sr-users

sr-users@lists.kamailio.org

30 participants
37385 discussions

$Rp variable seems to contain wrong port
by Ross McKillop 03 Nov '22

03 Nov '22

Hi All, At the risk of possibly dragging up an old thread (https://lists.kamailio.org/pipermail/sr-users/2021-June/112791.html <https://lists.kamailio.org/pipermail/sr-users/2021-June/112791.html>) I’m seeing unusual behaviour where $Rp is still showing what I think is the ‘wrong’ behaviour, but given Daniel’s reply on the earlier thread I want to be sure this isn’t the intended behaviour. The thread above confirms that $Rp is not taken from the IP layer but is intended to give the attribute of the listen socket associated with the SIP traffic, which is fine and what I’m expecting, but in my case it doesn’t seem to be working this way. (I’ve tried with and without tcp_reuse_port=yes and tcp_connection_match=1 too just in case one of the above parameters has changed this behaviour) If Kamailio listening on multiple ports e.g. listen=tcp:10.30.22.73:7701 listen=tcp:10.30.22.73:7702 listen=tcp:10.30.22.73:7703 listen=tls:10.30.22.73:7801 listen=tls:10.30.22.73:7802 listen=tls:10.30.22.73:7803 And I use $fs to force the socket of an outbound message to one of the above before t_relay() it works as expected (with tcp_reuse_port it originates from the given port number above, without that set it will originate from a different ephemeral port even to the same destination, so $fs is working as expected) Then, in reply_route{} I have a simple line to add the port it was received on to the headers (I’ve also tried with $RAp) append_hf("X-Rcvd-Port: $Rp\r\n”); In every case, the reply seems to contain the *first* port of the protocol type (so in the above example every TCP reply irrespective of whether it is to 7701/02/03 will show $Rp 7701, and every TLS reply will show 7801) Any advice or insight anyone can offer would be much appreciated. Thanks, Ross

1 0

Siptrace and Kamailio "stress" test
by Igor Olhovskiy 03 Nov '22

03 Nov '22

Hello, Found an interesting scenario, maybe something could be done here. I have a siptrace module configured like modparam("siptrace", "duplicate_uri", "sip:<MY_HOMER_SERVER>:9060") modparam("siptrace", "hep_mode_on", 1) modparam("siptrace", "trace_to_database", 0) modparam("siptrace", "trace_on", 1) modparam("siptrace", "hep_version", 3) modparam("siptrace", "trace_mode", 1) When Kamailio is under stress test (sipflood via OPTIONS/TLS), with this settings it transfers all flood to HOMER server. At some point Kamailio just stops accepting any new TLS connections. Turning off siptrace solves this issue. As I got, siptrace module is not changing protocol of the message (means not converting TCP/UDP) or so. Could it be possible, that at some point siptrace "eats" all TCP connections (especially if remote HOMER is down or not answering) which leads Kamailio to stop processing any new connections? And is it possible to send HEP traffic only via UDP to prevent this? Yes, sure other option is to trace only "legal" traffic -- Best regards, Ihor (Igor)

3 5

Pipelimit needs restart to reload values
by Duarte Rocha 02 Nov '22

02 Nov '22

Greetings, I've been using the pipelimit module and the pl_check function to control users rates in my proxy. if (!pl_check("$var(UserID)", "TAILDROP", "$var(UserRate)")) { pl_drop(); exit; } In this case $var(UserID) is the pipe and $var(UserRate) is the maximum rate. The value of the rate is retrieved on every call via query to a DB. If I change the UserRate value to 0 CPS on the DB calls are not rejected unless they go over 1 CPS. However, if I restart Kamailio all calls are correctly rejected. Why does this happen? Can I change this behaviour? Cheers, Duarte

3 3

Appending new branches via external means
by Alex Balashov 01 Nov '22

01 Nov '22

Hi, Is there a means of appending new branches from config script for a transaction which is already proceeding in the background, without using `tsilo`? That is to say, I have an async transaction which is resumed in an async worker and is t_relay()’d away to some destination. Meanwhile, I have learned about new destinations for it to try via an incoming registration, and would like to append additional parallel forking branches to that transaction, even though it is already proceeding. ts_append() does this for me; the issue I have is that it is mediated through a registrar, but I am not a registrar. My registrar is upstream, and my proxy is just a front-end to it. So, in essence, I require something like `tsilo` at a more general level, where contacts can be populated by some other mechanism rather than being learned via callbacks out of `usrloc`. Is there a way to accomplish this? Cheers, — Alex -- Alex Balashov | Principal | Evariste Systems LLC Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/

