/mysql.so" >loadmodule "/usr/local/ser/lib/ser/modules/sl.so" >loadmodule "/usr/local/ser/lib/ser/modules/tm.so" >loadmodule "/usr/local/ser/lib/ser/modules/rr.so" >loadmodule "/usr/local/ser/lib/ser/modules/maxfwd.so" >loadmodule "/usr/local/ser/lib/ser/modules/usrloc.so" >loadmodule "/usr/local/ser/lib/ser/modules/registrar.so" >loadmodule "/usr/local/ser/lib/ser/modules/auth.so" >loadmodule "/usr/local/ser/lib/ser/modules/auth_db.so" >loadmodule "/usr/local/ser/lib/ser/modules/acc.so" > ># ----------------- setting module-specific parameters --------------- > ># -- usrloc params -- > >modparam("usrloc", "db_mode", 1) >modparam("usrloc", "db_url","mysql://ser:heslo@localhost/ser") > ># -- auth params -- > >modparam("auth_db", "calculate_ha1", yes) >modparam("auth_db", "password_column", "password") > ># -- rr params -- > >modparam("rr", "enable_full_lr", 1) > ># -- acc params -- > >modparam("acc", "log_level", 1) >modparam("acc", "log_flag", 1) >modparam("acc", "log_missed_flag", 3) > ># ------------------------- request routing logic ------------------- > >alias=abc.com.ph > ># main routing logic > >route{ > if (!mf_process_maxfwd_header("10")) { > sl_send_reply("483","Too Many Hops"); > break; > }; > if ( msg:len > max_len ) { > sl_send_reply("513", "Message too big"); > break; > }; > > record_route(); > if (loose_route()) { > t_relay(); > break; > }; > > if (uri=~"abc.com.ph") { > if (method=="REGISTER") { > if (!www_authorize("abc.com.ph", "subscriber")) { > www_challenge("abc.com.ph", "0"); > break; > }; > > save("location"); > break; > }; > > lookup("aliases"); > > if (!lookup("location")) { > sl_send_reply("404", "Not Found"); > break; > }; > }; > if (!t_relay()) { > sl_reply_error(); > }; > >} > > > > >================================================================ >At 10:55 AM 4/26/2005, Kofi Obiri-Yeboah wrote: >>I am assuming your question is if the record_route() function is a >>parameter for accounting? If that was your question then the answer is >>no. Generally you invoke record_route() to ensure acl acceptance on a >>gateway (i.e. all calls through that gateway) >>-----Original Message----- >>From: Edgardo O. Gonzales II [ mailto:edgardo.g@pacific.net.ph] >>Sent: Monday, April 25, 2005 6:22 PM >>To: Kofi Obiri-Yeboah >>Cc: serusers(a)lists.iptel.org >>Subject: RE: [Serusers] ACC into mysql >> >>Hi Kofi! >>got it.. thanks for immediate feedback .. however my accounting is not >>working. >>any parameters to be added to make it work.. >>I have the following info already on my ser.cfg >>modparam("acc", "log_level", 1) >>modparam("acc", "log_flag", 1) >>modparam("acc", "log_missed_flag", 3) >> >>record_route(); -> its this a parameter for accounting >>thanks, >>ed >> >>At 08:32 AM 4/26/2005, Kofi Obiri-Yeboah wrote: >>>I think the correct modparam statement should read as follows: >>>modparam("acc", "db_url", "mysql://ser:heslo@localhost/ser") >>> >>>please note that "my" is required in front of sql >>> >>>and not: >>>modparam("acc", "db_url", "sql://ser:heslo@localhost/ser") >>> >>>-----Original Message----- >>>From: serusers-bounces(a)iptel.org [ mailto:serusers-bounces@lists.iptel.org]On >>>Behalf Of Edgardo O. Gonzales II >>>Sent: Monday, April 25, 2005 5:20 PM >>>To: serusers(a)lists.iptel.org >>>Subject: Re: [Serusers] ACC into mysql >>> >>>Hi all! >>>Im also receiving this error message. >>>Can somebody help us on how to make accounting work using mysql. >>>thanks, >>>ed >>>At 06:01 AM 4/26/2005, Leon Sun wrote: >>>>Hi, >>>>I am using 0.8.12 in Fedora 3. I tried to log account info into Mysql >>>>followed instruction from manual. I found, first, modparam("acc", >>>>"db_url", "sql://ser:heslo@localhost/ser") coudnlt work at all in >>>>ser.cfg. If I enabled in cfg file, it showed Starting ser: ERROR: bad >>>>config file (1 errors) >>>>If I disabled it, SER worked fine but I couldnt see any record in acc >>>>table. >>>>Would anyone suggest how to put call records into Mysql? >>>>Thank