sr-users

sr-users@lists.kamailio.org

42 participants
37519 discussions

[Serusers] Request Response Query
by Kapil Dhawan 17 Dec '06

17 Dec '06

As per RFC 3261, SIP Trapezoid UAC1 - INVITE - UAS1 UAS1 - INVITE - UAS2 UAS1 - 100 Trying - UAC1 But i tried to check logs in SER which shows UAC1 - INVITE - UAS1 UAS1 - 100 Trying - UAC1 UAS1 - INVITE - UAS2 Why is it different. _________________________________________________________________ Mega Fare sale on domestic airlines. Call 1-800-11-8747 now! http://india.makemytrip.com/?Camp=MSN&attrib=Dec/Tag/Mega

1 0

Re: [Users] Duplicate INVITEs - t_lookup_request and t_check_trans
by Mahesh Paolini-Subramanya 16 Dec '06

16 Dec '06

quite quite positive. the reason i am so certain is that there is only *one* place in my entire config file that i actually do a t_relay() (or equivalent). I isolated all the code into route[1], to ease maintainability of my (admittedly complex) config file. In route[1], the relevant section is pretty damn close to if (!t_relay()) { if (!is_method("ACK")) { sl_reply_error(); } } fwiw, its 1.1.0 (latest cvs version thereof) cheers ----- Original Message ----- From: Bogdan-Andrei Iancu < bogdan(a)voice-system.ro > To: mahesh(a)aptela.com Cc: Klaus Darilion < klaus.mailinglists(a)pernau.at >, users < users(a)openser.org > Sent: Thursday, December 14, 2006 12:39:04 PM GMT-0600 Subject: Re: [Users] Duplicate INVITEs - t_lookup_request and t_check_trans Hi Mahesh, I do not think you need t_check_tran() as t_relay() automatically absorbs the retransmissions. are you sure you are not calling t_relay() twice for the same requests? or calling a tm function (t_newtran) before the t_relay ?? regards, bogdan Mahesh Paolini-Subramanya wrote: >Well, i read the documentation again, and found t_lookup_request, and t_check_trans. >Question 1 - t_lookup_request() creates the transaction if it doesn't exist, correct? However, t_check_trans only checks to see if the transaction already exists, correct? > >Question 2 - Assuming that t_check_trans only checks to see if the transaction already exists, then is the following correct? > >Currently I do the following (after stripping out a bunch of stuff) > >if (!t_relay()) { > if (!is_method("ACK")) { > sl_reply_error(); > } >} > >should this, instead, actually look like the following? >if (is_method("INVITE")) { > if (if !t_check_tran()) { > t_relay(); > } >} else if (!is_method("ACK")) { > sl_reply_error(); >} > > > >----- Original Message ----- >From: Klaus Darilion < klaus.mailinglists(a)pernau.at > >To: mahesh(a)aptela.com >Cc: users < users(a)openser.org > >Sent: Thursday, December 14, 2006 2:06:01 AM GMT-0600 >Subject: Re: [Users] Duplicate INVITEs > >Mahesh Paolini-Subramanya wrote: > > >>We're seeing sporadic situations where fones >>a) send an INVITE >>b) ignore the 100-Trying response, and instead >>c) send another INVITE with the same sequence number. >> >>The question is, What should happen here? >> >> > >If the message is completely identical then it is a retransmission. >Retransmissions should be detected by tm module (e.g. t_relay()) and >absorbed, > >regards >klaus > > > > >>Currently, we send back a 500 response (server error). >>Is this correct? (i think not, cause it invariably causes the fone to go fast busy). >>Is this some other response that should occur? >> >>poring over 3261 resulted in a headache, and no additional clarity... >> >> >> >> >> >> >> >>------------------------------------------------------------------------ >> >>_______________________________________________ >>Users mailing list >> Users(a)openser.org >> http://openser.org/cgi-bin/mailman/listinfo/users >> >> > > > > -- ******************************************* Mahesh Paolini-Subramanya (703) 386-1500 x9100 CTO mahesh(a)aptela.com Aptela, Inc. http://www.aptela.com "Aptela: How Business Answers The Call" ******************************************* -- ******************************************* Mahesh Paolini-Subramanya (703) 386-1500 x9100 CTO mahesh(a)aptela.com Aptela, Inc. http://www.aptela.com "Aptela: How Business Answers The Call" *******************************************

