3 Feb
2014
3 Feb
'14
12:36 p.m.
hello all. this is my kamailio conf: http://pastebin.com/jGCak01E when I
try to register any sip device. it looks like. device -> ext IP kamailio ->
int IP kamailio -> asterisk. so I trying to nat something to lan. but on
asterisk I see that register, it answer 401, than register again and it
again answer 401. but on my sip device I see register and than kamailio
answer 200 !! why ???
1. #!KAMAILIO
2. #
3. # Kamailio (OpenSER) SIP Server v4.1 - default configuration script
4. # - web: http://www.kamailio.org
5. # - git: http://sip-router.org
6. #
7. # Direct your questions about this file to: <
sr-users(a)lists.sip-router.org>
8. #
9. # Refer to the Core CookBook at http://www.kamailio.org/wiki/
10. # for an explanation of possible statements, functions and
parameters.
11. #
12. # Several features can be enabled using '#!define WITH_FEATURE'
directives:
13. #
14. # *** To run in debug mode:
15. # - define WITH_DEBUG
16. #
17. # *** To enable mysql:
18. # - define WITH_MYSQL
19. #
20. # *** To enable authentication execute:
21. # - enable mysql
22. # - define WITH_AUTH
23. # - add users using 'kamctl'
24. #
25. # *** To enable IP authentication execute:
26. # - enable mysql
27. # - enable authentication
28. # - define WITH_IPAUTH
29. # - add IP addresses with group id '1' to 'address' table
30. #
31. # *** To enable persistent user location execute:
32. # - enable mysql
33. # - define WITH_USRLOCDB
34. #
35. # *** To enable presence server execute:
36. # - enable mysql
37. # - define WITH_PRESENCE
38. #
39. # *** To enable nat traversal execute:
40. # - define WITH_NAT
41. # - install RTPProxy: http://www.rtpproxy.org
42. # - start RTPProxy:
43. # rtpproxy -l _your_public_ip_ -s udp:localhost:7722
44. #
45. # *** To enable PSTN gateway routing execute:
46. # - define WITH_PSTN
47. # - set the value of pstn.gw_ip
48. # - check route[PSTN] for regexp routing condition
49. #
50. # *** To enable database aliases lookup execute:
51. # - enable mysql
52. # - define WITH_ALIASDB
53. #
54. # *** To enable speed dial lookup execute:
55. # - enable mysql
56. # - define WITH_SPEEDDIAL
57. #
58. # *** To enable multi-domain support execute:
59. # - enable mysql
60. # - define WITH_MULTIDOMAIN
61. #
62. # *** To enable TLS support execute:
63. # - adjust CFGDIR/tls.cfg as needed
64. # - define WITH_TLS
65. #
66. # *** To enable XMLRPC support execute:
67. # - define WITH_XMLRPC
68. # - adjust route[XMLRPC] for access policy
69. #
70. # *** To enable anti-flood detection execute:
71. # - adjust pike and htable=>ipban settings as needed (default is
72. # block if more than 16 requests in 2 seconds and ban for 300
seconds)
73. # - define WITH_ANTIFLOOD
74. #
75. # *** To block 3XX redirect replies execute:
76. # - define WITH_BLOCK3XX
77. #
78. # *** To enable VoiceMail routing execute:
79. # - define WITH_VOICEMAIL
80. # - set the value of voicemail.srv_ip
81. # - adjust the value of voicemail.srv_port
82. #
83. # *** To enhance accounting execute:
84. # - enable mysql
85. # - define WITH_ACCDB
86. # - add following columns to database
87. #!ifdef ACCDB_COMMENT
88. ALTER TABLE acc ADD COLUMN src_user VARCHAR(64) NOT NULL DEFAULT
'';
89. ALTER TABLE acc ADD COLUMN src_domain VARCHAR(128) NOT NULL
DEFAULT '';
90. ALTER TABLE acc ADD COLUMN src_ip varchar(64) NOT NULL default '';
91. ALTER TABLE acc ADD COLUMN dst_ouser VARCHAR(64) NOT NULL DEFAULT
'';
92. ALTER TABLE acc ADD COLUMN dst_user VARCHAR(64) NOT NULL DEFAULT
'';
93. ALTER TABLE acc ADD COLUMN dst_domain VARCHAR(128) NOT NULL
DEFAULT '';
94. ALTER TABLE missed_calls ADD COLUMN src_user VARCHAR(64) NOT NULL
DEFAULT '';
95. ALTER TABLE missed_calls ADD COLUMN src_domain VARCHAR(128) NOT
NULL DEFAULT '';
96. ALTER TABLE missed_calls ADD COLUMN src_ip varchar(64) NOT NULL
default '';
97. ALTER TABLE missed_calls ADD COLUMN dst_ouser VARCHAR(64) NOT NULL
DEFAULT '';
98. ALTER TABLE missed_calls ADD COLUMN dst_user VARCHAR(64) NOT NULL
DEFAULT '';
99. ALTER TABLE missed_calls ADD COLUMN dst_domain VARCHAR(128) NOT
NULL DEFAULT '';
100. #!endif
101.