you. >>>> >>>># ----------- global configuration parameters ------------------------ >>>>#debug=3 # debug level (cmd line: -dddddddddd) >>>>#fork=yes >>>>#log_stderror=no # (cmd line: -E) >>>>/* Uncomment these lines to enter debugging mode >>>>debug=7 >>>>fork=no >>>>log_stderror=yes >>>>*/ >>>>check_via=no # (cmd. line: -v) >>>>dns=no # (cmd. line: -r) >>>>rev_dns=no # (cmd. line: -R) >>>>#port=5060 >>>>#children=4 >>>>fifo="/tmp/ser_fifo" >>>># ------------------ module loading ---------------------------------- >>>># Uncomment this if you want to use SQL database >>>>loadmodule "/usr/lib/ser/modules/mysql.so" >>>>loadmodule "/usr/lib/ser/modules/acc.so" >>>>loadmodule "/usr/lib/ser/modules/sl.so" >>>>loadmodule "/usr/lib/ser/modules/tm.so" >>>>loadmodule "/usr/lib/ser/modules/rr.so" >>>>loadmodule "/usr/lib/ser/modules/maxfwd.so" >>>>loadmodule "/usr/lib/ser/modules/usrloc.so" >>>>loadmodule "/usr/lib/ser/modules/registrar.so" >>>># Uncomment this if you want digest authentication >>>># mysql.so must be loaded ! >>>>loadmodule "/usr/lib/ser/modules/auth.so" >>>>loadmodule "/usr/lib/ser/modules/auth_db.so" >>>># ----------------- setting module-specific parameters --------------- >>>>#modparam("acc", "db_url", "sql://ser:heslo@localhost/ser") >>>># -- usrloc params -- >>>>#modparam("usrloc", "db_mode", 0) >>>># Uncomment this if you want to use SQL database >>>># for persistent storage and comment the previous line >>>>modparam("usrloc", "db_mode", 2) >>>># -- auth params -- >>>># Uncomment if you are using auth module >>>># >>>>modparam("auth_db", "calculate_ha1", yes) >>>># >>>># If you set "calculate_ha1" parameter to yes (which true in this config), >>>># uncomment also the following parameter) >>>># >>>>modparam("auth_db", "password_column", "password") >>>># -- rr params -- >>>># add value to ;lr param to make some broken UAs happy >>>>modparam("rr", "enable_full_lr", 1) >>>>modparam("acc","log_level",1) >>>>modparam("acc","log_flag",1) >>>># ------------------------- request routing logic ------------------- >>>># main routing logic >>>>route{ >>>> # initial sanity checks -- messages with >>>> # max_forwards==0, or excessively long requests >>>> if (!mf_process_maxfwd_header("10")) { >>>> sl_send_reply("483","Too Many Hops"); >>>> break; >>>> }; >>>> if ( msg:len > max_len ) { >>>> sl_send_reply("513", "Message too big"); >>>> break; >>>> }; >>>> # we record-route all messages -- to make sure that >>>> # subsequent messages will go through our proxy; that's >>>> # particularly good if upstream and downstream entities >>>> # use different transport protocol >>>> record_route(); >>>> # loose-route processing >>>> if (loose_route()) { >>>> if (method=="BYE") { >>>> setflag(1); >>>> setflag(2); >>>> } >>>> t_relay(); >>>> break; >>>> }; >>>> #labeled all transaction for accounting >>>> setflag(1); >>>> setflag(2); >>>> if (method=="CANCEL"){ >>>> t_relay(); >>>> }; >>>> # (in case, it does not work, use the following command >>>> # with proper names and addresses in it) >>>> if (uri==myself) { >>>> # This for PSTN destination >>>> if (uri=~"^sip:1") >>>> { rewritehost("10.10.10.10"); >>>> forward(10.10.10.10,5060); >>>> break; >>>> } >>>> if (method=="REGISTER") { >>>> # Uncomment this if you want to use digest authentication >>>> if (!www_authorize("sip.mycommunications.com", >>>> "subscriber")) { >>>> >>>>www_challenge("sip.mycommunications.com", "0"); >>>> break; >>>> }; >>>> save("location"); >>>> break; >>>> }; >>>> # native SIP destinations are handled using our USRLOC DB >>>> if (!lookup("location")) { >>>> sl_send_reply("404", "Not Found"); >>>> break; >>>> }; >>>> }; >>>> # forward to current uri now; use stateful forwarding; that >>>> # works reliably even if we forward from TCP to UDP >>>> if (!t_relay()) { >>>> sl_reply_error(); >>>> }; >>>>} >>>>_______________________________________________ >>>>Serusers mailing list >>>>serusers(a)lists.iptel.org >>>>http://lists.iptel.org/mailman/listinfo/serusers