1 0

Re: usrloc loading (was Re: [Serusers] Re: Fw: [Users] TM : retransmission timers
by Jiri Kuthan 16 Dec '06

16 Dec '06

Thanks, how could I have missed that! Is what it does it loads usrloc table piece-wise? And if so, why does it do only for mysql? And also, it is saying that old version would have increased memory consumption with TCP/TLS -- does it mean that it does not increase with the new version? -jiri At 14:32 30/11/2006, Ovidiu Sas wrote: >Maybe you are looking for this one: >http://www.openser.org/index.php?option=com_content&task=view&id=48&Itemid=9 > > >Regards, >Ovidiu Sas > >On 11/30/06, Jiri Kuthan <jiri(a)iptel.org> wrote: >>At 12:53 22/11/2006, Weiter Leiter wrote: >>>I know that OpenSER loads (only?) faster. >> >>Can folks share with me what the fast-usrloc-loading feature is about? >>I was not successful finding it out. >> >>Thanks! >> >>-jiri >> >> >>-- >>Jiri Kuthan http://iptel.org/~jiri/ >> >> >>_______________________________________________ >>Users mailing list >>Users(a)openser.org >>http://openser.org/cgi-bin/mailman/listinfo/users > >-- >Jiri Kuthan http://iptel.org/~jiri/

10 18

[Users] determining if From==To
by Mark Price 15 Dec '06

15 Dec '06

Hi, How would one determine if the From address equals the To address, or even better, if the To address is either the same as or an alias of the From address? Thanks Mark Price

4 5

RES: [Users] OpenSER
by Danilo Vilela Dantas 15 Dec '06

15 Dec '06

List of contacts and instant message. ________________________________ De: Adrian Georgescu [mailto:ag@ag-projects.com] Enviada em: sexta-feira, 15 de dezembro de 2006 17:16 Para: Danilo Vilela Dantas Cc: users(a)openser.org Assunto: Re: [Users] OpenSER Hi Danilo, Could you please tell us what features from 1.2.0 do you need so badly? Adrian On Dec 15, 2006, at 8:05 PM, Danilo Vilela Dantas wrote: Hi all What is version OpenSER for the module IMC? Can it use in the OpenSER 1.0.1? And when will be ready the version 1.2.0? Delay? When time delay? Danilo _______________________________________________ Users mailing list Users(a)openser.org http://openser.org/cgi-bin/mailman/listinfo/users

1 0

[Users] new MediaProxy release 1.8.0
by Adrian Georgescu 15 Dec '06

15 Dec '06

Hello, There is a new MediaProxy release available. To upgrade go to http://mediaproxy.ag-projects.com or download the software directly from: http://mediaproxy.ag-projects.com/mediaproxy-1.8.0.tar.gz Changes from version 1.7.2 to 1.8.0 ----------------------------------- - Added support for radius accounting. The accounting type can be specified in the configuration file. To support radius accounting the pyrad module must be installed (available at http://www.wiggy.net/code/pyrad/). - The old boolead switch dbaccounting in the [Accounting] section of mediaproxy.ini was replaced by accounting which is a string specifying the accounting type to be used: none, radius or database. For those using CDRTool, release 5.0 is available, which works with the new Radius accounting of MediaProxy 1.8.0. To upgrade go to http://cdrtool.ag-projects.com/ or download the software directly from: http://download.dns-hosting.info/CDRTool/cdrtool_5.0.tar.gz Kind regards, Adrian Georgescu

1 0

[Users] NEW FEATURE: new pseudo-variables from dialog module
by Bogdan-Andrei Iancu 15 Dec '06

15 Dec '06

Hi everybody, the dialog module exports 2 new pseudo variables: *DLG_lifetime* - the duration (in seconds) of the dialog. The duration is calculated from the dialog confirmation and the current moment. This PV will be available only for sequential requests, after doing loose_route(). So, it can be used to get timestamps foe sequential requests, or to get the overall dialog duration and to use it for accounting. Closes Feature Request 1611930. https://sourceforge.net/tracker/index.php?func=detail&aid=1611930&group_id=… *DLG_status* - Returns the status of the dialog. This PV will be available only for sequential requests, after doing loose_route(). Value may be: 3 - Confirmed by a final reply but no ACK received yet. 4 - Confirmed by a final reply and ACK received. 5 - Dialog ended. Can be used to delay re-INVITEs until ACK is received and avoid signalling races. Closes Feature Request 1610630. https://sourceforge.net/tracker/index.php?func=detail&aid=1610630&group_id=… regards, bogdan