102. # #!define WITH_MYSQL
103. # #!define WITH_AUTH
104. # #!define WITH_USRLOCDB
105. #!define WITH_NAT
106. #!define WITH_ASTERISK
107. # #!define WITH_DEBUG
108.
109. ####### Include Local Config If Exists #########
110. import_file "kamailio-local.cfg"
111.
112. ####### Defined Values #########
113.
114. # *** Value defines - IDs used later in config
115. #!ifdef WITH_MYSQL
116. # - database URL - used to connect to database server by modules
such
117. # as: auth_db, acc, usrloc, a.s.o.
118. #!ifndef DBURL
119. #!define DBURL "mysql://kamailio:kamailiorw@localhost/kamailio"
120. #!endif
121. #!endif
122. #!ifdef WITH_MULTIDOMAIN
123. # - the value for 'use_domain' parameters
124. #!define MULTIDOMAIN 1
125. #!else
126. #!define MULTIDOMAIN 0
127. #!endif
128.
129. # - flags
130. # FLT_ - per transaction (message) flags
131. # FLB_ - per branch flags
132. #!define FLT_ACC 1
133. #!define FLT_ACCMISSED 2
134. #!define FLT_ACCFAILED 3
135. #!define FLT_NATS 5
136.
137. #!define FLB_NATB 6
138. #!define FLB_NATSIPPING 7
139.
140. ####### Global Parameters #########
141.
142. ### LOG Levels: 3=DBG, 2=INFO, 1=NOTICE, 0=WARN, -1=ERR
143. #!ifdef WITH_DEBUG
144. debug=4
145. log_stderror=yes
146. #!else
147. debug=3
148. log_stderror=no
149. #!endif
150.
151. memdbg=5
152. memlog=5
153.
154. log_facility=LOG_LOCAL0
155.
156. fork=yes
157. children=4
158.
159. /* uncomment the next line to disable TCP (default on) */
160. #disable_tcp=yes
161.
162. /* uncomment the next line to disable the auto discovery of local
aliases
163. based on reverse DNS on IPs (default on) */
164. #auto_aliases=no
165.
166. /* add local domain aliases */
167. #alias="sip.mydomain.com"
168.
169. /* uncomment and configure the following line if you want Kamailio
to
170. bind on a specific interface/port/proto (default bind on all
available) */
171.
172. #listen=udp:50.0.0.1:5060 advertise 194.190.8.171:5060
173. listen=udp:194.190.8.171:5060 advertise 50.0.0.1:5060
174.
175. /* port to listen to
176. * - can be specified more than once if needed to listen on many
ports */
177. port=5060
178.
179. mhomed=1
180.
181. #!ifdef WITH_TLS
182. enable_tls=yes
183. #!endif
184.
185. # life time of TCP connection when there is no traffic
186. # - a bit higher than registration expires to cope with UA behind
NAT
187. tcp_connection_lifetime=3605
188.
189. ####### Custom Parameters #########
190.
191. # These parameters can be modified runtime via RPC interface
192. # - see the documentation of 'cfg_rpc' module.
193. #
194. # Format: group.id = value 'desc' description
195. # Access: $sel(cfg_get.group.id) or @cfg_get.group.id
196. #
197.
198. #!ifdef WITH_PSTN
199. # PSTN GW Routing
200. #
201. # - pstn.gw_ip: valid IP or hostname as string value, example:
202. # pstn.gw_ip = "10.0.0.101" desc "My PSTN GW Address"
203. #
204. # - by default is empty to avoid misrouting
205. #pstn.gw_ip = "" desc "PSTN GW Address"
206. #pstn.gw_port = "" desc "PSTN GW Port"
207. #!endif
208.
209. #!ifdef WITH_VOICEMAIL
210. # VoiceMail Routing on offline, busy or no answer
211. #
212. # - by default Voicemail server IP is empty to avoid misrouting
213. #voicemail.srv_ip = "" desc "VoiceMail IP Address"
214. #voicemail.srv_port = "5060" desc "VoiceMail Port"
215. #!endif
216.