2 1

[Serusers] sems and asterisk problem
by ooo ooo 30 Apr '05

30 Apr '05

I want to know who is batter in sems and asteisk. I want to let my ser support voicemail. http://sip800.8866.org thanks a lot . B.D. Rose. _________________________________________________________________ 与联机的朋友进行交流，请使用 MSN Messenger: http://messenger.msn.com/cn

2 1

[Serusers] Ser+serweb
by Tomek 30 Apr '05

30 Apr '05

Helo I've two questions: 1. When I log in user account on serweb i see this red messege: "sorry - cannot open write fifo". Fifo patch is /tmp/ser_fifo. I think that is a problem with apache and DocumentRoot but what do I do? :) 2. I wanted to add a new subscriber on serweb but without send e-mail and confirm but only confirm and add to mysql. Is that possible and where can I find information how ? Thanks for any help- sorry for my english. TS

2 1

[Serusers] check_ser plugin for nagios.
by Ricardo Martinez 30 Apr '05

30 Apr '05

Hello list. I'm trying to use nagios to check my ser status, so far i found a script in : http://lists.iptel.org/pipermail/serusers/2004-January/005195.html and i tested it without any luck. Does someone have any check_ser that works ok?. I will really appreciate. Thanks Ricardo Martinez.-

4 3

[Serusers] Query the MySQL database from SER?
by Jose Gonzalez 29 Apr '05

29 Apr '05

Hello all, I'm using SER 0.9.0 and I have almost everything up and running perfectly. The last thing I would like to do is query the MySQL database for a field in the subscriber table to set as the Caller ID (SIP From). I already have the UAC module up and running fine to rewrite the info, I just need to know how to query that info from the DB. I looked everywhere and can't find anything. Is this possible? Thanks, Jose Gonzalez

1 0

[Serusers] account from an end-device
by "Sebastian Kühner" 29 Apr '05

29 Apr '05

Hello, In the documentation of acc is written: "If a UA fails in middle of conversation, a proxy will never learn it. In general, a better practice is to account from an end-device (such as PSTN gateway), which best knows about call status (including media status and PSTN status in case of the gateway)." Has anyone an idea how to make this? How can I get this informations from a PSTN Gateway? What I want to have is a server on which are connected my "users". A user can enter a "uri". If this uri begins with "sip:00", I want to connect them to a pstn gateway. Thanks! Sebastian -- +++ GMX - die erste Adresse f�r Mail, Message, More +++ 10 GB Mailbox, 100 FreeSMS http://www.gmx.net/de/go/topmail

1 0

[Serusers] no accounting records
by "Sebastian Kühner" 29 Apr '05

29 Apr '05

Hello, I have following lines in my ser.cfg-File: loadmodule "/usr/local/lib/ser/modules/acc.so" # ------------- accounting parameters modparam("acc", "log_missed_flag", 3) modparam("acc", "log_level", 1) modparam("acc", "log_flag", 1) modparam("acc", "db_url", "mysql://ser:heslo@192.168.1.223/ser") modparam("acc", "report_cancels", 1) modparam("acc", "log_fmt", "cdfimorstup") ...and although I put "setflag(1)" at this position: # ------------- routing logic route { setflag(1); There are no accounting records in my data base (ser->acc). Has anyone an idea what could be wrong? Thanks! Sebastian -- +++ GMX - die erste Adresse f�r Mail, Message, More +++ 10 GB Mailbox, 100 FreeSMS http://www.gmx.net/de/go/topmail

1 1

[Serusers] Can I Force SER to Send On A Specific Network Interface?
by Java Rockx 29 Apr '05

29 Apr '05

Hi All. I have a multi-homed ser-0.9.1 proxy. Suppose my interfaces are as follows: eth0: 10.3.0.221 <http://10.3.0.221> eth1: 10.2.0.42 <http://10.2.0.42> If SER recieves a SIP message on eth0, how can I force SER to send any replies out eth1? Regards, Paul

2 3

[Serusers] downloading php via ftp
by Llanos Serna García-Conde 29 Apr '05

29 Apr '05

1 0

[Serusers] Stun
by Gin 29 Apr '05

29 Apr '05

which is best stun server? How I make to get the same and install. And make ser run together. My Ser just run with X-Lite my grandstream don't run in nat.. Maique