1 0

[Serusers] Interdomain remote disconnect
by Maciej Żwirski 15 Dec '06

15 Dec '06

Hi, I've a following problem: I'm dialing over voip to another domain. Everything swings except that when a remote party hangs up, I don't get a disconnect signal at my caller. Instead I'm getting ". I'm pretty sure I messed up something with my force/unforce proxy but I just can't get it working right. Note that when I'm calling to the PSTN (same transit proxy) through Asterisk I do get the disconnect signal. Any help would be appreciated :). Below is the config of my local proxy. I can post my transit proxy conf if needed. Thanks, Maciek debug=3 fork=no log_stderror=yes listen=<local_proxy> port=5060 children=4 mpath="/usr/local/lib/openser/modules/" dns=no rev_dns=no alias="yam" fifo="/tmp/ser_fifo" fifo_db_url="mysql://openser:openserrw@localhost:3306/openser" loadmodule "sl.so" loadmodule "tm.so" loadmodule "rr.so" loadmodule "maxfwd.so" loadmodule "usrloc.so" loadmodule "registrar.so" loadmodule "mysql.so" loadmodule "auth.so" loadmodule "auth_db.so" loadmodule "uri.so" loadmodule "uri_db.so" loadmodule "domain.so" loadmodule "nathelper.so" loadmodule "textops.so" loadmodule "avpops.so" loadmodule "permissions.so" loadmodule "uac.so" loadmodule "acc.so" loadmodule "auth_radius.so" loadmodule "group_radius.so" loadmodule "avp_radius.so" loadmodule "xlog.so" loadmodule "cpl-c.so" loadmodule "exec.so" #modparam("auth_db","calculate_ha1",1) #modparam("auth_db","password_column","password") modparam("auth_db|permissions|uri_db|usrloc|cpl-c","db_url","mysql://openser:openserrw@localhost:3306/openser") modparam("usrloc", "db_mode", 2) modparam("usrloc|registrar","use_domain",1) modparam("rr", "enable_full_lr", 1) modparam("tm", "fr_inv_timer", 120) #modparam("tm", "fr_inv_timer_avp", "inv_timeout") modparam("permissions", "db_mode", 1) modparam("permissions", "trusted_table", "trusted") modparam("nathelper","rtpproxy_sock","unix:/var/run/rtpproxy.sock") modparam("nathelper","natping_interval",0) modparam("nathelper","ping_nated_only",1) modparam("registrar","nat_flag",6) modparam("registrar","sip_natping_flag",7) modparam("avpops", "avp_url", "mysql://openser:openserrw@localhost:3306/openser") modparam("avpops", "avp_table", "usr_preferences") modparam("avpops", "use_domain", 1) modparam("acc", "radius_flag",1) modparam("acc", "radius_missed_flag", 2) modparam("acc", "log_flag", 1) modparam("acc", "log_missed_flag", 1) modparam("acc", "service_type", 15) modparam("acc", "radius_extra", "Sip-Src-IP=$si;Sip-Src-Port=$sp") modparam("acc", "report_ack",1) modparam("acc|auth_radius|group_radius|avp_radius","radius_config","/usr/local/etc/radiusclient-ng/radiusclient.conf") modparam("group_radius", "use_domain", 1) modparam("avpops", "avp_aliases", "day=i:101;time=i:102") modparam("cpl-c","cpl_table","cpl") modparam("cpl-c","cpl_dtd_file","/usr/local/etc/openser/cpl-06.dtd") #modparam("cpl-c","log_dir","/var/log/openser") modparam("cpl-c","lookup_domain","location") modparam("cpl-c","use_domain",1) modparam("cpl-c","nat_flag",6) modparam("cpl-c","proxy_recurse",2) modparam("cpl-c","proxy_route", 0) #modparam("cpl-c","timer_avp","i:5") route{ #-------------------------------------- # Sanity Check Section #-------------------------------------- if (!mf_process_maxfwd_header("10")){ sl_send_reply("483", "Too Many Hops"); return; }; if (msg:len > max_len){ sl_send_reply("513", "Message Overflow"); return; }; #-------------------------------------- # Record Route Section #-------------------------------------- if (method!