217. #!ifdef WITH_ASTERISK
218. asterisk.bindip = "50.0.0.10" desc "Asterisk IP Address"
219. asterisk.bindport = "5060" desc "Asterisk Port"
220. kamailio.bindip = "50.0.0.1" desc "Kamailio IP Address"
221. kamailio.bindport = "5060" desc "Kamailio Port"
222. #!endif
223.
224. ####### Modules Section ########
225.
226. # set paths to location of modules (to sources or installation
folders)
227. #!ifdef WITH_SRCPATH
228. mpath="modules/"
229. #!else
230. mpath="/usr/lib64/kamailio/modules/"
231. #!endif
232.
233. #!ifdef WITH_MYSQL
234. loadmodule "db_mysql.so"
235. #!endif
236.
237. loadmodule "mi_fifo.so"
238. loadmodule "kex.so"
239. loadmodule "tm.so"
240. loadmodule "tmx.so"
241. loadmodule "sl.so"
242. loadmodule "rr.so"
243. loadmodule "pv.so"
244. loadmodule "maxfwd.so"
245. loadmodule "usrloc.so"
246. loadmodule "registrar.so"
247. loadmodule "textops.so"
248. loadmodule "siputils.so"
249. loadmodule "xlog.so"
250. loadmodule "sanity.so"
251. loadmodule "ctl.so"
252. loadmodule "cfg_rpc.so"
253. loadmodule "mi_rpc.so"
254. loadmodule "acc.so"
255.
256. #!ifdef WITH_AUTH
257. loadmodule "auth.so"
258. loadmodule "auth_db.so"
259. #!ifdef WITH_IPAUTH
260. loadmodule "permissions.so"
261. #!endif
262. #!endif
263.
264. #!ifdef WITH_ALIASDB
265. loadmodule "alias_db.so"
266. #!endif
267.
268. #!ifdef WITH_SPEEDDIAL
269. loadmodule "speeddial.so"
270. #!endif
271.
272. #!ifdef WITH_MULTIDOMAIN
273. loadmodule "domain.so"
274. #!endif
275.
276. #!ifdef WITH_PRESENCE
277. loadmodule "presence.so"
278. loadmodule "presence_xml.so"
279. #!endif
280.
281. #!ifdef WITH_NAT
282. loadmodule "nathelper.so"
283. loadmodule "rtpproxy.so"
284. #!endif
285.
286. #!ifdef WITH_TLS
287. loadmodule "tls.so"
288. #!endif
289.
290. #!ifdef WITH_ANTIFLOOD
291. loadmodule "htable.so"
292. loadmodule "pike.so"
293. #!endif
294.
295. #!ifdef WITH_XMLRPC
296. loadmodule "xmlrpc.so"
297. #!endif
298.
299. #!ifdef WITH_DEBUG
300. loadmodule "debugger.so"
301. #!endif
302.
303. #!ifdef WITH_ASTERISK
304. loadmodule "uac.so"
305. #!endif
306.
307.
308. #loadmodule "topoh.so"
309. #modparam("topoh", "mask_key", "balalayka")
310. #modparam("topoh", "mask_ip", "50.0.0.1")
311.
312. # ----------------- setting module-specific parameters
---------------
313.
314.
315. # ----- mi_fifo params -----
316. modparam("mi_fifo", "fifo_name",
"/tmp/kamailio_fifo")
317.
318.
319. # ----- tm params -----
320. # auto-discard branches from previous serial forking leg
321. modparam("tm", "failure_reply_mode", 3)
322. # default retransmission timeout: 30sec
323. modparam("tm", "fr_timer", 30000)
324. # default invite retransmission timeout after 1xx: 120sec
325. modparam("tm", "fr_inv_timer", 120000)
326.
327.
328. # ----- rr params -----
329. # add value to ;lr param to cope with most of the UAs
330. modparam("rr", "enable_full_lr", 1)
331. # do not append from tag to the RR (no need for this script)
332. #!ifdef WITH_ASTERISK
333. modparam("rr", "append_fromtag", 1)
334. #!else
335. modparam("rr", "append_fromtag", 0)
336. #!endif
337.
338.
339. # ----- registrar params -----
340. modparam("registrar", "method_filtering", 1)
341. /* uncomment the next line to disable parallel forking via location
*/
342. # modparam("registrar", "append_branches", 0)
343. /* uncomment the next line not to allow more than 10 contacts per
AOR */
344. #modparam("registrar", "max_contacts", 10)
345. # max value for expires of registrations
346. modparam("registrar", "max_expires", 3600)
347. # set it to 1 to enable GRUU
348. modparam("registrar", "gruu_enabled", 0)
349.
350.
