- sr-users - kamailio.org

NATDETECT Flag 16
by Duarte Rocha 21 Mar '18

21 Mar '18

Greetings, I have a doubt about the flag 16 used in nat_uac_test() belonging to the module NATDETECT. In the documentation, the following is stated : *16* - Test if the source port is different from the port in the “Via” header I have some situations that I receive a request from port 5060 and the Via Header contains no port. I think it probably assumes that it is the default port. Will this situation trigger the "16" flag ? Thanks in advance, Cheers

2 2

S-CSCF can not allocate memory
by tyd 21 Mar '18

21 Mar '18

Hello, I haved install debian 8 and kamailio 4.4.7 for IMS testing. After registering 10000 users, SIPp generates CPS 25 SIP INVITE message and BYE message after 100 seconds. After about 240000 calls, there are "cannot allocate memory" messgae on S-CSCF. The command of S-CSCF is "kamailio -m 512 -f /etc/scscf/kamailio.cfg" The parameter mem_join=1 is included in kamailio.cfg. I have modified the share memory to 1024 and 2048, but the result is the same, just increasing the pass calls. Would you please tell me how to solve the memory problem? Thanks. Mar 21 12:25:03 Kamailio440 kamailio[16483]: ERROR: <core> [sip_msg_clone.c:981]: msg_lump_cloner(): cannot allocate memory Mar 21 12:25:03 Kamailio440 kamailio[16483]: ERROR: tm [t_fwd.c:1656]: t_forward_nonack(): ERROR: t_forward_nonack: failed to save the message lumps Mar 21 12:25:03 Kamailio440 kamailio[16483]: ERROR: tm [t_reply.c:545]: _reply_light(): ERROR: _reply_light: cannot allocate shmem buffer Mar 21 12:25:03 Kamailio440 kamailio[16483]: ERROR: tm [t_lookup.c:1489]: t_unref(): ERROR: t_unref: generation of a delayed stateful reply failed Mar 21 12:25:03 Kamailio440 kamailio[16446]: ERROR: tm [t_reply.c:1893]: relay_reply(): ERROR: relay_reply: cannot alloc reply shmem Mar 21 12:25:03 Kamailio440 kamailio[16446]: ERROR: tm [t_reply.c:545]: _reply_light(): ERROR: _reply_light: cannot allocate shmem buffer Mar 21 12:25:03 Kamailio440 kamailio[16435]: ERROR: tm [t_reply.c:316]: update_totag_set(): ERROR: update_totag_set: no memory Mar 21 12:25:03 Kamailio440 kamailio[16406]: ERROR: ims_dialog [dlg_profile.c:472]: set_dlg_profile(): no more shm memory Mar 21 12:25:03 Kamailio440 kamailio[16406]: ERROR: ims_dialog [ims_dialog.c:619]: w_set_dlg_profile(): failed to set profile Mar 21 12:25:03 Kamailio440 kamailio[16406]: ERROR: tm [t_lookup.c:1289]: new_t(): ERROR: new_t: out of mem: Mar 21 12:25:03 Kamailio440 kamailio[16406]: ERROR: tm [t_lookup.c:1429]: t_newtran(): ERROR: t_newtran: new_t failed root@Kamailio440:~# kamcmd tm.stats { current: 69 waiting: 0 total: 991300 total_local: 0 rpl_received: 2183891 rpl_generated: 20232 rpl_sent: 1475856 6xx: 0 5xx: 2704 4xx: 10124 3xx: 0 2xx: 978329 created: 991300 freed: 991231 delayed_free: 0 } root@Kamailio440:~# kamctl stats shmem shmem:fragments = 1630 shmem:free_size = 4303040 shmem:max_used_size = 536870912 shmem:real_used_size = 532567872 shmem:total_size = 536870912 shmem:used_size = 415668000

1 0

execute only on INITIAL INVITE
by David Villasmil 20 Mar '18

20 Mar '18

Hello guys, I want to execute an sql only for INITIAL INVITEs, I'm trying like: #!ifdef WITH_DID_VALIDATE if(!has_totag()) { sql_query("acd", "select * from did_numbers where didNumber = '$tU' and active = 'Y'", "ra"); xlog("L_ERR", "[REQUEST_ROUTE] number of rows in table domain: $dbr(ra=>rows)\n"); if( $dbr(ra=>rows)==0 ) { xlog("L_ERR", "[REQUEST_ROUTE] DID Number validation returned [$dbr(ra=>rows)], not responding to this request\n"); exit; } sql_result_free("ra"); } #!endif But, say I remove the DID from the allowed list while a call is going on. Then responses to the allowed INVITE would not be processed. How would I limit that to ONLY the INITIAL INVITE? Should I use has_totag? Thanks! David Regards, David Villasmil email: david.villasmil.work(a)gmail.com phone: +34669448337 ᐧ

3 4

kamailio 4.4.7 websockets
by draden vandewind 20 Mar '18

20 Mar '18

Hello, Can you explain to me how configure kamailio for to use websocket. I search a kamailio.cfg file with websocket support.... best regards draden

2 1

Security announcement related to Kamailio
by Henning Westerholt 19 Mar '18

19 Mar '18

Hello, as already announced from Daniel-Constantin Mierla on the lists last Wednesday [1], we strongly advise you to update your Kamailio installation to the latest stable release for security reasons. All supported releases (4.4, 5.0. and 5.1) contains two important security fixes related to the tmx and lcr module. Technical details for the tmx issue: A specially crafted REGISTER message with a malformed branch or From tag triggers a so called "off-by-one heap overflow". This vulnerability existed in the tmx module and makes it possible to remotely crash the Kamailio service. If an attacker sends many of this messages this would lead to a Denial of Service of the attacked infrastructure. This is especially critical as no authentication for the remote source is needed. This vulnerability was found from Sandro Gauci and Alfred Farrugia from the Security Company Enable Security. Many thanks to them for finding the issue and reporting it to us. You find all the details including a proof of concept code in the published security announcement from them: https://github.com/EnableSecurity/advisories/tree/master/ES2018-05-kamailio… Technical details for the lcr issue: A vulnerability existed in the lcr next_gw() function. It happens when a very long R-URI username is sent with an INVITE due to an mistake in the function error code handling. It can be triggered from a remote source, but should be only from a trusted peer, as it expected that calls going through lcr are authenticated by user or IP address. This vulnerability was reported from an user in the Netherlands to us, thanks as well for the bug report. So far we are not aware of any public exploits of this errors. But as already mentioned, we advise you to update your Kamailio servers to the latest stable release as soon as possible, especially as the tmx vulnerability will reported to more security lists later today. Please address any detailed technical questions related to the two bugs to the developer list at sr-dev(a)lists.kamailio.org . In case of confidential remarks related to this or other security issues, please address them to the Kamailio Management at management(a)kamailio.org . Best regards, Henning Westerholt Kamailio Project [1] https://lists.kamailio.org/pipermail/sr-users/2018-March/100672.html