="REGISTER") { record_route(); }; if (method=="BYE" || method=="CANCEL"){ xlog("L_INFO","$tu\n $fu\n $ru\n"); unforce_rtp_proxy(); }; #-------------------------------------- # Loose Route Section #-------------------------------------- if (loose_route()) { log(1,"loose route\n"); if (is_method("BYE")) { unforce_rtp_proxy(); sl_send_reply("200","Bye"); # acc_rad_request("200"); # acc_log_request("200"); } if((method=="INVITE" || method=="REFER") && !has_totag()) { sl_send_reply("403","Forbidden"); return; }; if (method=="INVITE") { if (!allow_trusted()) { if (!radius_www_authorize("")) { www_challenge("","0"); return; } else if(!check_from()) { sl_send_reply("403","Use From=ID"); return; }; consume_credentials(); }; if (nat_uac_test("19")) { setflag(6); force_rport(); fix_nated_contact(); }; # force_rtp_proxy("1"); force_rtp_proxy("s"); }; route(1); return; }; #-------------------------------------- # Call Type Processing Section #-------------------------------------- if (!is_uri_host_local()) { if (is_from_local() || allow_trusted()) { route(4); route(1); } else { sl_send_reply("403", "Forbidden"); }; return; }; if (method=="ACK") { route(1); return; } else if(method=="CANCEL"){ route(1); return; } else if (method=="INVITE"){ if(!cpl_run_script("incoming", "is_stateless")) { # script execution failed t_reply("500", "CPL script execution failed"); }; route(3); return; } else if (method=="REGISTER") { cpl_process_register(); route(2); return; }; lookup("aliases"); if (!is_uri_host_local()) { route(4); route(1); return; }; if (!lookup("location")){ # xlog("L_INFO"," $ru \n, $fu \n, $tu \n"); sl_send_reply("404", "User Not Found"); return; }; route(1); } route[1] { #-------------------------------------- # Default Message Handler #-------------------------------------- t_on_reply("1"); if (!t_relay()) { if(method=="INVITE" && isflagset(6)) { unforce_rtp_proxy(); }; sl_reply_error(); }; } route[2] { #-------------------------------------- # REGISTER Message Handler #-------------------------------------- sl_send_reply("100", "Trying"); if(!search("^Contact:[ ]*\*") && nat_uac_test("19")) { setflag(6); fix_nated_register(); force_rport(); }; sl_send_reply("100","Trying"); if(!radius_www_authorize("")) { www_challenge("","0"); return; }; if(!check_to()){ sl_send_reply("401","Unauthorized"); return; }; consume_credentials(); if (!save("location")) { sl_reply_error(); }; } route[3] { #----------------------- # INVITE Message Handler #----------------------- if (!allow_trusted()) { if(!radius_www_authorize("")) { www_challenge("","0"); return; } else if (!check_from()){ sl_send_reply("403","Use From=ID"); return; }; consume_credentials(); }; if(nat_uac_test("19")) { setflag(6); }; avp_load_radius("caller"); # setflag(1); # setflag(2); route(9); # CLIP/CLIR route(8); # Check if number is blocked route(7); # Set/remove call forwarding route(10); # VPABX lookup("aliases"); if(!is_uri_host_local()) { route(4); route(1); return; }; if (avp_db_load("$ru/username", "$avp(s:callfwd)")) { setflag(22); avp_pushto("$ru", "$avp(s:callfwd)"); route(6); return; }; if (!lookup("location")) { #Outbound domain if (uri=~"^sip:[0-9]{10}@") { route(4); route(5); return; }; sl_send_reply("404", "User Not Found"); return; }; if (avp_db_load("$ru/username", "$avp(s:fwdonbusy)")) { if (!avp_check("$ru(s:fwdonbusy)", "eq/$ru/i")) { setflag(26); }; }; if (avp_db_load("$ru/username", "$avp(s:fwdnoanswer)")) { if (!avp_check("$avp(s:fwdnoanswer)", "eq/$ru/i")) { setflag(27); }; }; t_on_failure("1"); route(4); route(1); } route[4] { # ---------------------- # NAT Traversal Section # ---------------------- if (isflagset(6)) { force_rport(); fix_nated_contact(); # force_rtp_proxy("i"); force_rtp_proxy(); }; } route[5] { #---------------------- # Main