351. # ----- acc params -----
352. /* what special events should be accounted ? */
353. modparam("acc", "early_media", 0)
354. modparam("acc", "report_ack", 0)
355. modparam("acc", "report_cancels", 0)
356. /* by default ww do not adjust the direct of the sequential
requests.
357. if you enable this parameter, be sure the enable "append_fromtag"
358. in "rr" module */
359. modparam("acc", "detect_direction", 0)
360. /* account triggers (flags) */
361. modparam("acc", "log_flag", FLT_ACC)
362. modparam("acc", "log_missed_flag", FLT_ACCMISSED)
363. modparam("acc", "log_extra",
364. "src_user=$fU;src_domain=$fd;src_ip=$si;"
365. "dst_ouser=$tU;dst_user=$rU;dst_domain=$rd")
366. modparam("acc", "failed_transaction_flag", FLT_ACCFAILED)
367. /* enhanced DB accounting */
368. #!ifdef WITH_ACCDB
369. modparam("acc", "db_flag", FLT_ACC)
370. modparam("acc", "db_missed_flag", FLT_ACCMISSED)
371. modparam("acc", "db_url", DBURL)
372. modparam("acc", "db_extra",
373. "src_user=$fU;src_domain=$fd;src_ip=$si;"
374. "dst_ouser=$tU;dst_user=$rU;dst_domain=$rd")
375. #!endif
376.
377.
378. # ----- usrloc params -----
379. /* enable DB persistency for location entries */
380. #!ifdef WITH_USRLOCDB
381. modparam("usrloc", "db_url", DBURL)
382. modparam("usrloc", "db_mode", 2)
383. modparam("usrloc", "use_domain", MULTIDOMAIN)
384. #!endif
385.
386.
387. # ----- auth_db params -----
388. #!ifdef WITH_AUTH
389. modparam("auth_db", "db_url", DBURL)
390. modparam("auth_db", "calculate_ha1", yes)
391. modparam("auth_db", "password_column", "password")
392. modparam("auth_db", "load_credentials", "")
393. modparam("auth_db", "use_domain", MULTIDOMAIN)
394.
395. # ----- permissions params -----
396. #!ifdef WITH_IPAUTH
397. modparam("permissions", "db_url", DBURL)
398. modparam("permissions", "db_mode", 1)
399. #!endif
400.
401. #!endif
402.
403.
404. # ----- alias_db params -----
405. #!ifdef WITH_ALIASDB
406. modparam("alias_db", "db_url", DBURL)
407. modparam("alias_db", "use_domain", MULTIDOMAIN)
408. #!endif
409.
410.
411. # ----- speeddial params -----
412. #!ifdef WITH_SPEEDDIAL
413. modparam("speeddial", "db_url", DBURL)
414. modparam("speeddial", "use_domain", MULTIDOMAIN)
415. #!endif
416.
417.
418. # ----- domain params -----
419. #!ifdef WITH_MULTIDOMAIN
420. modparam("domain", "db_url", DBURL)
421. # register callback to match myself condition with domains list
422. modparam("domain", "register_myself", 1)
423. #!endif
424.
425.
426. #!ifdef WITH_PRESENCE
427. # ----- presence params -----
428. modparam("presence", "db_url", DBURL)
429.
430. # ----- presence_xml params -----
431. modparam("presence_xml", "db_url", DBURL)
432. modparam("presence_xml", "force_active", 1)
433. #!endif
434.
435.
436. #!ifdef WITH_NAT
437. # ----- rtpproxy params -----
438. modparam("rtpproxy", "rtpproxy_sock",
"udp:127.0.0.1:7722")
439.
440. # ----- nathelper params -----
441. modparam("nathelper", "natping_interval", 30)
442. modparam("nathelper", "ping_nated_only", 1)
443. modparam("nathelper", "sipping_bflag", FLB_NATSIPPING)
444. modparam("nathelper", "sipping_from",
"sip:pinger@kamaz")
445.
446. # params needed for NAT traversal in other modules
447. modparam("nathelper|registrar", "received_avp",
"$avp(RECEIVED)")
448. modparam("usrloc", "nat_bflag", FLB_NATB)
449. #!endif
450.
451.
452. #!ifdef WITH_TLS
453. # ----- tls params -----
454. modparam("tls", "config", "//etc/kamailio/tls.cfg")
455. #!endif
456.
457. #!ifdef WITH_ANTIFLOOD
458. # ----- pike params -----
459. modparam("pike", "sampling_time_unit", 2)
460. modparam("pike", "reqs_density_per_unit", 16)
461. modparam("pike", "remove_latency", 4)
462.