1 2

msilo on proxy in front of registrar
by Stefan Sayer 19 Mar '18

19 Mar '18

Hello, I have a bit of a strange situation where I want to add SIP MESSAGE reliability (store and forward) for a proxy that is in front of the (message-wise unreliable) registrar/message originator. So I m_store MESSAGEs in the failure_route of MESSAGE requests. By default, msilo's m_dump works only for REQUEST_ROUTE, thus I can't use that in the 200 to REGISTER. But when I add a function to msilo for ONREPLY_ROUTE (without the check for MESSAGE support) it works. So, is there a reason that there's m_dump only for REQUEST_ROUTE? And, is this: if ((msg->first_line).type == SIP_REQUEST) the correct way to check whether we're handling a request or reply? Also, is there a way to check the expires of contacts in the 200 to REGISTER from the script, so I don't try to m_dump on de-REGISTER? Or does this have to go into the m_dump function for the ONREPLY_ROUTE case? Many thanks for hints! Stefan

2 1

Some clarifications needed on async_task_route
by George Diamantopoulos 19 Mar '18

19 Mar '18

Hello all, I've been exploring the async module a little, and async_task_route() more specifically. I have async_workers set, and the async module loaded. However, whenever this async function is involved in SIP processing, kamailio returns a 500 error to the UAC. I was hoping that someone could confirm that this function is suitable for my needs, I'm not sure I understand the docs very well on this one. So the plan is to have some of the processing of the transaction performed asynchronously, as it is not required for routing etc. Here's an example of what I'm trying to achieve, it's not really critical if NICE_TO_HAVE route functions fail etc, I just need request_route processing to continue normally without waiting for async_task_route("NICE_TO_HAVE") to finish whatever it's going to be doing: request_route() { ... SIP_PROCESSING_A ... async_task_route("NICE_TO_HAVE") ... SIP_PROCESSING_B t_relay(); } route(NICE_TO_HAVE) { dlg_var(sth) = something_derived_from_global_vars(); } Is this possible, or am I completely out of scope here? Thanks! BR, George

2 1

INFO: Relevant fixes in the last releases
by Daniel-Constantin Mierla 19 Mar '18

19 Mar '18

Hello, I want to highlight that the last stable versions (for the latest 3 release series: 4.4, 5.0 and 5.1) include fixes for two issues that can crash a running instance of Kamailio, therefore it is strongly recommended to upgrade if you are using tmx or lcr modules. Next week a CVE report is going to be created with more details about one of these issues. The issues were reported privately, one by security researchers and one by a community member, and were fixed quickly. The code related to the reported issues is rather old (few years by now) and there are no known incidents of exploiting these issues so far. However, once the CVE report comes public, there could be a higher risk of exploitation. Cheers, Daniel -- Daniel-Constantin Mierla www.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio Advanced Training - April 16-18, 2018, Berlin - www.asipto.com Kamailio World Conference - May 14-16, 2018 - www.kamailioworld.com

2 2

Kamailio World 2018 - grants for students and underrepresented people
by Daniel-Constantin Mierla 19 Mar '18

19 Mar '18

Hello, we are glad to announces that, thanks to the sponsors, we can offer again couple of free seats at Kamailio World Conference, May 14-16, 2018, in Berlin, for students as well as for underrepresented people. In this way we are continuing the program from last years, based on the roots and the tight relation of Kamailio project with the academic environment, the eligible people being students enrolled in universities or research institutes (bachelor, master and PhD programs qualify) as well as people from underrepresented groups. If you think you are eligible and want to participate, email me directly (miconda(a)gmail.com) or to registration(a)kamailio.org . Participation to all the content of the event (workshops, conference and social event) is free, but you will have to take care of expenses for traveling and accommodation. Write a short description about your interest in real time communications and, when it is the case what is the university or the research institute you are affiliate to. Also, if you are not a student, but you are in touch with some or have access to students forums/mailing lists, it will be very appreciated if you forward these details. More information about Kamailio World is available on the web site: - https://www.kamailioworld.com Many thanks to the event sponsors that allowed to continue this program, respectively: Evosip, 2600hz, Sipwise, Sipgate, Simwood, NG-Voice, Evariste Systems, Digium, LOD.com, Pascom, Core Network Dynamics, FhG Fokus and Asipto. Expect a full house event! Looking forward to meeting many of you in Berlin! Cheers, Daniel -- Daniel-Constantin Mierla www.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio Advanced Training - April 16-18, 2018, Berlin - www.asipto.com Kamailio World Conference - May 14-16, 2018 - www.kamailioworld.com

1 0

Select last URI from Record-Route
by John Petrini 19 Mar '18

19 Mar '18

Hello list, Does anyone how I can extract the last URI from a compact Record-Route header? I've tried using a negative index in the parameter of my select but it returns the first URI in the header instead of the last. $var(rr_last_uri) = @record_route.uri[-1]; Maybe there's another way instead of using selects? Thanks, John

4 7

Select last URI from Record-Route
by Ilie Soltanici 18 Mar '18

18 Mar '18

Hi, Try $(hdr(Record-Route)[-1]), to extract URI only you can use: $(hdr(Record-Route)[0]{nameaddr.uri})

1 0

Logging unregister
by Kjeld Flarup 17 Mar '18

17 Mar '18

Is there a way to get a log entry when a client unregisters incl. when tcp connection is lost for a registration. -- -------------------- Med Liberalistiske Hilsner ---------------------- Civilingeniør, Kjeld Flarup - Mit sind er mere åbent end min tegnebog Sofienlundvej 6B, 7560 Hjerm, Tlf: 40 29 41 49 Den ikke akademiske hjemmeside for liberalismen - www.liberalismen.dk

1 0

kamailio as load balancer
by Seyed Mohammad Mirheydari 16 Mar '18

16 Mar '18

Hi I have 5 asterisk servers. And I want to use kamailio as load balancer. How can route sip calls from outside to asterisk servers? Note: I installed kamailio and mairadb , etc. I configured subscriber for kamailio. And add my 5 servers to databse. Hust to know how to change the file kamailio.cfg to route all incoming calls to my 5 asterisk server (round robin). thanks

3 2

Need useful graphics ideas
by Karsten Horsmann 16 Mar '18

16 Mar '18

Hello List, I thought about some kind of Kamailio stats source (like registered users, calls active and some other things) to collect them into influx dB and draw them with grafana. How do you solved that? Timer based routes or statsd or whatever? Kind regards Karsten Horsmann

5 10

Lua script reload
by Igor Olhovskiy 16 Mar '18

16 Mar '18

Hi! I’m playing with new KEMI framework and trying to reload script without reloading Kamailio. Lua code is mostly one from example. ... modparam("app_lua", "load", "/etc/kamailio/lua/kamailio.lua") cfgengine "lua" ... So, I’m changing lua code and giving command kamctl rpc app_lua.reload But in the answer { "jsonrpc": "2.0", "error": { "code": -32000, "message": "Execution Error" }, "id": 11098 } In syslog there is a string /usr/sbin/kamailio[10939]: ERROR: app_lua [app_lua_api.c:399]: lua_sr_reload_script(): reload is not activated What is need to be done to activate reload? Regards, Igor

2 12

logging sip messages
by Karthik Srinivasan 15 Mar '18

15 Mar '18

Hello: I am trying to find a simple way to log each and every SIP message that Kamailio receives or Kamailio sends. In a nutshell, here is what i'm trying to accomplish: - log sip message received; log ip address and port of where message was received from - log sip message to be sent or sent; log ip address and port of destination. I am trying to achieve this in the context of my general log file that contains routing/event logic from the kamailio.cfg file. By this i mean i don't want to have to run an external program like tcpdump to capture the packets and log them. I have tried a few thing but haven't been able to capture all conditions. examples: i have included things like event_routes for [tm:local-response]; [sl:local-response]; [sl:filtered-ack], onreply_route... I can capture most replies and responses via those but am not able to capture a 200ok relayed response from Kamailio back to the originating UA for example. I can log incoming messages without problem. I have also tried to activate IO interrupt to route to event_route[NETWORK:MSG] but unfortunately i can't access the source/dest ip address/port info or other pseudo variables. So back to the original question: How does one log every SIP message that Kamailio gets? How does one log every SIP message that Kamailio sends? via the context of the routing/replies/event routes in kamailio.cfg. Thanks, Karthik

