hello all. this is my kamailio conf: http://pastebin.com/jGCak01E when I try to register any sip device. it looks like. device -> ext IP kamailio -> int IP kamailio -> asterisk. so I trying to nat something to lan. but on asterisk I see that register, it answer 401, than register again and it again answer 401. but on my sip device I see register and than kamailio answer 200 !! why ??? 1. #!KAMAILIO 2. # 3. # Kamailio (OpenSER) SIP Server v4.1 - default configuration script 4. # - web: http://www.kamailio.org 5. # - git: http://sip-router.org 6. # 7. # Direct your questions about this file to: < sr-users(a)lists.sip-router.org&gt; 8. # 9. # Refer to the Core CookBook at http://www.kamailio.org/wiki/ 10. # for an explanation of possible statements, functions and parameters. 11. # 12. # Several features can be enabled using '#!define WITH_FEATURE' directives: 13. # 14. # *** To run in debug mode: 15. # - define WITH_DEBUG 16. # 17. # *** To enable mysql: 18. # - define WITH_MYSQL 19. # 20. # *** To enable authentication execute: 21. # - enable mysql 22. # - define WITH_AUTH 23. # - add users using 'kamctl' 24. # 25. # *** To enable IP authentication execute: 26. # - enable mysql 27. # - enable authentication 28. # - define WITH_IPAUTH 29. # - add IP addresses with group id '1' to 'address' table 30. # 31. # *** To enable persistent user location execute: 32. # - enable mysql 33. # - define WITH_USRLOCDB 34. # 35. # *** To enable presence server execute: 36. # - enable mysql 37. # - define WITH_PRESENCE 38. # 39. # *** To enable nat traversal execute: 40. # - define WITH_NAT 41. # - install RTPProxy: http://www.rtpproxy.org 42. # - start RTPProxy: 43. # rtpproxy -l _your_public_ip_ -s udp:localhost:7722 44. # 45. # *** To enable PSTN gateway routing execute: 46. # - define WITH_PSTN 47. # - set the value of pstn.gw_ip 48. # - check route[PSTN] for regexp routing condition 49. # 50. # *** To enable database aliases lookup execute: 51. # - enable mysql 52. # - define WITH_ALIASDB 53. # 54. # *** To enable speed dial lookup execute: 55. # - enable mysql 56. # - define WITH_SPEEDDIAL 57. # 58. # *** To enable multi-domain support execute: 59. # - enable mysql 60. # - define WITH_MULTIDOMAIN 61. # 62. # *** To enable TLS support execute: 63. # - adjust CFGDIR/tls.cfg as needed 64. # - define WITH_TLS 65. # 66. # *** To enable XMLRPC support execute: 67. # - define WITH_XMLRPC 68. # - adjust route[XMLRPC] for access policy 69. # 70. # *** To enable anti-flood detection execute: 71. # - adjust pike and htable=>ipban settings as needed (default is 72. # block if more than 16 requests in 2 seconds and ban for 300 seconds) 73. # - define WITH_ANTIFLOOD 74. # 75. # *** To block 3XX redirect replies execute: 76. # - define WITH_BLOCK3XX 77. # 78. # *** To enable VoiceMail routing execute: 79. # - define WITH_VOICEMAIL 80. # - set the value of voicemail.srv_ip 81. # - adjust the value of voicemail.srv_port 82. # 83. # *** To enhance accounting execute: 84. # - enable mysql 85. # - define WITH_ACCDB 86. # - add following columns to database 87. #!ifdef ACCDB_COMMENT 88. ALTER TABLE acc ADD COLUMN src_user VARCHAR(64) NOT NULL DEFAULT ''; 89. ALTER TABLE acc ADD COLUMN src_domain VARCHAR(128) NOT NULL DEFAULT ''; 90. ALTER TABLE acc ADD COLUMN src_ip varchar(64) NOT NULL default ''; 91. ALTER TABLE acc ADD COLUMN dst_ouser VARCHAR(64) NOT NULL DEFAULT ''; 92. ALTER TABLE acc ADD COLUMN dst_user VARCHAR(64) NOT NULL DEFAULT ''; 