1 0

[Serusers] radiusclient 4.3
by Edgardo O. Gonzales II 29 Apr '05

29 Apr '05

Hi! Where I can find radiusclient version 4.3 for debian. thanks, ed

1 0

[Serusers] acc and db_url
by "Sebastian Kühner" 29 Apr '05

29 Apr '05

Hello, I read in the documentation of the module acc that you can set the database path of accounting with modparam("acc", "db_url", "mysql://ser:heslo@192.168.1.223/ser") but if I want to start ser appears an error: 0(2041) set_mod_param_regex: parameter <db_url> not found in module <acc> 0(2041) parse error (108,20-21): Can't set module parameter ERROR: bad config file (1 errors) Is this a bug of the module? The problem is, althoug I put the setflag, accounting do not work. In the table acc is no entry. Thanks! Sebastian -- +++ Sparen beginnt mit GMX DSL: http://www.gmx.net/de/go/dsl

3 3

RE: [Serusers] SRV query
by m36828253-1＠imap.1and1.com 29 Apr '05

29 Apr '05

Recently I have tested Teliann 3100 model with their V3.0 and V4.0 firmware. -- It even don't look into SRV record. -- No way to provide domain/realm entry -- there have option to provide registrar address, phonr tries to register as user_id@registrar_address. Not very good thing when you have use_domain=1 -- same thing happen for sip proxy address, if you invite any user, it tries to find invite_user@proxy_server_address -- PLAR don't work -- VAD don't work -- STUN is another pain in the neck, it never worked If anybody else worked with this phone, correct me If I am wrong. Thanks, Mohammad Original Message: ----------------- From: Klaus Darilion klaus.mailinglists(a)pernau.at Date: Fri, 29 Apr 2005 13:06:24 +0200 To: serusers(a)iptel.org Subject: [Serusers] SRV query Hi all! I'm not up2date with ser CVS. Does it already support multiple SRV records and failover? regards, klaus PS: I've also tested a couple of clients, maybe you can complete this list. bad clients: - eyeBeam 1.1 3004w stamp 16863 uses first SRV, no failover, ignores ICMP (retransmissions) - ser 0.8.12 uses first SRV, no failover, ignores ICMP (retransmissions) - Asterisk CVS-HEAD-04/04/05-13:06:02 uses any SRV, no failover, ignores ICMP (retransmissions) - Windows Messenger 5.1 (5.1.0639), RTC API RTC/1.3.5369 uses first SRV, no failover, processes ICMP (no retransmissions) - Cisco 5300, IOS 12.3(10) uses only first SRV, processes ICMP (1 retransmissions), failover to A record good clients: - Snom 200 3.56r processes priority, failover, processes ICMP (no retransmissions) - Cisco 7960, POS3-06-2-00 processes priority, failover, processes ICMP (no retransmissions) _______________________________________________ Serusers mailing list Serusers(a)iptel.org http://mail.iptel.org/mailman/listinfo/serusers -------------------------------------------------------------------- mail2web - Check your email from the web at http://mail2web.com/ .

1 0

[Serusers] problem compiling ser 0.9 with radius support
by Edgardo O. Gonzales II 29 Apr '05

29 Apr '05

Hi! Can somebody teach mo how to fix this error .. I already install my radiusclient-ng-0.5.0. Thanks .. chrome:/usr/local/src/installer/ser-0.9.0# make debug=all all make[1]: Entering directory `/usr/local/src/installer/ser-0.9.0/modules/acc' gcc -fPIC -DPIC -g -O9 -funroll-loops -Wcast-align -Wall -minline-all-stringops -malign-double -falign-loops -mcpu=athlon -DNAME='"ser"' -DVERSION='"0.9.0"' -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc 3.3"' -D__CPU_i386 -D__OS_linux -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DDNS_IP_HACK -DUSE_IPV6 -DUSE_MCAST -DUSE_TCP -DDISABLE_NAGLE -DDBG_QM_MALLOC -DFAST_LOCK -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -DHAVE_MSG_NOSIGNAL -DHAVE_MSGHDR_MSG_CONTROL -DHAVE_ALLOCA_H -DSQL_ACC -DRAD_ACC -I/usr/local/include -c acc.c -o acc.o acc.c: In function `acc_rad_request': acc.c:663: warning: passing arg 2 of `rc_avpair_add' makes integer from pointer without a cast acc.c:663: warning: passing arg 3 of `rc_avpair_add' makes pointer from integer without a cast acc.c:663: warning: passing arg 4 of `rc_avpair_add' makes integer from pointer without a cast acc.c:663: error: too many arguments to function `rc_avpair_add' acc.c:668: warning: passing arg 2 of `rc_avpair_add' makes integer from pointer without a cast acc.c:668: warning: passing arg 3 of `rc_avpair_add' makes pointer from integer without a cast