3 3

UAC Restore Mode
by Duarte Rocha 15 Mar '18

15 Mar '18

Greetings, I have a question about the UAC module and its restore mode. If i use the "auto" restore mode in the "restore_mode" parameter will the entire info be saved in the From Tag for restore? I'm asking because i will implement High Avaliability and need to know if in event of a failure and i switch to a kamailio in a different machine i will be able to do the To\From restore. Thanks in advance, Duarte Rocha

1 0

Kamailio Edge Proxy & Kamailio Core Sip Server behind NAT
by Ed 14 Mar '18

14 Mar '18

Hi all, I would like to thank you all for the work you are doing. Having a Kamailio Edge proxy (2 interfaces - 1 pvt, 1 public) & Kamailio Core Sip server behind NAT, is it necessary to set up rtpengine on both servers? Thanks, Ed

2 1

kamailio implamentation
by kossivi HOLONOU 14 Mar '18

14 Mar '18

Hello, I am developing a project on MSRP Kamailio with webRTC client for my end of training project, can you help me with documentation or configuration side kamailio and webRTC client to implement to get there? Thank you for your support BesT Regards,Kossivi HolonouBO VAS EngineerDakar-Sénégal

1 0

Dimensioning ds_hash_size value for dispatcher module
by Alvaro Araos 14 Mar '18

14 Mar '18

Hi, In the documentation of the dispatcher module it is said that in order to use the algorithm 10 (load balancing) the parameter ds_hash_size must be set, in the definition it is said that the value is in powers of 2, that is to say if it is set to 8, this is equal to 2 ^ 8 = 256 slots, but still I do not understand how to dimension this value for my needs. I do not know whether to put 8, 4, 9, etc. Saludos, ALVARO ARAOS MÉNDEZ Director de Tecnología en FONOIP +56 2 2947 9000 alvaro(a)fonoip.com | www.fonoip.com [1] Moisés Chacón 46, El Monte, RM Links: ------ [1] http://www.fonoip.com

2 2

Kamailio With SMPP
by Amar Tinawi 14 Mar '18

14 Mar '18

Hello Is there a method to integrate kamailio to an smpp smsc ? Thanks

2 1

kamailio Rx_AAR qusetions
by Lv, Victor (NSB - CN/Qingdao) 14 Mar '18

14 Mar '18

Hi All, I am trying to send two Rx_AAR after Kamailio receive 200 OK with SDP: The first one for termination part is worked well, but in MT_aar_reply route block, it's not works. The one I marked with red color, is there anyone know how configure Kamailio to send two Rx_AAR after receive 200 OK SDP? Thanks a lot!! Victor +++++++++++++++++++++++++++++++++++++++++++++++++++++++ if (t_check_status("200")){ xlog("L_DBG", "IMS: Received 200 nside orig_initial_reply\n"); $var(aarret) = Rx_AAR("MT_aar_reply", "term","",2); xlog("L_DBG", "AAR return code is $var(aarret)\n"); } on MT_aar_reply block: route[MT_aar_reply] { #this is async so to know status we have to check the reply avp switch ($avp(s:aar_return_code)) { case 1: xlog("L_DBG", "Diameter: Term AAR success on media authorization\n"); break; default: xlog("L_ERR", "IMS: AAR failed Term\n"); xlog("L_ERR", "IMS: ttag: "+ "$avp(TTAG_CUSTOM_AVP)"); xlog("L_ERR", "IMS: ftag: "+ "$avp(FTAG_CUSTOM_AVP)"); xlog("L_ERR", "IMS: callid: "+ "$avp(CALLID_CUSTOM_AVP)"); #comment this if you want to allow even if Rx fails if(dlg_get("$avp(CALLID_CUSTOM_AVP)","$avp(FTAG_CUSTOM_AVP)","$avp(TTAG_CUSTOM_AVP)")){ dlg_terminate("all", "Sorry no QoS available"); exit; } $var(aarret) = Rx_AAR("MO_aar_reply", "term","",2); xlog("L_DBG", "AAR return code is $var(aarret)\n");