Domain Handler #---------------------- if (uri=~"^sip:022448755[0-9]@"){ sl_send_reply("404","User Not Found"); drop; } xlog("L_INFO","Main domain Handler: address changed to <outbound_proxy>\n"); #rewritehostport("<outbound_proxy>:5061"); rewritehost("<outbound_proxy>"); t_on_failure("1"); route(1); } route[6] { # ------------------------- # Call Forwarding Handler # ------------------------- if (uri=~"^sip:1[0-9]{10}@") { strip(1); }; lookup("aliases"); revert_uri(); append_branch(); if (!is_uri_host_local()) { if (!isflagset(22)) { append_branch(); }; route(4); route(1); return; }; if (uri=~"^sip:00[0-9]{10}@") { route(4); route(1); return; }; if (!lookup("location")) { if (uri=~"^sip:[0-9]{10}@") { route(4); route(1); return; }; sl_send_reply("404", "3User Not Found"); }; route(4); route(1); } route[7] { ####################################### # Call forwarding setters ####################################### if(uri=~"^sip:\*21\*"){ subst_uri('/^sip:\*21\*(.*)@(.*)$/sip:\1@yam/'); avp_db_delete("$fu","$avp(s:callfwd)"); avp_write("$ru","$avp(s:callfwd)"); avp_db_store("$fu","$avp(s:callfwd)"); sl_send_reply("603", "Call forwarding set"); drop; }; if(uri=~"^sip:\*31\*"){ subst_uri('/^sip:\*31\*(.*)@(.*)$/sip:\1@yam/'); avp_db_delete("$fu","$avp(s:fwdonbusy)"); avp_write("$ru","$avp(s:fwdonbusy)"); avp_db_store("$fu","$avp(s:fwdonbusy)"); exec_msg("/home/pgrabowski/busy_fwd_cpl"); sl_send_reply("603", "Call forwarding on busy set"); drop; }; if(uri=~"^sip:\*41\*"){ subst_uri('/^sip:\*31\*(.*)@(.*)$/sip:\1@yam/'); avp_db_delete("$fu","$avp(s:fwdnoanswer)"); avp_write("$ru","$avp(s:fwdnoanswer)"); avp_db_store("$fu","$avp(s:fwdnoanswer)"); exec_msg("/home/pgrabowski/noanswer_fwd_cpl"); sl_send_reply("603", "Call forwarding on no answer set"); drop; }; if(uri=~"^sip:\*22\*"){ avp_db_delete("$fu","$avp(s:callfwd)"); sl_send_reply("603", "Call forwarding removed"); drop; }; if(uri=~"^sip:\*32\*"){ avp_db_delete("$fu","$avp(s:fwdonbusy)"); exec_msg("/home/pgrabowski/ser_work/rm_busy_fwd_cpl"); sl_send_reply("603", "Call forwarding on busy removed"); drop; }; if(uri=~"^sip:\*42\*"){ avp_db_delete("$fu","$avp(s:fwdnoanswer)"); exec_msg("/home/pgrabowski/ser_work/rm_noanswer_fwd_cpl"); sl_send_reply("603", "Call forwarding on no answer removed"); drop; }; } route[8] { ################################## # Outgoing number blocking ################################## if(avp_check("$avp(s:caller_blocked)","eq/$tu")){ sl_send_reply("403", "Forbidden"); return; }; } route[9] { ################################# # CLIP/CLIR ################################# if(is_avp_set("$avp(s:caller_clip)")){ uac_replace_from("$avp(s:caller_clip)",""); }; if(is_avp_set("$avp(s:clir)")){ uac_replace_from("Restricted","sip:restricted@<local_proxy>"); }; } route[10] { ################################# # VPABX ################################# if(uri=~"^sip:[0-9]{3}@"){ if (is_avp_set("$avp(s:caller_vpabx)")) { xlog("L_INFO","VPABX\n"); subst_uri('/^sip:(.*)$/sip:$avp(s:caller_vpabx)\1/'); xlog("$ru $tu\n"); } } } onreply_route[1] { if (isflagset(6) && (status=~"(180)|(183)|2[0-9][0-9]")) { if(!search("^Content-Length:[ ]*0")) { force_rtp_proxy(); }; }; if (nat_uac_test("1")) { fix_nated_contact(); }; } failure_route[1] { if (t_check_status("487")) { return; }; subst_uri('/^sip:(.*)@(.*)$/sip:100.\1@<local_proxy>/'); rewritehostport("<local_proxy>:5061"); append_branch(); t_relay(); } ---------------------------------------------------------------------- smieszne, muzyka, pilka, sexy, kibice, kino, ciekawe, extreme, kabaret http://link.interia.pl/f19d4 - najlepsze filmy w intermecie