1 0

[Serusers] configuring ser 0.9
by Edgardo O. Gonzales II 29 Apr '05

29 Apr '05

Hi all! Anyone who knows how to configure ser 0.9. I want to enable radiator support and mysql. What are the modules I need to install to make all things work. Can you send me a little scratch on how to do it including the modification of acc/Makefile so that I can path the right dir for radius.h thanks, ed

1 0

[Serusers] SRV query
by Klaus Darilion 29 Apr '05

29 Apr '05

Hi all! I'm not up2date with ser CVS. Does it already support multiple SRV records and failover? regards, klaus PS: I've also tested a couple of clients, maybe you can complete this list. bad clients: - eyeBeam 1.1 3004w stamp 16863 uses first SRV, no failover, ignores ICMP (retransmissions) - ser 0.8.12 uses first SRV, no failover, ignores ICMP (retransmissions) - Asterisk CVS-HEAD-04/04/05-13:06:02 uses any SRV, no failover, ignores ICMP (retransmissions) - Windows Messenger 5.1 (5.1.0639), RTC API RTC/1.3.5369 uses first SRV, no failover, processes ICMP (no retransmissions) - Cisco 5300, IOS 12.3(10) uses only first SRV, processes ICMP (1 retransmissions), failover to A record good clients: - Snom 200 3.56r processes priority, failover, processes ICMP (no retransmissions) - Cisco 7960, POS3-06-2-00 processes priority, failover, processes ICMP (no retransmissions)

2 1

[Serusers] t_on_failure and t_on_reply
by Iqbal 29 Apr '05

29 Apr '05

Hi Is there any order these should be placed in config file. Is a failure response also considered a reply in t_on_reply, if so, then placing reply above failure will mean failure never gets caught Iqbal

2 1

[Serusers] zombie status in location table
by Cesc Santasusana 29 Apr '05

29 Apr '05

Hi, After de-registration, a contact in the location table is marked as zombie, and after some time, it is deleted from the table. Right? Ok, what happens when this user receives a call ... i mean, he is in the location table (as zombie), but he is not registered really on the phone? What do the lookup('location") and registered('location") in this scenario return? In my config ... a first call to lookup(loc) returns false, and then calling registered(loc) returns true. Is that right? Shouldn't the two functions do the same, just lookup rewrites the uri? Tks! Cesc Unclassified

2 1

[Serusers] Free TLS Implementation
by Peter Griffiths 29 Apr '05

29 Apr '05

hello -- some time ago i extended ser to support tls, basically i implemented functions needed by the existing tls api. i polished the code a bit and i am giving it away freely. there are still some things to fix, but it mostly works. to use the code, copy tls directory into your ser tree and optionally patch cfg.lex and cfg.y, then recompile ser with TLS=on. if you also patch cfg.lex and cfg.y then you can use extended cfg syntax and specify different keys and certificates for different listen sockets. this is similar to apache virtual servers with ssl. without the patches you can only use the default configuration directives. to iptel: would be great to have it in cvs, what do you think ? -- peter ----------- example ser.cfg: listen=tls:127.0.0.1:5061 listen=tls:127.0.0.1:5062 # defaults for outgoing tls connections tls_certificate="default.crt" tls_private_key = "default.key" # domain1.com tls_domain[127.0.0.1:5061] { tls_certificate="domain1.crt" tls_private_key = "domain1.key" tls_method = sslv2 } # domain2.com tls_domain[127.0.0.1:5062] { tls_certificate="domain2.crt" tls_private_key="domain2.key" } __________________________________ Celebrate Yahoo!'s 10th Birthday! Yahoo! Netrospective: 100 Moments of the Web http://birthday.yahoo.com/netrospective/

5 4

[Serusers] Latest most stable SER release
by Darren Nay 29 Apr '05

29 Apr '05

Hey Guys, I need some advice. We have been running SER 0.8.12 since it was released almost a year ago. However, we have decided recently that we need to upgrade for some of the features in the newer versions. What is the most stable later release? I see releases of 10.99, and 0.9.x, and IPTels webpage even says that 0.8.14 is the most stable production release ?? I just need some clarification on which version actually -is- stable enough for production use. Thanks for your help! Darren Nay VoIP Network Development Ionosphere, Inc dnay(a)ionosphere.net