4 8

kamailio does not start with db_mongdb and usrloc
by Stephane Focant 13 Mar '18

13 Mar '18

Hello, I have an issue when I try to use kamailio 5.1 with usrloc and db_mongdb modules. When I try to start kamailio, I get the following error: 0(22216) DEBUG: <core> [db.c:314]: db_do_init2(): connection 0x7f735b5c4100 not found in pool 0(22216) DEBUG: db_mongodb [mongodb_connection.c:55]: db_mongodb_new_connection(): connection open to: mongodb://10.0.12.149 ,10.0.12.150, 10.0.12.151/kamailio?replicaSet=sre_location&slaveOk=true&readPreference=primaryPreferred 0(22216) DEBUG: db_mongodb [mongodb_dbase.c:864]: db_mongodb_query(): query to collection [version] 0(22216) DEBUG: db_mongodb [mongodb_dbase.c:898]: db_mongodb_query(): query filter: { "table_name" : "location" } 0(22216) DEBUG: db_mongodb [mongodb_dbase.c:917]: db_mongodb_query(): columns filter: { "table_version" : 1 } 0(22216) DEBUG: <core> [db_res.c:120]: db_new_result(): allocate 56 bytes for result set at 0x7f735b5c4450 0(22216) DEBUG: db_mongodb [mongodb_dbase.c:746]: db_mongodb_store_result(): no result from mongodb 0(22216) DEBUG: <core> [db.c:404]: db_table_version(): no row for table location found 0(22216) ERROR: <core> [db.c:450]: db_check_table_version(): invalid version 0 for table location found, expected 9 (check table structure and table "version") 0(22216) ERROR: usrloc [dlist.c:659]: register_udomain(): error during table version check. 0(22216) DEBUG: <core> [db_pool.c:100]: pool_remove(): removing connection from the pool 0(22216) ERROR: registrar [registrar.c:651]: domain_fixup(): failed to register domain 0(22216) ERROR: <core> [core/route.c:1154]: fix_actions(): fixing failed (code=-1) at cfg:/usr/local/kamailio-5.1/etc/kamailio/kamailio.cfg:660 0(22216) ERROR: <core> [core/rvalue.c:3860]: fix_rval_expr(): failure in cfg at line: 660 col: 22 0(22216) ERROR: <core> [core/rvalue.c:3860]: fix_rval_expr(): failure in cfg at line: 660 col: 22 0(22216) ERROR: <core> [core/route.c:1154]: fix_actions(): fixing failed (code=-1) at cfg:/usr/local/kamailio-5.1/etc/kamailio/kamailio.cfg:663 ERROR: error -1 while trying to fix configuration 0(22216) DEBUG: tm [t_funcs.c:85]: tm_shutdown(): start 0(22216) DEBUG: tm [t_funcs.c:88]: tm_shutdown(): emptying hash table 0(22216) DEBUG: tm [t_funcs.c:90]: tm_shutdown(): removing semaphores 0(22216) DEBUG: tm [t_funcs.c:92]: tm_shutdown(): destroying tmcb lists 0(22216) DEBUG: tm [t_funcs.c:95]: tm_shutdown(): done 0(22216) INFO: <core> [core/sctp_core.c:53]: sctp_core_destroy(): SCTP API not initialized 0(22216) DEBUG: <core> [core/mem/shm.c:261]: shm_destroy_manager(): destroying memory manager: q_malloc 0(22216) DEBUG: <core> [core/mem/q_malloc.c:1165]: qm_shm_lock_destroy(): destroying the shared memory lock 0(22216) DEBUG: <core> [core/mem/pkg.c:91]: pkg_destroy_manager(): destroying memory manager: q_malloc In mongoDB, I have the collection "version" in the db kamailio, and the entries needed for usrloc (location and location_attrs): sre_location:PRIMARY> use kamailio switched to db kamailio sre_location:PRIMARY> db.getCollection("version").find() { "_id" : ObjectId("5a8ec43c601b262bef82a595"), "table_name" : "location", "table_version" : 9 } { "_id" : ObjectId("5a8edb72a3ec40427577b8d0"), "table_name" : "location_attrs", "table_version" : 1 } And logs in mongo show the following info when kamailio starts: 2018-02-22T17:13:02.604+0100 I NETWORK [conn90] received client metadata from 10.0.12.180:56320 conn: { driver: { name: "mongoc", version: "1.9.2" }, os: { type: "Linux", name: "CentOS", version: "6.9 (Final)", architecture: "x86_64" }, platform: "cfg=0x1563000 posix=200809 CC=GCC 4.4.7 20120313 (Red Hat 4.4.7-18) CFLAGS="" LDFLAGS=""" } 2018-02-22T17:13:02.604+0100 I COMMAND [conn90] command admin.$cmd command: isMaster { isMaster: 1, client: { driver: { name: "mongoc", version: "1.9.2" }, os: { type: "Linux", name: "CentOS", version: "6.9 (Final)", architecture: "x86_64" }, platform: "cfg=0x1563000 posix=200809 CC=GCC 4.4.7 20120313 (Red Hat 4.4.7-18) CFLAGS="" LDFLAGS=""" }, compression: [], $readPreference: { mode: "secondaryPreferred" }, $db: "admin" } numYields:0 reslen:716 locks:{} protocol:op_query 0ms 2018-02-22T17:13:02.604+0100 I COMMAND [conn90] command kamailio.$cmd command: find { find: "version", filter: { table_name: "location" }, table_version: 1, $db: "kamailio", $readPreference: { mode: "primaryPreferred" }, $clusterTime: { clusterTime: Timestamp(1519315979, 1), signature: { hash: BinData(0, 0000000000000000000000000000000000000000), keyId: 0 } } } numYields:0 reslen:531 locks:{} protocol:op_msg 0ms 2018-02-22T17:13:02.605+0100 I NETWORK [conn90] end connection 10.0.12.180:56320 (9 connections now open) I probably miss something: it is not clear to me why kamailio is not able to retrieve the value of table_version for the table_name location. Any idea would be very welcome ! I use mongo-c-driver 1.9.2 and mongodb 3.6 Thank you. Stephane

3 14

permissions.allow in conjunction with trusted table
by Ben Hood 12 Mar '18

12 Mar '18

Hi, I'd like to trust HTTP requests from internal subnets and use the trusted table to manage permissions from external networks. Is there a way to configure permissions.allow to trust everything on a local subnet and use the DB table for everything else? Does the permissions module even work in that way (i.e. to use two sources of trust)? If so, what is the permissions.allow syntax to trust a CIDR? Or is it better to split the trust up based on listening ports (i.e. define the route blocks so that requests to the port listening for internal traffic is not subject to the trusted table)? I guess I could also add the trusted internal subnet to the trusted table, but this would be mixing application level stuff with devops stuff. TIA, Ben

2 2

Tracking NAT Helper keepalives
by Mark Boyce 12 Mar '18

12 Mar '18

Hi All Is there any way to extract round trip lime state from keepalives? I have a customer who’d like to duplicate the qualify feature of Asterisk. ie latency / distance of endpoint from server. Can’t see any way to hook in from the docs. Thanks Mark

2 1

SBC rejects SIP INVITE from Kamailio+topos
by José Lopes 12 Mar '18

12 Mar '18

Hello, I am using Kamailio working as edge proxy with topos module active. Kamailio is proxing requests from Freeswitch's to the SBC Metaswitch. The Freeswitch sends SIP REGISTER requests and it is ok (Contact: < sip:1003@172.29.210.164:5070>). When Freeswitch sends SIP INVITE quest, it receives a reply with Forbiden (Contact: <sip:btpsh-5aa0219a-2a32-2@172.29.210.164:5070>). You can check the sip trace at https://pastebin.com/raw/JZUNgYx5 I analysed this issue on SBC Metaswitch and it requires that the INVITE and REGISTER have the same Contact Header. I know that this is not required from SIP RFC, but that it is SBC default security policy. There is any way to configure Kamailio using topos to have the same Contact Header on INVITE and REGISTER? Best regards, José Lopes

2 1

Dialog Terminator
by Leonardo Assunção 12 Mar '18

12 Mar '18

Greetings, Does Kamailio has a method or variable that indicates who cancelled,rejected or terminated a call and, therefore ended the dialog? Currently i'm looking for the sources of BYE's, CANCEL and replies greater than 300 to first INVITE, but i would safer if such a method existed. Thanks in advance