463. # ----- htable params -----
464. # ip ban htable with autoexpire after 5 minutes
465. modparam("htable", "htable",
"ipban=>size=8;autoexpire=300;")
466. #!endif
467.
468. #!ifdef WITH_XMLRPC
469. # ----- xmlrpc params -----
470. modparam("xmlrpc", "route", "XMLRPC");
471. modparam("xmlrpc", "url_match", "^/RPC")
472. #!endif
473.
474. #!ifdef WITH_DEBUG
475. # ----- debugger params -----
476. modparam("debugger", "cfgtrace", 1)
477. #!endif
478.
479. ####### Routing Logic ########
480.
481.
482. # Main SIP request routing logic
483. # - processing of any incoming SIP request starts with this route
484. # - note: this is the same as route { ... }
485. request_route {
486.
487. # per request initial checks
488. route(REQINIT);
489.
490. xlog("L_NOTICE","$rm from $fu (IP:$si:$sp) Main Route
before ---NAT---\n");
491. route(DEBUG);
492. # NAT detection
493. route(NATDETECT);
494.
495. xlog("L_NOTICE","$rm from $fu (IP:$si:$sp) in
Route[NATDETECT] fix_nat-register\n");
496. route(DEBUG);
497.
498. # CANCEL processing
499. if (is_method("CANCEL"))
500. {
501. if (t_check_trans()) {
502. route(RELAY);
503. }
504. exit;
505. }
506.
507. route(DEBUG);
508.
509. # handle requests within SIP dialogs
510. route(WITHINDLG);
511.
512. route(DEBUG);
513.
514. ### only initial requests (no To tag)
515.
516. t_check_trans();
517.
518. route(DEBUG);
519.
520. # authentication
521. route(AUTH);
522.
523. route(DEBUG);
524.
525. # record routing for dialog forming requests (in case they
are routed)
526. # - remove preloaded route headers
527. remove_hf("Route");
528. if (is_method("INVITE|SUBSCRIBE"))
529. record_route();
530.
531. # account only INVITEs
532. if (is_method("INVITE"))
533. {
534. setflag(FLT_ACC); # do accounting
535. }
536.
537. # dispatch requests to foreign domains
538. route(SIPOUT);
539.
540. ### requests for my local domains
541.
542. # handle presence related requests
543. route(PRESENCE);
544.
545. route(DEBUG);
546.
547. # handle registrations
548. route(REGISTRAR);
549.
550. route(DEBUG);
551.
552. if ($rU==$null)
553. {
554. # request with no Username in RURI
555. sl_send_reply("484","Address Incomplete");
556. exit;
557. }
558.
559. # dispatch destinations to PSTN
560. # route(PSTN);
561.
562. route(DEBUG);
563.
564. # user location service
565. route(LOCATION);
566.
567. route(DEBUG);
568.
569. route(RELAY);
570.
571. }
572.
573.
574. route[RELAY] {
575.
576. # enable additional event routes for forwarded requests
577. # - serial forking, RTP relaying handling, a.s.o.
578. if (is_method("INVITE|BYE|SUBSCRIBE|UPDATE")) {
579. if(!t_is_set("branch_route"))
t_on_branch("MANAGE_BRANCH");
580. }
581. if (is_method("INVITE|SUBSCRIBE|UPDATE")) {
582. if(!t_is_set("onreply_route"))
t_on_reply("MANAGE_REPLY");
583. }
584. if (is_method("INVITE")) {
585. if(!t_is_set("failure_route"))
t_on_failure("MANAGE_FAILURE");
586. }
587.
588. if (!t_relay()) {
589. sl_reply_error();
590. }
591. exit;
592. }
593.
594. # Per SIP request initial checks
595. route[REQINIT] {
596. #!ifdef WITH_ANTIFLOOD
597. # flood dection from same IP and traffic ban for a while
598. # be sure you exclude checking trusted peers, such as pstn
gateways
599. # - local host excluded (e.g., loop to self)
600. if(src_ip!=myself)
601. {
602. if($sht(ipban=>$si)!=$null)
603. {
604. # ip is already blocked
605. xdbg("request from blocked IP - $rm from
$fu (IP:$si:$sp)\n");
606. exit;
607. }
608. if (!pike_check_req())
609. {
610. xlog("L_ALERT","ALERT: pike blocking $rm
from $fu (IP:$si:$sp)\n");
611. $sht(ipban=>$si) = 1;
612. exit;
613. }
614. }
615. #!endif
616.
617. if (!mf_process_maxfwd_header("10")) {
618. sl_send_reply("483","Too Many Hops");
619. exit;
620. }
621.