1 0

RE: [Users] DNS queries and TLS
by Papadopoulos Georgios 15 Dec '06

15 Dec '06

Hi Klaus, Here are the packets. The ngrep of the DNS lookup does not show much. I can only see the client IP (in reverse order). client: 213.5.17.236 Openser: 213.5.43.134, 213.5.8.5 DNS: 213.5.41.8 thank you U 2006/12/14 12:00:09.612841 213.5.17.236:5060 -> 213.5.43.134:5060 INVITE sip:2116872933@i-call.gr;user=phone SIP/2.0. Via: SIP/2.0/UDP 213.5.17.236:5060;branch=z9hG4bK-nykmi2fjal1m;rport. From: "George Papadopoulos" <sip:geop@i-call.gr>;tag=pt3u7ggbqm. To: <sip:2116872933@i-call.gr;user=phone>. Call-ID: 3c28be1c1adb-0vv5406jgtfv@213-5-17-236. CSeq: 2 INVITE. Max-Forwards: 70. Contact: <sip:geop@213.5.17.236:5060;line=9yt55o5b>. P-Key-Flags: keys="3". User-Agent: snom190-3.56w. Accept-Language: en. Accept: application/sdp. Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE, PRACK, MESSAGE, INFO. Allow-Events: talk, hold, refer. Supported: timer, 100rel, replaces. Session-Expires: 3600. Content-Type: application/sdp. Content-Length: 268. . v=0. o=root 886017132 886017132 IN IP4 213.5.17.236. s=call. c=IN IP4 213.5.17.236. t=0 0. m=audio 10190 RTP/AVP 0 8 18 101. a=rtpmap:0 pcmu/8000. a=rtpmap:8 pcma/8000. a=rtpmap:18 g729/8000. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:20. a=sendrecv. # U 2006/12/14 12:00:09.614000 213.5.8.5:50120 -> 213.5.41.8:53 .............236.17.5.213.in-addr.arpa..... # U 2006/12/14 12:00:09.618660 213.5.41.8:53 -> 213.5.8.5:50120 .............236.17.5.213.in-addr.arpa.............*0.7.ns0.altectelecom s.gr. hostmaster.;w.e...p.... ..:...Q. # U 2006/12/14 12:00:09.619325 213.5.43.134:5060 -> 213.5.17.236:5060 SIP/2.0 100 trying -- your call is important to us. Via: SIP/2.0/UDP 213.5.17.236:5060;branch=z9hG4bK-nykmi2fjal1m;rport=5060. From: "George Papadopoulos" <sip:geop@i-call.gr>;tag=pt3u7ggbqm. To: <sip:2116872933@i-call.gr;user=phone>. Call-ID: 3c28be1c1adb-0vv5406jgtfv@213-5-17-236. CSeq: 2 INVITE. Server: OpenSer (1.1.0-notls (x86_64/linux)). Content-Length: 0. . > -----Original Message----- > From: Klaus Darilion [mailto:klaus.mailinglists@pernau.at] > Sent: Friday, December 15, 2006 12:42 PM > To: Papadopoulos Georgios > Cc: Bogdan-Andrei Iancu; users(a)openser.org > Subject: Re: [Users] DNS queries and TLS > > Can you also post the INVITE which is processd and the ngrep > of the DNS lookup (which domain is lookup up) > > regards > klaus > > Papadopoulos Georgios wrote: > > Hi Bogdan, > > > > I am not using any nat test functions, at least at the part of the > > script that handles INVITEs. I am using allow_trusted() in > caching mode. > > But if allow_trusted was doing the DNS query then I should > also see it > > after the first INVITE and before the "407 Proxy Auth > Reqd". I am also > > using lcr module. So, is it possible that load_gws() or > next_gw() is > > responsible for the DNS query? > > > > Regards, > > > > George > > > > > > > >> -----Original Message----- > >> From: Bogdan-Andrei Iancu [mailto:bogdan@voice-system.ro] > >> Sent: Thursday, December 14, 2006 7:14 PM > >> To: Papadopoulos Georgios > >> Cc: users(a)openser.org > >> Subject: Re: [Users] DNS queries and TLS > >> > >> Hi George, > >> > >> > >> TLS = Thread Local Storage > >> > >> > >> > >> Papadopoulos Georgios wrote: > >> > >>> Hello, > >>> > >>> I am having some performance issues with Openser and I tend > >> to believe > >>> they are related with DNS. So I am trying to figure out > >> when and why > >>> Openser is doing DNS queries. Doing ngrep on port 53 I > >> realized that > >>> right before sending out the "100 trying -- your call is > >> important to > >>> us" message, Openser is doing a reverse DNS lookup for > the IP where > >>> the INVITE came from. So the sequence is something like: > >>> client Openser DNS > >>> |---INVITE------------------------>| > >>> |<---407 Proxy Auth Reqd---| > >>> |---ACK--------------------------->| > >>> |---INVITE------------------------>| > >>> |---client > IP?