2 1

Presence not notifying?
by Mark Boyce 11 Mar '18

11 Mar '18

Hi All Got a presence problem with what should be a very simple config. Would much appreciate someone having a look at the following and seeing if I’ve missed something obvious :-) Thanks Mark I’ve gone right back to basics and using the example at http://kb.asipto.com/kamailio:presence:k43-blf <http://kb.asipto.com/kamailio:presence:k43-blf> Changes to that example are; - Kamailio 5.1.2 - RTPEngine - NAT Enabled - JSON RPC replacing mi_rpc - HA1 Passwords Setup is; Three phone 20,21,22 all on site behind a NAT (10.1.3.x local IP) at 1.2.3.4 External IP. Phone 21 has BLF Subscriptions on 20 and 22 Domain is set as “mykamailio.com” Kamailio is an Ubuntu server “In the cloud” on 5.6.7.8 (Assuming I have got my domain & ip rewrites correct on the cut’n’paste) What’s Happening; All three phones register 21 Issues SUBSCRIBE:Dialog for 20 and 22. Which get 202 Accepted back after a 407 Proxy Auth SUBSCRIBE sip:22@mykamailio.com:5060 SIP/2.0 Via: SIP/2.0/UDP 10.1.3.84:5065;rport;branch=z9hG4bK3894730624 From: "21@SBC-2" <sip:21@mykamailio.com>;tag=1678729960 To: <sip:22@mykamailio.com> Call-ID: 1544456221(a)10.1.3.84 CSeq: 1 SUBSCRIBE Contact: <sip:21@10.1.3.84:5065> Accept: application/dialog-info+xml Max-Forwards: 70 User-Agent: Yealink SIP-T26P 6.73.0.50 Expires: 1800 Event: dialog Content-Length: 0 I can see these arrive in active_watchers table; *************************** 2. row *************************** id: 2 presentity_uri: sip:20@mykamailio.com watcher_username: 21 watcher_domain: mykamailio.com to_user: 20 to_domain: mykamailio.com event: dialog event_id: to_tag: a6c744f901d779619c580c9ef48ab5e9-2651 from_tag: 1809677495 callid: 2674059037(a)10.1.3.84 local_cseq: 0 remote_cseq: 2 contact: sip:21@10.1.3.84:5065;alias=1.2.3.4~5065~1 record_route: expires: 1520711354 status: 1 reason: version: 0 socket_info: udp:5.6.7.8:5060 local_contact: sip:5.6.7.8:5060 from_user: 21 from_domain: mykamailio.com updated: -1 updated_winfo: -1 flags: 0 user_agent: Yealink SIP-T26P 6.73.0.50 If I make a call from 20 to 22 it works as expected but no notify is sent. For completeness the changes I’ve made to the kamailio.cfg file are; # diff kamailio.cfg_presence_example kamailio.cfg 6a7 > #!define WITH_NAT 119c120 < #!define DBURL "mysql://kamailio:kamailiorw@localhost/kamailio" --- > #!define DBURL "mysql://kamailiorw:password@localhost/test_kamailio" 169a171 > alias="mykamailio.com" 221c223 < mpath="/usr/local/lib/kamailio/modules/" --- > mpath="/usr/lib/x86_64-linux-gnu/kamailio/modules/" 228c230 < loadmodule "mi_fifo.so" --- > loadmodule "jsonrpcs.so" 245d246 < loadmodule "mi_rpc.so" 279c280 < loadmodule "rtpproxy.so" --- > loadmodule "rtpengine.so" 304,307d304 < # ----- mi_fifo params ----- < modparam("mi_fifo", "fifo_name", "/tmp/kamailio_fifo") < < 375,376c372,374 < modparam("auth_db", "calculate_ha1", yes) < modparam("auth_db", "password_column", "password") --- > modparam("auth_db", "calculate_ha1", no) > modparam("auth_db", "password_column", "ha1") > modparam("auth_db", "password_column_2", "ha1b") 414c412 < modparam("presence", "server_address", "sip:192.168.178.54:5060" ) --- > modparam("presence", "server_address”, "sip:5.6.7.8:5060") 454c452 < modparam("rtpproxy", "rtpproxy_sock", "udp:127.0.0.1:7722") --- > modparam("rtpengine", "rtpengine_sock", "udp:127.0.0.1:2223") 835c833 < rtpproxy_manage("co"); --- > rtpengine_manage("co”);

2 5

Re: [SR-Users] From URI == Myself
by Fred Posner 09 Mar '18

09 Mar '18

If you're not listening or identifying that IP and specific port as an alias, then yes, this is expected. One reason why would be to run another program on that port. Fred Posner direct: +1 (224) 334-FRED (3733) > On Mar 9, 2018, at 6:52 AM, Nicolas Breuer <Nicolas.Breuer(a)belcenter.biz> wrote: > > --_000_VI1PR0402MB359898CF4C2CDFCD4EBA5DA189DE0VI1PR0402MB3598_ > Content-Type: text/plain; charset="us-ascii" > Content-Transfer-Encoding: quoted-printable > > Hello the List, > > I saw a strange behavior on the last Kamailio v4. > > The Kamailio is binding on port 5060. > > If (from_uri=3D=3Dmyself){ > ...... > } > > > * When the From uri in the INVITE is <xxxx@myalias:5070> > * When the myalias is an alias > No issue the IF routine is executed. > * When the myalias is the ip address of the server > The IF Routine is = > NOT executed because there is a mismatch in the port (5060 >< 5070) > > > Is it the expected behavior ? > > Thanks > > > > > > > --_000_VI1PR0402MB359898CF4C2CDFCD4EBA5DA189DE0VI1PR0402MB3598_ > Content-Type: text/html; charset="us-ascii" > Con

1 0

From URI == Myself
by Nicolas Breuer 09 Mar '18

09 Mar '18

Hello the List, I saw a strange behavior on the last Kamailio v4. The Kamailio is binding on port 5060. If (from_uri==myself){ ...... } * When the From uri in the INVITE is <xxxx@myalias:5070> * When the myalias is an alias > No issue the IF routine is executed. * When the myalias is the ip address of the server > The IF Routine is NOT executed because there is a mismatch in the port (5060 >< 5070) Is it the expected behavior ? Thanks

1 0

ways to track all messages of a dialog
by Fabian Borot 09 Mar '18

09 Mar '18

I need to track all messages (SIP Requests, SIP Responses) for some SIP dialogs. Let's say I need to log something specific on each state for calls initiated from a certain IP (initial request, temporary replies, rejection with a negative response, call was accepted with 200, termination with BYE, termination with CANCEL etc. ). I am thinking on using flags but I am not sure after reading the tutorial on flags (http://www.kamailio.org/dokuwiki/doku.php/tutorials:openser-flag-operations) if that is going to work properly. The doc says: "They provide a very easy and fast way of keeping states during processing a request or during a transaction". I am afraid that the ACK if the call is accepted and the BYE won't be tracked properly because they are not part of the initial transaction. Also the doc does not mention if the flag is preserved among branches spawned during the processing of the call. The idea is for example: request_route { if (is_method("INVITE")){ if ($si == "192.168.168.100"){ #condition that would set the flag, INVITE came from "my_IP" #flag/mark dialog setflag(1); #log call from "my_IP" was received } route("INCOMING); } If(loose_route() ){ if (is_method("ACK")){ if(isflagset(1)){ #log ACK related to "my_IP" was received } } if (is_method("CANCEL")){ if(isflagset(1)){ #log CANCEL related to "my_IP" was received } } if (is_method("BYE")){ if(isflagset(1)){ #log BYE related to "my_IP" was received } } } } Then : route["INCOMING"] { # do some processing # do some processing t_onreply("INCOMING"); t_on_failure("INCOMING"); t_relay(); } onreply_route[INCOMING] { #do some processing if(isflagset(1)){ #log a reply related to "my_IP" was received } } failure_route[INCOMING] { #do some processing if(isflagset(1)){ #log a negative reply related to "my_IP" was received } } Will the flags work on this case ? My 2nd approach is to use a htable and use the call_id for my calls as the key. The on each route section (reply, failure_reply, ACK processing etc.) find the $ci on the htable and if it is there do the appropriate action. But I need to delete the key:value once the call ends or leave it autoexpire with a expire value bigger than the max_call_duration_time that we have in our system.