622. if(!sanity_check("1511", "7"))
623. {
624. xlog("Malformed SIP message from $si:$sp\n");
625. exit;
626. }
627. }
628.
629. # Handle requests within SIP dialogs
630. route[WITHINDLG] {
631. if (has_totag()) {
632. # sequential request withing a dialog should
633. # take the path determined by record-routing
634. if (loose_route()) {
635. route(DLGURI);
636. if (is_method("BYE")) {
637. setflag(FLT_ACC); # do accounting
...
638. setflag(FLT_ACCFAILED); # ... even
if the transaction fails
639. }
640. else if ( is_method("ACK") ) {
641. # ACK is forwarded statelessy
642. route(NATMANAGE);
643. }
644. else if ( is_method("NOTIFY") ) {
645. # Add Record-Route for in-dialog
NOTIFY as per RFC 6665.
646. record_route();
647. }
648. route(RELAY);
649. } else {
650. if (is_method("SUBSCRIBE") && uri ==
myself) {
651. # in-dialog subscribe requests
652. route(PRESENCE);
653. exit;
654. }
655. if ( is_method("ACK") ) {
656. if ( t_check_trans() ) {
657. # no loose-route, but
stateful ACK;
658. # must be an ACK after a 487
659. # or e.g. 404 from upstream
server
660. route(RELAY);
661. exit;
662. } else {
663. # ACK without matching
transaction ... ignore and discard
664. exit;
665. }
666. }
667. sl_send_reply("404","Not here");
668. }
669. exit;
670. }
671. }
672.
673. # Handle SIP registrations
674. route[REGISTRAR] {
675. if (is_method("REGISTER"))
676. {
677. if(isflagset(FLT_NATS))
678. {
679. setbflag(FLB_NATB);
680. # uncomment next line to do SIP NAT pinging
681. setbflag(FLB_NATSIPPING);
682. }
683. if (!save("location"))
684. sl_reply_error();
685.
686.
687. #!ifdef WITH_ASTERISK
688. route(REGFWD);
689. #!endif
690.
691. exit;
692. }
693. }
694.
695.
696. #!ifdef WITH_ASTERISK
697. # Test if coming from Asterisk
698. route[FROMASTERISK] {
699. if($si==$sel(cfg_get.asterisk.bindip) &&
$sp==$sel(cfg_get.asterisk.bindport)) return 1;
700. return -1;
701. }
702.
703.
704. # Send to Asterisk
705. route[TOASTERISK] {
706. $du = "sip:" + $sel(cfg_get.asterisk.bindip) + ":" +
$sel(cfg_get.asterisk.bindport);
707. xlog("L_INFO","[$fU@$si:$sp]{$rm} From Outside World to
Asterisk Box $du\n");
708. route(RELAY);
709. exit;
710. }
711.
712. # Forward REGISTER to Asterisk
713. route[REGFWD] {
714. if(!is_method("REGISTER"))
715. {
716. return;
717. }
718.
719. xlog("[$mi] PRINT AU: $au PRINT fU: $fU Received SIP
Message (method: $rm) ($ml bytes) to $Ri:$Rp from $si:$sp:\n$mb\n");
720.
721. t_relay_to_udp("50.0.0.10", "5060");
722.
723. xlog("[$mi] PRINT AU: $au PRINT fU: $fU Sended SIP Message
(method: $rm) ($ml bytes) to $Ri:$Rp from $si:$sp:\n$mb\n");
724.
725. }
726. #!endif
727.
728. # USER location service
729. route[LOCATION] {
730.
731. #!ifdef WITH_SPEEDDIAL
732. # search for short dialing - 2-digit extension
733. if($rU=~"^[0-9][0-9]$")
734. if(sd_lookup("speed_dial"))
735. route(SIPOUT);
736. #!endif
737.
738. #!ifdef WITH_ALIASDB
739. # search in DB-based aliases
740. if(alias_db_lookup("dbaliases"))
741. route(SIPOUT);
742. #!endif
743.
744. #!ifdef WITH_ASTERISK
745. if(is_method("INVITE") && (!route(FROMASTERISK))) {
746. # if new call from out there - send to Asterisk
747. # - non-INVITE request are routed directly by
Kamailio
748. # - traffic from Asterisk is routed also directy by
Kamailio
749. route(TOASTERISK);
750. exit;
751. }
752. #!endif
753.
754. $avp(oexten) = $rU;
755. if (!lookup("location")) {
756. $var(rc) = $rc;
757. route(TOVOICEMAIL);
758. t_newtran();
759. switch ($var(rc)) {
760. case -1:
761. case -3:
762. send_reply("404", "Not
Found");
763. exit;
764. case -2:
765. send_reply("405", "Method Not
Allowed");
766. exit;
767. }
768. }
769.