3 6

consume_credentials not working on PRACK?
by Benoit Panizzon 01 Nov '22

01 Nov '22

Hi List I noticed, that one of our CPE copies the Proxy-Authorization HF in almost all messages sent. As PRACK were not authenticated, those headers were potentially sent on to the destination disclosing the authentication username and realm. So assuming, if credentials are present, the client wishes them to be validated, I added: if (has_credentials("$fd")) { xlog("L_INFO", "$cfg(route): got $rm with credentials. Validate them!\n"); route(AUTH); } and in route[AUTH] I call: pv_auth_check() which returns 1 thus success upon which I use: if(!is_method("REGISTER|PUBLISH")) consume_credentials(); If the method is INVITE: Proxy-Authorization HF is removed by consume_credentials() if the method is PRACK: Proxy-Authorization HF is still present on the outbound leg. Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

3 5

Authentication: Is it possible to ignore realm? How to avoice unnecessary challenge because of changed realm?
by Benoit Panizzon 01 Nov '22

01 Nov '22

Hi As mentioned in the last email, we have a CPE which adds credentials to any request so I would like to validate them. We use $rd as realm. Let's use example.com as example. During the initial INVITE, this works as expected. I try to only show the headers I think are relevant to the issue I face. INVITE sip:1234@example.com SIP/2.0 Proxy-Authorization: [...] realm="example.com" Contact: <sip:9876@192.168.1.1:5060> Authentication user in realm "example.com" == $rd is validated and accepted. The connection is establised: 200 OK From: <sip:9876@example.com>;tag=1 To: <sip:1234@example.com>;tag=2 Contact: <sip:1234@192.168.7.7:5060> The caller terminates the connection: BYE: sip:1234@192.168.7.7:5060 SIP/2.0 From: <sip:9876@example.com>;tag=1 To: <sip:1234@example.com>;tag=2 Proxy-Authorization: [...] realm="example.com" Performing: $var(authres) = pv_auth_check("$rd", "$avp(authsecret)", "0", "1"); fails wirh result -5 as there is no authsecret for realm "192.168.7.7" So an unnecessarey challenge is issued: SIP/2.0 407 Proxy Authentication Required To: <sip:1234@example.com> From: <sip:9876@example.com> CSeq: 3 BYE Proxy-Authenticate: Digest realm="192.168.7.7" To which the client replies with the changed realm: Proxy-Authorization: Digest username="****",realm="157.161.7.7",[...] and succeeds authentication. Is there a way to accept 'any' realm? Or to avoid this unnecessary change of realm just because the remote site submitted a domain realm in the contact header? Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

2 2

SIP routing per MSISDN
by Anthony Blandin 30 Oct '22

30 Oct '22

Hello, I need to route SIP INVITE towards a specific node based on the MSISDN of the Request URI. I saw that the dispatcher module should be able to make this with the function ds_select_dst and the algorithm "hash over request-URI user" but I don't understand how the routing is done if we can't associate the request-URI user with the destination address in the dispatcher DB. Maybe my understanding of this module is wrong. Could you help me to achieve this? Thanks Anthony

3 2

Kamailio sending response to source IP and port from Via ?
by Chaigneau, Nicolas 27 Oct '22

27 Oct '22

Hello, I'm using Kamailio in stateless mode to send redirect responses. I've noticed that the responses are sent to the packet source IP address, and to the port found in the Via header. I'm a bit confused. I was expecting the response to be sent to the address and port found in the Via header. Is it the expected behaviour ? I'm using Kamailio 5.5.2. Thanks for your help ! Regards, Nicolas. This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.

2 4

Issue with debug 3 after upgrade to kamailio 5.6.2+
by Julia Bo 27 Oct '22

27 Oct '22

Hello, After upgrading kamailio 5.6.1 to 5.6.2 (from source) debug 3 doesn't print messages related to calls to the log file. I only see OPTIONS transactions in debug. Does anyone have the same problem? Best regards, Julia.

2 3

About the WITH_VOICEMAIL Subscriber message 407 issue
by SparkleZou 26 Oct '22

26 Oct '22

Hi Sir/Madam, I'm trying to set a Fresswitch as the Voicemail server. I set the #!define WITH_VOICEMAIL in the kamailio.cfg file to enable the default VoiceMail configuration. Set the voicemail server address as following : voicemail.srv_ip = "10.120.100.179" desc "VoiceMail IP Address" voicemail.srv_port = "5060" desc "VoiceMail Port" And the kamailio server address is 10.120.100.180. Here face the issue, the Subscribe message could NOT be authorized. The SUBSCRIBER message with token could NOT be forworded to Freeswitch. The log is also attached. It's resllay strange. Please help check. Thanks! BR, Sparkle Zou

3 4

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users