3 6

sql_pvquery free result
by Ben Hood 09 Mar '18

09 Mar '18

Hi, Does sql_pvquery() clean up after itself? The other query APIs return a result handle that you clean up with sql_result_free(), but sql_pvquery() doesn’t appear to return any handle, so is it self-collecting? Cheers, Ben

2 2

Why does all the examples on configuring Kamailio install PostgreSQL
by Wilkins, Steve 09 Mar '18

09 Mar '18

Hello All, I have noticed that almost all, if not all examples of installing Kamailio install the PostgreSQL libraries. If one is using MySQL, is there a need for this? Is there something in Kamailio that requires these PostgreSQL libraries to be installed? Thank you

4 3

Resend Authenticate REGISTER to two or more Asterisk PBX
by Social Boh 08 Mar '18

08 Mar '18

Hello, I'd like know which is the best way to resend a Authenticate REGISTER to two or more Asterisk. Repeating rewritehostport and forward commands for the number of Asterisk Servers, there is a problem with the Via Header; Kamailio add one with his IP for each forward. I try to remove the first Via before send the REGISTER to the second Asterisk without success. Any hint or tip? Thank you Regards -- --- I'm SoCIaL, MayBe

2 2

how to check if pseudo-variable contains a String
by Laurent Schweizer 08 Mar '18

08 Mar '18

Dear all, I have a question regarding pseudo-variable, how can I check if a pseudo-variable contains a specific string ? Like to check if $ct contains "transport=tcp". Thanks BR Laurent

1 0

Info: Meeting during FOSSASIA 2018
by Daniel-Constantin Mierla 08 Mar '18

08 Mar '18

Hello, soon I am going to travel to Singapore for FOSSASIA 2018 conference (March 22-25 - https://2018.fossasia.org/), giving a talk about Kamailio. Given that it is rather rare I travel to south-east Asia, I wonder if there are other people from Kamailio community attending FOSASSIA or happen to be in the city during the event. Maybe we can plan something like a small group meetup to greet, have a drink or so and chat about the project and real time communications. Write me if you can join such a meetup. It would be great to meet some kamailians around there! Cheers, Daniel -- Daniel-Constantin Mierla www.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio Advanced Training - April 16-18, 2018, Berlin - www.asipto.com Kamailio World Conference - May 14-16, 2018 - www.kamailioworld.com

1 0

Kamailio Memory Settings
by Duarte Rocha 08 Mar '18

08 Mar '18

Hey. I have some questions about memory settings. I can see the default values with "kamailio -I" and change the current values with "kamailio -M 12 -m 128". How do i see the active settings and how do i change the default value? I want to setup a proxy capable to handle 150CPS, 6k active calls, with Dispatcher, Database, Number Normalizations and other operations. What are good settings for CPU, RAM Memory, PKG_SIZE and SHM_SIZE? Thanks for the help, Best Regards, Duarte Rocha

2 1

Failed auth
by Aidar Kamalov 08 Mar '18

08 Mar '18

Hello! I have kamailio 5.0.5 and some cisco spa 50x phones. Sometime phone can't register to kamailio. REGISTER packets with right nonce,reponse, etc gets to kamailio but it response 401 Unauthorized with code -3 (user not found). After some attempts(or time, phone send register every 1200 seconds) or after reboot phone it register succesfully Feb 13 11:20:02 sipchel /usr/sbin/kamailio[110432]: NOTICE: <script>: AUTH: REGISTER [a470211a-b7d8faa5(a)172.16.3.1] Feb 13 11:20:02 sipchel /usr/sbin/kamailio[110432]: NOTICE: <script>: AUTH: REGISTER FAILED (code: -5) fd=voip.xxxx.org, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, Au=33855(a)voip.xxxx.org [ a470211a-b7d8faa5(a)172.16.3.1] Feb 13 11:20:02 sipchel /usr/sbin/kamailio[110433]: NOTICE: <script>: AUTH: REGISTER [a470211a-b7d8faa5(a)172.16.3.1] Feb 13 11:20:02 sipchel /usr/sbin/kamailio[110433]: NOTICE: <script>: AUTH: REGISTER FAILED (code: -3) fd=voip.xxxx.org, adu=sip:voip.xxxx.org, aa=MD5, ar=voip.xxxx.org, au=33855, ad=, aU=33855, Au=33855(a)voip.xxxx.org [ a470211a-b7d8faa5(a)172.16.3.1] Feb 13 11:20:02 sipchel /usr/sbin/kamailio[110431]: NOTICE: <script>: AUTH: REGISTER [a470211a-b7d8faa5(a)172.16.3.1] Feb 13 11:20:02 sipchel /usr/sbin/kamailio[110431]: NOTICE: <script>: AUTH: REGISTER FAILED (code: -3) fd=voip.xxxx.org, adu=sip:voip.xxxx.org, aa=MD5, ar=voip.xxxx.org, au=33855, ad=, aU=33855, Au=33855(a)voip.xxxx.org [ a470211a-b7d8faa5(a)172.16.3.1] -- Aydar A. Kamalov

2 1

Issue starting with kamctl
by Ruben Lezama 08 Mar '18

08 Mar '18

Hi, I am having issues to start Kamailio using kamctl. root@kamailio2:/etc/systemd/system# kamctl restart INFO: Stopping Kamailio : ERROR: No PID file found (/var/run/kamailio.pid)! Kamailio probably not running INFO: check with 'ps axw | /bin/egrep kamailio' Using #Kamailio starts works. I can register peers and make calls between them. But I cannot update configuration. root@kamailio2:/var/log# kamailio Listening on udp: 127.0.0.1:5060 udp: 192.168.1.100:5060 tcp: 127.0.0.1:5060 tcp: 192.168.1.100:5060 Aliases: tcp: kamailio2:5060 tcp: localhost:5060 udp: kamailio2:5060 udp: localhost:5060 I would appreciate any help provided. Attached the syslog output Ruben

2 1

KeepAlive Module
by Social Boh 08 Mar '18

08 Mar '18

Hello, I'm using keepalive module with drouting module... the event route works fine: NOTICE: <script>: Gateway up: OPTIONS sip:1.2.3.4 NOTICE: <script>: Gateway up: OPTIONS sip:5.6.7.8 but kamcmd command not: *kamcmd keepalive.list* foobar 42 foobar 42 { text: foobar number: 42 } { list: { nn: 17 nn: 22 } } { uri: sip:1.2.3.4 owner: drouting last checked: Wed Feb 21 11:20:12 2018 *last up: Wed Dec 31 19:00:00 1969* *last down: Wed Feb 21 11:20:13 2018* } { uri: sip:5.6.7.8 owner: drouting last checked: Wed Feb 21 11:20:12 2018 *last up: Wed Dec 31 19:00:00 1969* *last down: Wed Feb 21 11:20:12 2018* Thank you Regards... -- --- I'm SoCIaL, MayBe

2 1

Strongswan on same Server in EC2 as kamailio 4.4
by Jonathan Hunter 08 Mar '18

08 Mar '18

Hi Guys, I have an issue with sending a BYE message back down a strongswan VPN tunnel on a server in the Amazon EC2 environment. To get the configuration working correctly I have the Public IP address bound to a loopback virtual interface, and I also have kamailio listening to it. Calls establish without issue, but when the called party send a BYE, I cant seem to force the SIP message down the correct interface. Due to client confidentiality I need to be careful what information I send but does anyone have a similar configuration set up, and working, I am just looking for reasons as to why force_socket and mhomed=1 doesnt appear to force the BYE message via the Public Interface but the private IP address on the server as its a NAT'd environment. So essentially call establishes; CLIENT---------(VIA IPSEC)-INVITE----->(UDP)KAMAILIO PUBLIC IP-------->(UDP)KAMAILIO PRIVATE IP(TCP)------------------------->CLIENT B | | | | |<---------(VIA IPSEC)-100 TRYING----|<----------100 TRYING---------------|<----------100 TRYING----------------------------| | | | | |<---------(VIA IPSEC)-180 RINGING---|<----------180 RINGING--------------|<----------180 RINGING---------------------------| | | | | |<---------(VIA IPSEC)-200OK --------|<----------200OK -------------------|<----------200OK --------------------------------| | | | | |----------(VIA IPSEC)-ACk---------> |-----------ACk--------------------->|-----------ACk---------------------------------->| How can I ensure the BYE is forced out via the PUBLIC IP? So I do this; CLIENT---------(VIA IPSEC)-INVITE----->(UDP)KAMAILIO PUBLIC IP-------->(UDP)KAMAILIO PRIVATE IP(TCP)------------------------->CLIENT B |<---------BYE (VIA IPSEC)----------------------|<----------BYE ----------------------------|<----------BYE -------------------| As it appears to be going from Private IP and not being pushed down the IPSEC tunnel CLIENT---------(VIA IPSEC)-INVITE----->KAMAILIO PUBLIC IP-------->KAMAILIO PRIVATE IP------------------------->CLIENT B |<---------BYE ----------------------<----------BYE ----------------------------|<----------BYE -------------------| on the BYE I have tried; force_send_socket(KAMAILIO PUBLIC IP); However doesnt appear to work, is this an issue for ip routing on the server to push the BYE correctly down the IPSEC tunnel? or is it configuration related? Any comments welcome if people have had this issue before. Many thanks Jon