2 1

[Serusers] RFC3261 Section 8.2.6.1
by Java Rockx 29 Apr '05

29 Apr '05

Hi All. This section of the RFC states this: 8.2.6.1 <http://8.2.6.1> Sending a Provisional Response One largely non-method-specific guideline for the generation of responses is that UASs SHOULD NOT issue a provisional response for a non-INVITE request. Rather, UASs SHOULD generate a final response to a non-INVITE request as soon as possible. Does this mean SER should never send a 1xx response for anything except INVITE messages? Regards, Paul

2 1

[Serusers] HELP: set max_contacts parameter on registrar module fail
by Charles Wang 29 Apr '05

29 Apr '05

Hi, ALL: I set the following line on my ser.cfg to limit the max registers. modparam("registrar", "max_contacts", 3) Then I restart my ser. I find that I can register more than 3 UACs to my ser. So I guess that the parameter max_contacts is not workable. Is it true? Does anybody have any idea/solution about it? -- Best Regards Charles

3 6

[Serusers] SER with Windows-Messenger in different subnets
by Hendrik Utsch 29 Apr '05

29 Apr '05

Hello all, we have a SIP Express Router located in 172.16.0.0/16 and several Windows Messenger clients, located in the same subnet as well, as in 192.168.190.0/24. All clients can establish successfully connections to other clients in the first subnet, but connections to clients in the second subnet end with "404 Not Found". The behaviour is very strange, since I got it to work with some clients in the second subnet, but then after a restart of the SER process it didn't work again. I definitely have changed nothing! Here is the conf file: # $Id: ser.cfg,v 1.11 2002/10/04 21:40:31 jiri Exp $ # ----------- global configuration parameters ------------------------ debug=3 # debug level (cmd line: -dddddddddd) fork=yes log_stderror=yes# (cmd line: -E) check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) port=5060 children=4 fifo="/tmp/ser_fifo" # ------------------ module loading ---------------------------------- loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/print.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- modparam("usrloc", "db_mode", 0) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwars==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if (len_gt( max_len )) { sl_send_reply("513", "Message too big"); break; }; # Do strict routing if pre-loaded route headers present rewriteFromRoute(); # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri=~"sip.####.de") { if (method=="REGISTER") { save("location"); break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; # forward to current uri now if (!t_relay()) { sl_reply_error(); }; } Thanks, Hendrik Utsch Dipl.-Ing. (FH) Systemtechnik eMail: hendrik.utsch(a)tecsphere.com TecSphere AG Standort Köln Claudiastraße 2b D-51149 Köln Deutschland Fon: +49 (2203) 89 11 506 Fax: +49 (2203) 89 11 111 http://www.tecsphere.com

2 1

[Serusers] radius acc in newest ser does not compile
by Wojciech Ziniewicz 29 Apr '05

29 Apr '05

I want to compile ACC module with Radius Accounting but uncommenting theese two lines as said in modules/acc/Makefile makes the "acc.so" disapear (it simply does not compile) 1.I have downloaded the SER v.0.9-0 from developer at berlios.de (not the cvs one). 2. I have built a *deb package since i have debian. Maybe it's debian specific ? 3. After a build I see whats in the ser_8.0-12.deb (the version is invalid :) ) and there's no module with that name. ============fragment from modules/acc/Makefile============== ... # uncomment the next two lines if you wish to enable RADIUS accounting # DEFS+=-DRAD_ACC -I/usr/include LIBS=-L/usr/lib -lradiusclient ... =============end of the fragment========================== -- Pozdrawiam, Wojciech Ziniewicz Optocomp sp.z.o.o, www.optocomp.pl mailto: wojtekz(a)optocomp.pl +48(0)691031535

2 1

[Serusers] Call to another host
by "Sebastian Kühner" 29 Apr '05

29 Apr '05

Hello, I have ser locally installed on 192.168.1.223 and asterisk on 192.168.1.222. I have two softphones: sip:13@192.168.1.222 (asterisk) and sip:14@192.168.1.223 (ser) If I want to call 14(a)192.168.1.223 (asterisk -> ser) it works perfectly, but if I want to call 13(a)192.168.1.222 (ser -> asterisk) the call fails (Call rejected: 403 forbidden). What do I make wrong?? Thanks! Sebastian -- +++ GMX - die erste Adresse f�r Mail, Message, More +++ 10 GB Mailbox, 100 FreeSMS http://www.gmx.net/de/go/topmail

1 0

[Serusers] errors and warnings with serweb
by Llanos Serna García-Conde 29 Apr '05

