We are trying to configure Kamailio (3.1.x) as a "boarder proxy" where it acts as the front for various carrier gateways so that internal UACs and UASs are unaware of the carrier gateways.
Let me try to present a clear picture of our setup.
1. Kamailio has several NICs (physical or vlan). Each on a different subnet. One subnet is internal/has routes for internal. Other subnets are private connections to carriers or a route to public Internet.
2. All of these subnets are non-…
[View More]routable from Internet. In addition , the carrier private connections are not routable internally.
3. Connection to public internet is via a FW/NAT (one-to-one NAT), which maps to one of the interfaces.
4. All internal UAC/UAS connect on the internal subnet.
5. We are using RTPProxy (at least one instance per carrier) to relay media between internal and carrier subnets
We are able to make this setup up work great except for one scenario. One of the carriers is only reachable via public Internet. Due to security requirements, our Kamailio cannot have a public IP address and must use FW/NAT. I guess this scenario is "Proxy behind NAT" and not really encouraged. But I would like to see if there is a way to make this work. We cannot use the "advertised_address" since it changes the IP for every "route".
We were able to get this mostly working by doing the following
1. mhomed=1
2. Small patch in the rtpproxy module so that force_rtp_proxy actually uses the IP address passed (public IP).
3. Using request_route_preset("publicIP")
The above "mostly" works. By that I mean, the INVITE transaction is properly passed between internal UAS and carrier SBC and the call is setup. However, further transactions (BYE/re-INVITE) etc do not work properly. So, far-end hangups are not working etc.
I've searched various archives of this and other SER lists looking to see if anyone was able to get this scenario working, but couldn't find a definitive answer. Most of them point to using "advertised_address".
So, and ideas on how to make "Proxy behind NAT" work without using advertised_address? Am I wasting my time?
Thanks in advance for any help you can offer.
SV.
[View Less]
Hello,
it is now one month till the 10 years SER event in Berlin. I am thinking
to collect few statistics about usage of SER-based code at this moment
(SER, OpenSER, Kamailio, OpenIMSCore ...) and present them during the
conference and publish on the web.
Everything is going to be like a combined report, not individual
listing. Therefore, if you want to participate, your name or company
won't be mentioned.
Here are the stats I thought of:
- type of usage: production, evaluation (…
[View More]testing), research
- number of subscribers (phone lines)
- percentage of phones behind NAT
- number of calls per month
- number of call minutes per month
I am not looking for exact numbers, but rough estimation (e.g., about 10
000 phone lines, ...). Of course, some of the metrics don't apply always
(e.g., if you do termination routed through SIP server, you don't have
subscribers, but just calls traffic). Those doing deployments, can make
one summary of statistics for all instances. You may send other
statistics you think they worth publishing.
Again, this is voluntary, naming is not required. I hope only those
giving real number will write back -- I will try anyhow to figure out if
someone is just dumping fantasy numbers. If privacy is really a big
concern, from case to case, everything can be done under NDA.
Thanks,
Daniel
--
Daniel-Constantin Mierla -- http://www.asipto.com
Kamailio Advanced Training, Oct 10-13, Berlin: http://asipto.com/u/kathttp://linkedin.com/in/miconda -- http://twitter.com/miconda
[View Less]
Hi,
I would like to resend the INVITE to another gateway if the original
fails (503, 500, etc.). Is there any module or mechanism which could
do this ?
Mino
Hi!
If you haven't noticed yet, SER (the mother of the SIP proxy projects
Openser, Kamailio, sip-router, opensips, ....) is celebrating their 10th
year. There will be a main event happening in Berlin
(http://sip-router.org/10-years-ser/).
For those who can not travel to this event, there will be some smaller
events around the world.
In Vienna, this will happen on the 8th September at 7pm in the evening,
organized by Andreas Granig and myself. We do not plan to have a big
event with speaker, …
[View More]it is just an informal come together to meet with
other SER-interested[1] guys, having some techie talks, maybe getting
some business contacts and drinking some beers. Drinks will be sponsored
by http://www.ipcom.at/ and http://www.sipwise.com/.
The event will happen in the city center of Vienna. The location is not
fixed yet, it depends on how many people are going to attend. Thus,
please let us know if you going to attend (send us a short e-mail) and
spread this e-mail to interested people you know.