2 1

Question about t_branch_timeout behavior.
by José Seabra 08 Mar '18

08 Mar '18

Hi there, I have some situations where Kamailio receives replies (100 and then 180) from the other end and after 2 seconds (timer defined on function t_set_fr(0,2000)) after receive the last reply(180) the INVITE transaction enters on the failure route with variable $T_reply_code=408. What can be wrong here to kamailio generates a 408 internally after receive 1xx replies? Best Regards José Seabra

2 1

SIP header when 911 called
by Abdul Basit 08 Mar '18

08 Mar '18

Hi Team, Does kamailio has compatibility with E911, i.e. through location in SIP header when 911 called? Is there any reference document? -- regards, abdul basit

2 1

Choosing a Testing and Validation Tool
by Duarte Rocha 08 Mar '18

08 Mar '18

Hey I need to create several testing and validation processes for the deploy of an SBC and i would like to know your opinion on the best tools to use. I need to create an automated group of testing scenarios and validation of the packets sanity and SIP compliance. I also would like to validate the packets according to some parameters of mine (ex. All numbers in E164, etc). I'm looking at Star Trinity's SIP Tester right now but i'm not sure it can fulfill all my needs. I've also looked into SIPp and considered creating a Kamailio to do the validation, but i'm not sure it's worth the work if i can find a tool prepared to do this. Cheers :)

2 1

Disable non-existent user warning
by Stefan Rüetschli 08 Mar '18

08 Mar '18

Hello sr-users! I'm using Kamailio 5.1.2. If I execute the command "serctl acl grant 1234 mygrant" I get a warning which I have to accept with "Y": Non-existent user '1234'. Still proceeding? [Y|N] Is it possible to deactivate this warning? I know why this warning is there (it's not a user, it's an alias), so I think I know what I'm doing ;-) Regards Stefan

3 4

Kamailio not send NOTIFY for the state of the subscription when using Event: dialog (BLF)
by Borislav Gergov 08 Mar '18

08 Mar '18

Hello, The initial NOTIFY that shows the server accepts our subscription is not sent: SUBSCRIBE sip:002@10.7.2.22;transport=TCP SIP/2.0. Via: SIP/2.0/TCP 10.2.4.38:63718 ;branch=z9hG4bK-524287-1---837a95d50bef81d4;rport. Max-Forwards: 70. Contact: <sip:444@10.2.4.38:63718;transport=TCP>. To: <sip:002@10.7.2.22;transport=TCP>. From: <sip:444@10.7.2.22;transport=TCP>;tag=810bbd39. Call-ID: 8fMhJ4GnMrkSu8qxez70aw... CSeq: 1 SUBSCRIBE. Expires: 120. Accept: application/dialog-info+xml. Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE. User-Agent: Z. Event: dialog. Allow-Events: presence, kpml, talk. Content-Length: 0. . SIP/2.0 202 OK. Via: SIP/2.0/TCP 10.2.4.38:63718 ;branch=z9hG4bK-524287-1---837a95d50bef81d4;rport=63718;received=10.2.4.38. To: <sip:002@10.7.2.22 ;transport=TCP>;tag=339c21513a585618341888f199c2a0f6-c10d. From: <sip:444@10.7.2.22;transport=TCP>;tag=810bbd39. Call-ID: 8fMhJ4GnMrkSu8qxez70aw... CSeq: 1 SUBSCRIBE. Expires: 120. Contact: <sip:10.7.2.22:5060;transport=tcp>. Server: kamailio (5.1.1 (x86_64/linux)). Content-Length: 0. . SIP/2.0 200 OK. Via: SIP/2.0/TCP 10.2.4.38:63718 ;branch=z9hG4bK-524287-1---5b9c08901116e843;rport=63718;received=10.2.4.38. To: <sip:444@10.7.2.22 ;transport=TCP>;tag=75017b5d51cabe3de4b519c896167ee7.88a9. From: <sip:444@10.7.2.22;transport=TCP>;tag=d831f844. Call-ID: p-vce2LWcasOPThxdFZP6A... CSeq: 3 REGISTER. Contact: <sip:444@10.2.4.38:63718 ;transport=TCP;rinstance=045d4a61cf8385dc>;expires=120. Server: kamailio (5.1.1 (x86_64/linux)). Content-Length: 0. . NOTIFY sip:444@10.2.4.38:63718;transport=TCP SIP/2.0. Via: SIP/2.0/TCP 10.7.2.22;branch=z9hG4bK94d5.046c6940000000000000000000000000.0. To: <sip:444@10.7.2.22>;tag=810bbd39. From: <sip:002@10.7.2.22>;tag=339c21513a585618341888f199c2a0f6-c10d. CSeq: 2 NOTIFY. Call-ID: 8fMhJ4GnMrkSu8qxez70aw... Content-Length: 0. User-Agent: kamailio (5.1.1 (x86_64/linux)). Max-Forwards: 70. Event: dialog. Contact: <sip:10.7.2.22:5060;transport=tcp>. Subscription-State: terminated;reason=timeout. . SIP/2.0 200 OK. Via: SIP/2.0/TCP 10.7.2.22;branch=z9hG4bK94d5.046c6940000000000000000000000000.0. Contact: <sip:444@10.2.4.38:63718;transport=TCP>. To: <sip:444@10.7.2.22>;tag=810bbd39. From: <sip:002@10.7.2.22>;tag=339c21513a585618341888f199c2a0f6-c10d. Call-ID: 8fMhJ4GnMrkSu8qxez70aw... CSeq: 2 NOTIFY. User-Agent: Z. Content-Length: 0.