29 Apr '05

2 1

RE: [Serusers] ACC into mysql
by Edgardo O. Gonzales II 29 Apr '05

29 Apr '05

Need for immediate resolution .. please help .. thanks, ed Hi! I appreciate your immediate feedback and Im so thankful for extending your help to me. However, after I followed the instruction you gave, this is what happened. speed:/usr/local/src/project/ser-0.8.14# /usr/local/ser/sbin/ser -f /usr/local/ser/etc/ser/ser.cfg start & [1] 23521 0(23521) set_mod_param_regex: parameter <db_url> not found in module <acc> 0(23521) parse error (49,60-61): Can't set module parameter 0(23521) set_mod_param_regex: parameter <db_flag> not found in module <acc> 0(23521) parse error (50,29-30): Can't set module parameter I remember during my ser installation, I use make all. Will this enable my accounting using mysql. thanks, ed At 09:13 PM 4/26/2005, Matt Schulte wrote: > setflag(1); > setflag(2);

2 1

Rating engine (WAS : RE: [Serusers] radius acc in newest ser doe s not compile )
by Wojciech Ziniewicz 29 Apr '05

29 Apr '05

Okay, i've updated my version up to CVS and it's fine. I am making SER wroking for CDRTool evaluation version thus i had to have the RADIUS accounting compiled in. SER is a great peace of software. I have another question regarding to Your experience with billing. I've connected radius with mysql and SER. I have good accounting that gives me call duration, callee number, caller number and almost everything i want. cdrtool makes it readable for humans :) My question is - what rating (not billing) engines do you use ? I have very detailed call records in the csv'like format, but dont have an idea how to rate my subscribers. -----Original Message----- From: Jan Janak [mailto:jan@iptel.org] Sent: Friday, April 29, 2005 2:35 PM To: Wojciech Ziniewicz Cc: 'serusers(a)lists.iptel.org'; Michal Podoski; Jacek Blaschke Subject: Re: [Serusers] radius acc in newest ser does not compile The version number comes from sip_router/debian/changelog. This file is usually updated then we build a new release. You can add a new entry there to fix the version number. The radius related modules are in a separate package, called ser-radius-modules. Jan. On 27-04-2005 12:08, Wojciech Ziniewicz wrote: > I want to compile ACC module with Radius Accounting but uncommenting theese > two lines as said in modules/acc/Makefile makes the "acc.so" disapear (it > simply does not compile) > > 1.I have downloaded the SER v.0.9-0 from developer at berlios.de (not the > cvs one). > 2. I have built a *deb package since i have debian. Maybe it's debian > specific ? > 3. After a build I see whats in the ser_8.0-12.deb (the version is invalid > :) ) and there's no module with that name. > > ============fragment from modules/acc/Makefile============== > ... > # uncomment the next two lines if you wish to enable RADIUS accounting > # > DEFS+=-DRAD_ACC -I/usr/include > LIBS=-L/usr/lib -lradiusclient > ... > =============end of the fragment========================== > -- > Pozdrawiam, > Wojciech Ziniewicz > Optocomp sp.z.o.o, www.optocomp.pl > mailto: wojtekz(a)optocomp.pl > +48(0)691031535 > > > _______________________________________________ > Serusers mailing list > serusers(a)lists.iptel.org > http://lists.iptel.org/mailman/listinfo/serusers

1 0

LVS, load balancing, and stickness was ==> Re: [Serusers] more usrloc synchronization
by Greger V. Teigre 29 Apr '05