Cheers
Andreas and Klaus
[1] User's of all SER-flavors are welcome
[View Less]
Hello SR List,
our background is classic telephony with E1 interfaces, active telephony-cards etc.
We now got our telephone-plattform transformed for SIP, but all behind a firewall.
Actually we receive calls from some carriers throu the firewall on our Asterisk,
which has E1 links to the IVR -Plattform. Now we want to eliminate Asterisk as kinda
internal PSTN gateway and direcly route the calls throu Kamailio to our IVR services.
So we thought, hey Kamailio can't be that complicated to …
[View More]setup,
but now we have to admit - that we are kinda "LOST".
We are located in Hamburg / Germany and need HELP.
Is on this list anyboy - who can help us, maybe from around Hamburg?
Get us on the kamailio train or maybe help us on a continous bases?
Thanks from Hamburg,
René
[View Less]
Hello,
I am having difficulty running the snmpstats module. We are running CentOS 5.6 and Kamailio version 3.1.1 (i386/linux). I've tried a fresh install of Kamailio, installing net-snmp from source but I can't seem to get it running - I've seen a couple of posts regarding the issue but nothing seems to work for us!!
The issue I get when I start Kamailio is:
0(27523) ERROR: <core> [sr_module.c:523]: ERROR: load_module: could not open module </usr/local/lib/kamailio/modules_k/…
[View More]snmpstats.so>: /usr/lib/libnetsnmpagent.so.10: undefined symbol: hosts_ctl
Any help would be much appreciated. Also, if anyone has any suggestions on how best to get either Solarwinds or PRTG to monitor our Kamailio servers that would be good.
Thanks.
Stephen Dodge
Visit www.bistech.co.uk<http://www.bistech.co.uk/> for news and information
Regards
Stephen Dodge
Visit www.bistech.co.uk<http://www.bistech.co.uk/> for news and information
________________________________
Information in this message, including any attachments, is confidential to the person to whom it is addressed and may be legally privileged. If you are not the intended recipient please notify the sender and delete the message from your system. Please note that Bistech Group plc, Bistech plc, Bisnet Limited and the sender do not accept any responsibility for viruses. It is your responsibility to check the e-mail and any attachments for viruses. Calls may be monitored and recorded.
[View Less]
Hi all,
I am attempting to only reply to NOTIFY when the request is originating
from a user/device that is authenticated on kamailio already. There are
2 ways I've tried (below) but neither will work.
Any idea on what I am doing wrong or suggestions on how to do it right?
TIA,
Skyler
if(is_method("NOTIFY") && is_registered("location"))
{
route(ROUTE_NOTIFY);
}
OR ....
if(is_method("NOTIFY"))
{ # We only reply OK if coming from authenticated …
[View More]users or trusted
peers
if(!registered("location") || !from_any_gw("$avp(s:ip)"))
{
sl_send_reply("503", "Service Unavailable");
exit;
}
xlog("L_INFO", "Friendly Peer Poke - M=$rm F=$fu R=$ru\n");
sl_send_reply("200", "OK");
exit;
}
[View Less]
(apologies if you receive multiple copies of this mail)
Hello,
the SIP Express Media Server version 1.4.2 is available. Users of SEMS
1.4 versions and anyone else is recommended to upgrade to that
version. Please find below the relevant changelog, the source at
ftp://ftp.iptel.org/pub/sems/sems-1.4.2.tar.gz
and Debian/Ubuntu packages as always at OBS
https://build.opensuse.org/project/show?project=home%3Ateam-sems
Many thanks to everyone who contributed with testing, bug fixes,
…
[View More]documentation and feedback.
* SEMS 1.4.2 release
* auth'ed BYE (wait_for_bye_transaction)
* fixes SIP auth for qop header format
* xmlrpc: fix busyloop with keep-alive
* a few minor SST issues
* builds on Ubuntu 11.4 (build-deps)
* ivr: release GIL on blocking file I/O
* SBC: fix codec filter for unnamed payloads<96
* fixed DSM variables to outgoing call
* some examples and documentation added
This release introduces a new configuration option
wait_for_bye_transaction=yes which enables authentication of BYE
requests sent by SEMS, which is disabled by default. If this option is
not enabled, SEMS behaves like in 1.4.1.