2 1

consume_credentials question
by Aymeric Moizard 07 Mar '18

07 Mar '18

Hi list! I'm trying to remove Proxy-Authorization dedicated to local subscriber without -and not the other ones dedicated to other server- I realized that "consume_credentials" doesn't work because it requires that a call to "www_authorize, proxy_authorize, www_authenticate or proxy_authenticate" has been made before. I have a use-case where this isn't called. I don't want to use such code: if (is_present_hf("Proxy-Authorization")) { remove_hf("Proxy-Authorization"); } Because this may remove a "Proxy-Authorization" for another service. I have seen this: has_credentials but it doesn't help to know which header is the one containing the header... Any good way to find the header and index? And then remove it with remove _hf_value2? Regards Aymeric -- Antisip - http://www.antisip.com

2 2

SIP RFC behaviour for 180/200 to_tag mismatch
by Mititelu Stefan 07 Mar '18

07 Mar '18

Hi people, I am trying to search for the RFC behavior in case of 180/200 to tag mismatch of an INVITE. From my readings so far, I'm not 100% convinced of the correct behavior. However, there may be a scenario, where this might be plausible: 1. parallel forked two calls 2. 180 ringing comes for first one, but not for second one(various reasons) 3. 200 ok comes for second one Any opinions about this? Do you have some references that will make this 100% clear? Thank you, Stefan

2 2

sqlops module error
by Fabian Borot 06 Mar '18

06 Mar '18

I am using the sqlops module with odbc to INSERT,UPDATE only and as the documentation says I can omit result parameter in "sql_query". However I always see these ERRORS when processing the call: This is an example of a query: sql_query("c04", "insert into SIPInfo302CDR (SIPCallID,SessionID) values('$ci',$var(SessionID))"); And these are the error lines in the log: ERROR: db_unixodbc [res.c:60]: db_unixodbc_get_columns(): no columns returned from the query ERROR: db_unixodbc [res.c:261]: db_unixodbc_convert_result(): getting column names failed ERROR: db_unixodbc [dbase.c:216]: db_unixodbc_store_result(): failed to convert result ERROR: <core> [db_query.c:188]: db_do_raw_query(): error while storing result ERROR: sqlops [sql_api.c:265]: sql_do_query(): cannot do the query [insert into SIPInfo302CDR (SIPCa] I have also tried using the parameter like shown below but the ERROR events happen anyways. sql_query("c04", "insert into SIPInfo302CDR (SIPCallID,SessionID) values('$ci',$var(SessionID))", "ra"); sql_result_free("ra"); Even though the errors line show up and say that " cannot do the query .." the query does work and the records are inserted/updated accordingly. I tried using the "sql_query_async" function that does not need the result parameter but I can't use it with unixODBC, I see these lines in the log when trying to use it: "the db driver module doesn't support async query" and the record is not inserted/updated. I also added the "async_workers" core parameter as well just in case. I also tried declaring them in the module sqlops initialization section even though in my case there is no need: "modparam("sqlops", "sqlres", "ra")" but the errors show up anyways. When I test with SEELCT query the result parameter can be used, I can count rows etc. But I am only doing INSERT/UPDATE. Am I am missing something here or this is something that can be safely used like that and I just need to ignore them. I am using " Kamailio (OpenSER) SIP Server v5.0" Thank you Fabian

2 1

Re: [SR-Users] cnxcc module - make auth for redis connection
by Donat Zenichev 06 Mar '18

06 Mar '18

Hi Daniel, first of all thanks for your attention. Perhaps I missed something. I read documentation about cnxcc and ndb_redis again, but I haven't found information that can help me with my goal. ndb_redis is separate module that implements connections to redis databases (and also is able to perform authentication), has it's own functions like redis_cmd() to interact directly with redis. But cnxcc stores real-time amounts in redis hash keys using it's own parameter - modparam("cnxcc", "redis", "addr=127.0.0.1;port=6379;db=1") And I can't see possibility to use ndb_redis to perform authentication for cnxcc module, correct me if I'm wrong. Do you offer me to read ndb_redis code sources to use them to edit cnxcc code sources? Thanks in advance for your advice. 2018-03-01 9:28 GMT+02:00 Donat Zenichev <donat.zenichev(a)gmail.com>: > Hi Daniel, first of all thanks for your attention. > > Perhaps I missed something. I read documentation about cnxcc and ndb_redis > again, but I haven't found information that can help me with my goal. > ndb_redis is separate module that implements connections to redis > databases (and also is able to perform authentication), has it's own > functions like redis_cmd() to interact directly with redis. > > But cnxcc stores real-time amounts in redis hash keys using it's own > parameter - modparam("cnxcc", "redis", "addr=127.0.0.1;port=6379;db=1") > And I can't see possibility to use ndb_redis to perform authentication for > cnxcc module, correct me if I'm wrong. > > Do you offer me to read ndb_redis code sources to use them to edit cnxcc > code sources? > Thanks in advance for your advice. > > > > 2018-02-28 14:33 GMT+02:00 Daniel-Constantin Mierla <miconda(a)gmail.com>: > >> Hello, >> >> maybe authentication support was not implemented in cnxcc. Eventually it >> can be extracted from the ndb_redis, that module has it implemented already. >> >> * https://www.kamailio.org/docs/modules/stable/modules/ndb_red >> is.html#ndb_redis.p.server >> >> Cheers, >> Daniel >> >> On 27.02.18 14:39, Donat Zenichev wrote: >> >> Nevertheless, I want to find the needed solution. >> In my opinion - If module is able to connect to redis databases, it'd >> better to perform it with authentication. >> >> Because, there are cases when db located on localhost is improper >> solution or other users mustn't see hkeys, amounts inside hkeys it etc. >> So I think no one will be mind, to have whole possibility - real-time >> billing (cnxcc) working with redis securely. >> >> So please don't be apathetic to my request. >> >> 2018-02-26 9:44 GMT+02:00 Donat Zenichev <donat.zenichev(a)gmail.com>: >> >>> Hi community. >>> This message is specially dedicated to developers of the kamailio >>> project. >>> >>> I need to find solution how to make authentication for connections of >>> cnxcc with redis. >>> For that moment, cnxcc module is able to connect to redis only without >>> password (Carlos Ruiz Díaz will add this possibility later?). >>> So that, this makes database vulnerable. >>> >>> Well, furthermore I don't want to use local redis database, cuz I think >>> machine that contains kamailio daemon, must perform just this kind of >>> actions - SIP proxying (kamailio server is not to be a database server or >>> anything else). >>> >>> For that moment we use separate redis db for cases like that, but this >>> is not best practice I think. >>> I already tried to find solution (for e.g. connections via another >>> module like db_redis: >>> https://github.com/kamailio/kamailio/pull/1432) but I got advice - >>> achieving my goal by sr-users mailing list. >>> >>> Please pay attention for my request. I think this will be very helpfull >>> for others. >>> >>> >>> >>> -- >>> -- >>> BR, Donat Zenichev >>> Wnet VoIP team >>> Tel Ukraine: +380(44) 5-900-800 >>> Tel USA: +164(67) 8-174-17 (ext 1320) >>> https://w-net.us/ <http://wnet.ua> >>> >> >> >> >> -- >> -- >> BR, Donat Zenichev >> Wnet VoIP team >> Tel Ukraine: +380(44) 5-900-800 >> Tel USA: +164(67) 8-174-17 (ext 1320) >> https://w-net.us/ <http://wnet.ua> >> >> >> _______________________________________________ >> Kamailio (SER) - Users Mailing Listsr-users@lists.kamailio.orghttps://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users >> >> >> -- >> Daniel-Constantin Mierlawww.twitter.com/miconda -- www.linkedin.com/in/miconda >> Kamailio Advanced Training - March 5-7, 2018, Berlin - www.asipto.com >> Kamailio World Conference - May 14-16, 2018 - www.kamailioworld.com >> >> > > > -- > -- > BR, Donat Zenichev > Wnet VoIP team > Tel Ukraine: +380(44) 5-900-800 > Tel USA: +164(67) 8-174-17 (ext 1320) > https://w-net.us/ <http://wnet.ua> > -- -- BR, Donat Zenichev Wnet VoIP team Tel Ukraine: +380(44) 5-900-800 Tel USA: +164(67) 8-174-17 (ext 1320) https://w-net.us/ <http://wnet.ua>

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users