29 Apr '05

After my last email, I looked at ktcpvs and realized I ignored a couple of things: ktcpvs only supports tcp (http is obviously tcp-based, but I thought it supported udp for other protocols). I don't know how much work implementing udp would be. Here is a discussion of SIP and LVS that I found useful (though not encouraging). http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.services_that_dont_w… Paul: I'm starting to get really curious on the standard LVS components used for your stickiness! I'm not aware (also after searching now) of an LVS balancing mechanism that allows correct stickness on SIP udp...! And I found other too who are looking for it: http://archive.linuxvirtualserver.org/html/lvs-users/2005-02/msg00251.html My understanding is that ipvs must be extended (according to the developer) with a call-id based scheduler and that this work has several people willing to fund development, but that this has not(?) started yet. The problem is that ipvs is based on ip header analysis and extending the hashing algorithms to also include payload-based analysis is not straight-forward. g-) > With regards to stickiness: Have you looked at ktcpvs? SIP is an > "http-like" protocol and I'm pretty sure that you can use the > http-based regex hashing to search for Call-Id. If you cannot use it > right out of the box, I'm pretty sure the modifications are minimal. > The user location problem: With a cluster back-end, I also only > see save_memory() as the only option. > g-) > >> "Greger V. Teigre" <greger(a)teigre.com> wrote: >>> Greger, thanks a lot. >>> The problem with load balancer is that replies goes to the wrong >>> server due to rewriting outgoing a.b.c.d . BTW, as Paul pointed, if >>> you define some dummy interface with Virtual IP (VIP), there is no >>> need to rewrite outgoing messages (I tested this a little). >> >> >> Yes, if you use LVS with direct routing or tunneling, that is what >> you experience. >> ===Of course. That why I implemented small "session" stickness. >> However, it causes additional internal traffic. >> >> What I described was a "generic" SIP-aware load balancer where SIP >> messages would be rewritten and stickiness implemented based on ex. >> UA IP address (or call-id like vovida's load balancer). >> ====Sure, it's better solution; I think we'll go this way soon (in >> our next version). >> >>> Why DNS approach is bad (except restricted NAT - let's say I am >>> solving this)? >> >> Well, IMO, DNS SRV in itself is not bad. It's just that many user >> clients do not support DNS SRV yet. Except that, I like the concept >> and it will give you a geographical redundancy and load balancing. >> ===I am trying to build the following architecture: >> >> DNS (returns domain's public IP)->LVS+tunneling (Virtual IP)->ser >> clusters (with private IPs) >> >>> >> >>> >> DB >> (MySQL 4.1 cluster) >> >>> I guess, Paul utilizes load-balancer scenario you have described. >>> Believe there are only proprietary solutions for >>> "the-replies-problem". We tried Vovida call-id-persistence package, >>> unfortunately it didn't work for us. >> >> Are you referring to the load balancer proxy? IMHO, the SIP-aware >> load balancer makes things a bit messy. It sounds to me that the LVS >> + tunneling/direct routing + virtual IP on dummy adapter is a better >> solution. >> >>> In my configuration I use shared remote DB cluster (with >>> replication). Each ser see it as one-public-IP (exactly the approach >>> you named for SIP). May be it's good idea to use local DB clusters, >>> but if you have more than 2 servers your replication algorythm gonna >>> be complex. Additional problem - it still doesn't solve usrloc >>> synchronization - you still have to use t_replicate()... >> >> >> I'm not sure if I understand. >> ===Oh, probably I expressed myself not well enough... >> >> So, you have 2 servers at two location, each location with a shared >> DB and then replication across an IPsec tunnel?? >> IMHO, mysql 3.23.x two-way replication is quite shaky and >> dangerous to rely on. With no locking, you will easily get >> overwrites and you have to be very sure that your application doesn't >> mess up the DB. I haven't looked at mysql 4.1 clustering, but from >> the little I have seen, it looks good. Is that what you use? >> >> ===We have 2 or more servers with MysQL 4.1 virtual server (clusters >> balanced by LVS). We use MySQL for maintaining subscribers' accounts, >> not for location. User location is still in-memory only so far. I am >> afraid I have to switch to ser 09 in order to use save_memory (thanks >> Paul!) and forward_tcp() for replication. >> >>> With regard to t_replicate() - it doesn't work for more than 2 >>> servers, so I used exactly forward_tcp() and save_noreply() (you're >>> absolutely right - this works fine so far); all sers are happy. Of >>> course, this causes additional traffic. Interesting whether Paul's >>> FIFO patch reduces traffic between sers? >> >> I believe Paul uses forward_tcp() and save_memory() to save the >> location to the replicated server's memory, while the >> save("location") on the primary server will store to the DB (which >> then replicates on the DB level). >> g-) >> >> >> >> >> >> Do you Yahoo!? >> Yahoo! Small Business - Try our new resources site!

6 17

RE: [Serusers] what is the best way of using asterisk as B2BUA
by Kamran Ahmad 29 Apr '05

29 Apr '05

try onsip.org gettingstarted from downloads and use this ./make_and_install radius --- "Edgardo O. Gonzales II" <edgardo.g(a)pacific.net.ph> wrote: > > Hi All! > > May I know the basic modules / requirements if I > want to install > ser with acc and radius support.. > > Im using debian .. > > thanks, > ed > > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

[Serusers] ser 0.9.0 & sems
by Grigory Fishilevich 29 Apr '05

29 Apr '05

Hi all, i try to configure ser 0.9.0 and sems_2004-07-27. i have some problems, i can't find the right infos or examples. have anybody a worked ser.cfg example or link to any website with some infos to ser+sems? many thanks, Grigory

2 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users