With Best Regards
Stefan Sayer for the SEMS community
--
frafos.com
[View Less]
Hi, Henrik...
Please, never, ever, forget to copy the list in a thread initiated
there... other may be "curious" on it... ;)
About your configuration, it seems that you just need a 'simple forward'
server. It's very simple to accomplish... Make a simple forward
configuration script (you can start with the provided one and cut all
registration and whistles). Just be aware of all security issues binded
to this choice.
Ok... you still can load any of the control modules (pike, p.ex.) and
…
[View More]have some prevention, but even so it's not your best choice.
Edson.
Em 29/08/2011 12:13, Henrik Aagaard Sørensen escreveu:
> Hi Edson.
>
> I do know the different definitions as SIP-Proxy, SIP-Server etc. (I hope).
>
> That's why I want Kamailio to act as a SIP-Proxy, not a SIP-Server, as
> it does currently.
>
> As I've understood Kamailio and SIP-Router is pretty much the same
> thing. Going to sip-router.org <http://sip-router.org> for downloads
> also refers to Kamailio.
>
> So shouldn't it be possible to use Kamailio as SIP-Proxy? Or have I
> misunderstood that.
>
> I do not want my Kamailio to take registrations etc. It should just
> forward SIP messages between client and SIP-Server, as I'm not allowed
> to register towards my current SIP-Server with my current IP. But my
> server, where the Kamailio is running, is allowed with it's IP.
>
> 2011/8/29 Edson - Lists <4lists(a)gmail.com <mailto:4lists@gmail.com>>
>
> Hi, Henrik...
>
> Sip-Router is "just" a SIP Proxy... but a dam good one...
>
> You have to take a step back... You are mixing concepts when
> affirming that SR is playing SIP-Server roles... Please take a
> better look on the definitions (SIP-Proxy, SIP-Server, Registrar,
> etc) and find wich system play each role.
>
> In your actual scenario they are mixed concepts.
>
> Draw your target scenario with all the alternatives. You will find
> many of them. Only them you will be able to point the roles each
> component can and will have to play in the chosen scenario. Each of
> this "play alternatives" (roles played by each component) will give
> You Pros and Cons (security, scalability, velocity, etc, etc, etc) ...
>
> Make Your choice, try to implement it and this list will be able to
> help you when problems on SR (SER or KAMAILIO flavors) configuration
> come to play.
>
> Edson.
>
> Em 29/08/2011 11:46, Henrik Aagaard Sørensen escreveu:
>
> This is my current setup, which works:
> SIP client <-> SIP server.
>
> As I've currently moved to another country I would like to be
> able to do
> the following setup:
> SIP client <-> Kamailio SIP proxy <-> SIP server.
>
> As the SIP server only accept packets from specific IP's.
>
> Is it possible?
>
> I've managed to setup a simple Kamailio installation on my
> server, which
> does have a valid IP for the SIP server.
> With the Kamailio installation I've also enabled NAT with RTPProxy.
>
> My problem is now, that the Kamailio installation doesn't work as a
> simple proxy, but actually takes registrations etc. and acts as a
> "full-blown" SIP server.
>
> It should only take SIP messages and transfer them between
> clients and
> server.
>
> Any ideas?
>
>
> _________________________________________________
> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users
> mailing list
> sr-users(a)lists.sip-router.org <mailto:sr-users@lists.sip-router.org>
> http://lists.sip-router.org/__cgi-bin/mailman/listinfo/sr-__users <http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users>
>
>
[View Less]
This is my current setup, which works:
SIP client <-> SIP server.
As I've currently moved to another country I would like to be able to do the
following setup:
SIP client <-> Kamailio SIP proxy <-> SIP server.
As the SIP server only accept packets from specific IP's.
Is it possible?
I've managed to setup a simple Kamailio installation on my server, which
does have a valid IP for the SIP server.
With the Kamailio installation I've also enabled NAT with RTPProxy.
My problem …
[View More]is now, that the Kamailio installation doesn't work as a simple
proxy, but actually takes registrations etc. and acts as a "full-blown" SIP
server.
It should only take SIP messages and transfer them between clients and
server.
Any ideas?
[View Less]