-------->| > >>> > >> |<-------------------------| > >>> |<--------------------100 trying---| > >>> > >>> > >>> I am using Openser-1.1.0-notls and in my script I have dns=no > >>> rev_dns=no So first question is whether this DNS query is > necessary > >>> and how I could avoid it. > >> the configuration options are ok (as time you do not use > the command > >> line -r or -R). I would say the rev dns query is not > triggered by the > >> t_relay() (actually the params control what DNS queries should be > >> done when testing the "received" VIA param) - I have > tested and I see > >> no query before 100 trying, so it should be ok. > >> > >> maybe you are using some nat test functions (like > >> client_nat_test) or any other script functions that mask a dns > >> query...can you check on this? > >> > >>> > >>> What is furthermore confusing is that I have a test > system with the > >>> same Openser version and same script, where this DNS query is not > >>> happening. Looking into the production system I found the > following: > >>> ser2:/usr/local/openser-1.1.0-notls/sbin# ldd openser > >>> linux-gate.so.1 => (0xffffe000) > >>> libdl.so.2 => /lib/tls/libdl.so.2 (0x55571000) > >>> libresolv.so.2 => /lib/tls/libresolv.so.2 (0x55574000) > >>> libc.so.6 => /lib/tls/libc.so.6 (0x55587000) > >>> /lib/ld-linux.so.2 => /lib/ld-linux.so.2 > >> (0x55555000) whereas > >>> the test system shows: > >>> sertest:/usr/local/openser-1.1.0-notls/sbin# ldd openser > >>> libdl.so.2 => /lib/libdl.so.2 (0x7002c000) > >>> libresolv.so.2 => /lib/libresolv.so.2 (0x70040000) > >>> libc.so.6 => /lib/libc.so.6 (0x70064000) > >>> /lib/ld-linux.so.2 (0x70000000) So the two > systems link to > >>> different libresolv.so libraries. Is the > tls/libresolve.so that is > >>> responsible for the DNS query? Given that in both cases I > >> am using the > >>> notls version of Openser 1.1, why is there a difference > between the > >>> two? > >> the "tls" frm /lib/tls comes from "Thread Local Storage" and there > >> are libraries implementations for thread env. It has nothing to do > >> with TLS (Transport Layer Security) > >> > >> regards, > >> bogdan > >> > >>> > >>> thank you for any help > >>> > >>> George > >>> > >>> > >>> > >>> Disclaimer > >>> > >>> The information in this e-mail and any attachments is > >> confidential. It > >>> is intended solely for the attention and use of the named > >>> addressee(s). If you are not the intended recipient, or person > >>> responsible for delivering this information to the intended > >> recipient, > >>> please notify the sender immediately. Unless you are the intended > >>> recipient or his/her representative you are not > authorized to, and > >>> must not, read, copy, distribute, use or retain this > message or any > >>> part of it. E-mail transmission cannot be guaranteed to be > >> secure or > >>> error-free as information could be intercepted, corrupted, lost, > >>> destroyed, arrive late or incomplete, or contain viruses. > >>> > >>> ------------------------------------------------------------- > >> ---------- > >>> - > >>> > >>> _______________________________________________ > >>> Users mailing list > >>> Users(a)openser.org > >>> http://openser.org/cgi-bin/mailman/listinfo/users > >>> > >>> > >> > > > > _______________________________________________ > > Users mailing list > > Users(a)openser.org > > http://openser.org/cgi-bin/mailman/listinfo/users > > > -- > Klaus Darilion > nic.at > >