770. # when routing via usrloc, log the missed calls also
771. if (is_method("INVITE"))
772. {
773. setflag(FLT_ACCMISSED);
774. }
775.
776. route(RELAY);
777. exit;
778. }
779.
780. # Presence server route
781. route[PRESENCE] {
782. if(!is_method("PUBLISH|SUBSCRIBE"))
783. return;
784.
785. if(is_method("SUBSCRIBE") &&
$hdr(Event)=="message-summary") {
786. route(TOVOICEMAIL);
787. # returns here if no voicemail server is configured
788. sl_send_reply("404", "No voicemail service");
789. exit;
790. }
791.
792. #!ifdef WITH_PRESENCE
793. if (!t_newtran())
794. {
795. sl_reply_error();
796. exit;
797. }
798.
799. if(is_method("PUBLISH"))
800. {
801. handle_publish();
802. t_release();
803. } else if(is_method("SUBSCRIBE")) {
804. handle_subscribe();
805. t_release();
806. }
807. exit;
808. #!endif
809.
810. # if presence enabled, this part will not be executed
811. if (is_method("PUBLISH") || $rU==$null)
812. {
813. sl_send_reply("404", "Not here");
814. exit;
815. }
816. return;
817. }
818.
819. # Authentication route
820. route[AUTH] {
821.
822. #!ifdef WITH_ASTERISK
823. # do not auth traffic from Asterisk - trusted!
824. if(route(FROMASTERISK))
825. return;
826. #!endif
827.
828.
829. #!ifdef WITH_AUTH
830.
831. #!ifdef WITH_IPAUTH
832. if((!is_method("REGISTER")) && allow_source_address())
833. {
834. # source IP allowed
835. return;
836. }
837. #!endif
838.
839. if (is_method("REGISTER") || from_uri==myself)
840. {
841. # authenticate requests
842. if (!auth_check("$fd", "subscriber",
"1")) {
843. auth_challenge("$fd", "0");
844. exit;
845. }
846. # user authenticated - remove auth header
847. if(!is_method("REGISTER|PUBLISH"))
848. consume_credentials();
849. }
850. # if caller is not local subscriber, then check if it calls
851. # a local destination, otherwise deny, not an open relay
here
852. if (from_uri!=myself && uri!=myself)
853. {
854. sl_send_reply("403","Not relaying");
855. exit;
856. }
857.
858. #!endif
859. return;
860. }
861.
862. # Caller NAT detection route
863. route[NATDETECT] {
864. #!ifdef WITH_NAT
865. force_rport();
866. if (nat_uac_test("19")) {
867. if (is_method("REGISTER")) {
868. fix_nated_register();
869. } else {
870. if(is_first_hop())
871. set_contact_alias();
872. }
873. setflag(FLT_NATS);
874.
875. }
876. #!endif
877. return;
878. }
879.
880. # RTPProxy control
881. route[NATMANAGE] {
882. #!ifdef WITH_NAT
883. if (is_request()) {
884. if(has_totag()) {
885. if(check_route_param("nat=yes")) {
886. setbflag(FLB_NATB);
887. }
888. }
889. }
890. if (!(isflagset(FLT_NATS) || isbflagset(FLB_NATB)))
891. return;
892.
893. rtpproxy_manage();
894.
895. if (is_request()) {
896. if (!has_totag()) {
897. if(t_is_branch_route()) {
898. add_rr_param(";nat=yes");
899. }
900. }
901. }
902. if (is_reply()) {
903. if(isbflagset(FLB_NATB)) {
904. if(is_first_hop())
905. set_contact_alias();
906. }
907.
908. xlog("L_NOTICE","$rm from $fu (IP:$si:$sp) in
route[NATMANAGE] RTPproxy with EI Flags\n");
909.
910. }
911. #!endif
912. return;
913. }
914.
915. # URI update for dialog requests
916. route[DLGURI] {
917. #!ifdef WITH_NAT
918. if(!isdsturiset()) {
919. handle_ruri_alias();
920.
921. xlog("L_NOTICE","$rm from $fu (IP:$si:$sp) in
route[DLGURI]
RTPproxy with EI Flags\n");
922.
923. }
924. #!endif
925. return;
926. }
927.
928. # Routing to foreign domains
929. route[SIPOUT] {
930. if (!uri==myself)
931. {
932. append_hf("P-hint: outbound\r\n");
933. route(RELAY);
934. }
935. }
936.