1 0

RE: [Users] DNS queries and TLS
by Papadopoulos Georgios 15 Dec '06

15 Dec '06

Hi Bogdan, I am not using any nat test functions, at least at the part of the script that handles INVITEs. I am using allow_trusted() in caching mode. But if allow_trusted was doing the DNS query then I should also see it after the first INVITE and before the "407 Proxy Auth Reqd". I am also using lcr module. So, is it possible that load_gws() or next_gw() is responsible for the DNS query? Regards, George > -----Original Message----- > From: Bogdan-Andrei Iancu [mailto:bogdan@voice-system.ro] > Sent: Thursday, December 14, 2006 7:14 PM > To: Papadopoulos Georgios > Cc: users(a)openser.org > Subject: Re: [Users] DNS queries and TLS > > Hi George, > > > TLS = Thread Local Storage > > > > Papadopoulos Georgios wrote: > > > Hello, > > > > I am having some performance issues with Openser and I tend > to believe > > they are related with DNS. So I am trying to figure out > when and why > > Openser is doing DNS queries. Doing ngrep on port 53 I > realized that > > right before sending out the "100 trying -- your call is > important to > > us" message, Openser is doing a reverse DNS lookup for the IP where > > the INVITE came from. So the sequence is something like: > > client Openser DNS > > |---INVITE------------------------>| > > |<---407 Proxy Auth Reqd---| > > |---ACK--------------------------->| > > |---INVITE------------------------>| > > |---client IP?-------->| > > > |<-------------------------| > > |<--------------------100 trying---| > > > > > > I am using Openser-1.1.0-notls and in my script I have dns=no > > rev_dns=no So first question is whether this DNS query is necessary > > and how I could avoid it. > > the configuration options are ok (as time you do not use the > command line -r or -R). I would say the rev dns query is not > triggered by the > t_relay() (actually the params control what DNS queries > should be done when testing the "received" VIA param) - I > have tested and I see no query before 100 trying, so it should be ok. > > maybe you are using some nat test functions (like > client_nat_test) or any other script functions that mask a > dns query...can you check on this? > > > > > What is furthermore confusing is that I have a test system with the > > same Openser version and same script, where this DNS query is not > > happening. Looking into the production system I found the following: > > ser2:/usr/local/openser-1.1.0-notls/sbin# ldd openser > > linux-gate.so.1 => (0xffffe000) > > libdl.so.2 => /lib/tls/libdl.so.2 (0x55571000) > > libresolv.so.2 => /lib/tls/libresolv.so.2 (0x55574000) > > libc.so.6 => /lib/tls/libc.so.6 (0x55587000) > > /lib/ld-linux.so.2 => /lib/ld-linux.so.2 > (0x55555000) whereas > > the test system shows: > > sertest:/usr/local/openser-1.1.0-notls/sbin# ldd openser > > libdl.so.2 => /lib/libdl.so.2 (0x7002c000) > > libresolv.so.2 => /lib/libresolv.so.2 (0x70040000) > > libc.so.6 => /lib/libc.so.6 (0x70064000) > > /lib/ld-linux.so.2 (0x70000000) So the two systems link to > > different libresolv.so libraries. Is the tls/libresolve.so that is > > responsible for the DNS query? Given that in both cases I > am using the > > notls version of Openser 1.1, why is there a difference between the > > two? > > the "tls" frm /lib/tls comes from "Thread Local Storage" and > there are libraries implementations for thread env. It has > nothing to do with TLS (Transport Layer Security) > > regards, > bogdan > > > > > thank you for any help > > > > George > > > > > > > > Disclaimer > > > > The information in this e-mail and any attachments is > confidential. It > > is intended solely for the attention and use of the named > > addressee(s). If you are not the intended recipient, or person > > responsible for delivering this information to the intended > recipient, > > please notify the sender immediately. Unless you are the intended > > recipient or his/her representative you are not authorized to, and > > must not, read, copy, distribute, use or retain this message or any > > part of it. E-mail transmission cannot be guaranteed to be > secure or > > error-free as information could be intercepted, corrupted, lost, > > destroyed, arrive late or incomplete, or contain viruses. > > > >------------------------------------------------------------- > ---------- > >- > > > >_______________________________________________ > >Users mailing list > >Users(a)openser.org > >http://openser.org/cgi-bin/mailman/listinfo/users > > > > > >

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users