937. # PSTN GW routing
938. route[PSTN] {
939. #!ifdef WITH_PSTN
940. # check if PSTN GW IP is defined
941. if (strempty($sel(cfg_get.pstn.gw_ip))) {
942. xlog("SCRIPT: PSTN rotuing enabled but pstn.gw_ip
not defined\n");
943. return;
944. }
945.
946. # route to PSTN dialed numbers starting with '+' or '00'
947. # (international format)
948. # - update the condition to match your dialing rules for
PSTN routing
949. if(!($rU=~"^(\+|00)[1-9][0-9]{3,20}$"))
950. return;
951.
952. # only local users allowed to call
953. if(from_uri!=myself) {
954. sl_send_reply("403", "Not Allowed");
955. exit;
956. }
957.
958. if (strempty($sel(cfg_get.pstn.gw_port))) {
959. $ru = "sip:" + $rU + "@" +
$sel(cfg_get.pstn.gw_ip);
960. } else {
961. $ru = "sip:" + $rU + "@" +
$sel(cfg_get.pstn.gw_ip)
+ ":"
962. +
$sel(cfg_get.pstn.gw_port);
963. }
964.
965. route(RELAY);
966. exit;
967. #!endif
968.
969. return;
970. }
971.
972. # XMLRPC routing
973. #!ifdef WITH_XMLRPC
974. route[XMLRPC] {
975. # allow XMLRPC from localhost
976. if ((method=="POST" || method=="GET")
977. && (src_ip==127.0.0.1)) {
978. # close connection only for xmlrpclib user agents
(there is a bug in
979. # xmlrpclib: it waits for EOF before interpreting
the response).
980. if ($hdr(User-Agent) =~ "xmlrpclib")
981. set_reply_close();
982. set_reply_no_connect();
983. dispatch_rpc();
984. exit;
985. }
986. send_reply("403", "Forbidden");
987. exit;
988. }
989. #!endif
990.
991. # route to voicemail server
992. route[TOVOICEMAIL] {
993. #!ifdef WITH_VOICEMAIL
994. if(!is_method("INVITE|SUBSCRIBE"))
995. return;
996.
997. # check if VoiceMail server IP is defined
998. if (strempty($sel(cfg_get.voicemail.srv_ip))) {
999. xlog("SCRIPT: VoiceMail rotuing enabled but IP not
defined\n");
1000. return;
1001. }
1002. if(is_method("INVITE")) {
1003. if($avp(oexten)==$null)
1004. return;
1005. $ru = "sip:" + $avp(oexten) + "@" +
$sel(cfg_get.voicemail.srv_ip)
1006. + ":" +
$sel(cfg_get.voicemail.srv_port);
1007. } else {
1008. if($rU==$null)
1009. return;
1010. $ru = "sip:" + $rU + "@" +
$sel(cfg_get.voicemail.srv_ip)
1011. + ":" +
$sel(cfg_get.voicemail.srv_port);
1012. }
1013. route(RELAY);
1014. exit;
1015. #!endif
1016.
1017. return;
1018. }
1019.
1020. # manage outgoing branches
1021. branch_route[MANAGE_BRANCH] {
1022. xdbg("new branch [$T_branch_idx] to $ru\n");
1023. route(NATMANAGE);
1024. }
1025.
1026. # manage incoming replies
1027. onreply_route[MANAGE_REPLY] {
1028. xdbg("incoming reply\n");
1029. if(status=~"[12][0-9][0-9]")
1030. route(NATMANAGE);
1031. }
1032.
1033. # manage failure routing cases
1034. failure_route[MANAGE_FAILURE] {
1035. route(NATMANAGE);
1036.
1037. if (t_is_canceled()) {
1038. exit;
1039. }
1040.
1041. #!ifdef WITH_BLOCK3XX
1042. # block call redirect based on 3xx replies.
1043. if (t_check_status("3[0-9][0-9]")) {
1044. t_reply("404","Not found");
1045. exit;
1046. }
1047. #!endif
1048.
1049. #!ifdef WITH_VOICEMAIL
1050. # serial forking
1051. # - route to voicemail on busy or no answer (timeout)
1052. if (t_check_status("486|408")) {
1053. $du = $null;
1054. route(TOVOICEMAIL);
1055. exit;
1056. }
1057. #!endif
1058. }
1059.
1060.
1061. route[DEBUG] {
1062. if (method==("PUBLISH|SUBSCRIBE|REGISTER|OPTIONS")) {
1063. return;
1064. }
1065. xlog("[$mi] Received SIP Message (method: $rm) ($ml bytes)
to $Ri:$Rp from $si:$sp:\n$mb\n");
1066. }
--
С уважением, Александр Васин.
8 926 1437200
icq: 9906064