93. ALTER TABLE acc ADD COLUMN dst_domain VARCHAR(128) NOT NULL DEFAULT ''; 94. ALTER TABLE missed_calls ADD COLUMN src_user VARCHAR(64) NOT NULL DEFAULT ''; 95. ALTER TABLE missed_calls ADD COLUMN src_domain VARCHAR(128) NOT NULL DEFAULT ''; 96. ALTER TABLE missed_calls ADD COLUMN src_ip varchar(64) NOT NULL default ''; 97. ALTER TABLE missed_calls ADD COLUMN dst_ouser VARCHAR(64) NOT NULL DEFAULT ''; 98. ALTER TABLE missed_calls ADD COLUMN dst_user VARCHAR(64) NOT NULL DEFAULT ''; 99. ALTER TABLE missed_calls ADD COLUMN dst_domain VARCHAR(128) NOT NULL DEFAULT ''; 100. #!endif 101. 102. # #!define WITH_MYSQL 103. # #!define WITH_AUTH 104. # #!define WITH_USRLOCDB 105. #!define WITH_NAT 106. #!define WITH_ASTERISK 107. # #!define WITH_DEBUG 108. 109. ####### Include Local Config If Exists ######### 110. import_file "kamailio-local.cfg" 111. 112. ####### Defined Values ######### 113. 114. # *** Value defines - IDs used later in config 115. #!ifdef WITH_MYSQL 116. # - database URL - used to connect to database server by modules such 117. # as: auth_db, acc, usrloc, a.s.o. 118. #!ifndef DBURL 119. #!define DBURL "mysql://kamailio:kamailiorw@localhost/kamailio" 120. #!endif 121. #!endif 122. #!ifdef WITH_MULTIDOMAIN 123. # - the value for 'use_domain' parameters 124. #!define MULTIDOMAIN 1 125. #!else 126. #!define MULTIDOMAIN 0 127. #!endif 128. 129. # - flags 130. # FLT_ - per transaction (message) flags 131. # FLB_ - per branch flags 132. #!define FLT_ACC 1 133. #!define FLT_ACCMISSED 2 134. #!define FLT_ACCFAILED 3 135. #!define FLT_NATS 5 136. 137. #!define FLB_NATB 6 138. #!define FLB_NATSIPPING 7 139. 140. ####### Global Parameters ######### 141. 142. ### LOG Levels: 3=DBG, 2=INFO, 1=NOTICE, 0=WARN, -1=ERR 143. #!ifdef WITH_DEBUG 144. debug=4 145. log_stderror=yes 146. #!else 147. debug=3 148. log_stderror=no 149. #!endif 150. 151. memdbg=5 152. memlog=5 153. 154. log_facility=LOG_LOCAL0 155. 156. fork=yes 157. children=4 158. 159. /* uncomment the next line to disable TCP (default on) */ 160. #disable_tcp=yes 161. 162. /* uncomment the next line to disable the auto discovery of local aliases 163. based on reverse DNS on IPs (default on) */ 164. #auto_aliases=no 165. 166. /* add local domain aliases */ 167. #alias="sip.mydomain.com" 168. 169. /* uncomment and configure the following line if you want Kamailio to 170. bind on a specific interface/port/proto (default bind on all available) */ 171. 172. #listen=udp:50.0.0.1:5060 advertise 194.190.8.171:5060 173. listen=udp:194.190.8.171:5060 advertise 50.0.0.1:5060 174. 175. /* port to listen to 176. * - can be specified more than once if needed to listen on many ports */ 177. port=5060 178. 179. mhomed=1 180. 181. #!ifdef WITH_TLS 182. enable_tls=yes 183. #!endif 184. 185. # life time of TCP connection when there is no traffic 186. # - a bit higher than registration expires to cope with UA behind NAT 187. tcp_connection_lifetime=3605 188. 189. ####### Custom Parameters ######### 190. 191. # These parameters can be modified runtime via RPC interface 192. # - see the documentation of 'cfg_rpc' module. 193. # 194. # Format: group.id = value 'desc' description 195. # Access: $sel(cfg_get.group.id) or @cfg_get.group.id 196. # 197. 198. #!ifdef WITH_PSTN 199. # PSTN GW Routing 200. # 201. # - pstn.gw_ip: valid IP or hostname as string value, example: 202. # pstn.gw_ip = "10.0.0.101" desc "My PSTN GW Address" 203. # 204. # - by default is empty to avoid misrouting 205. #pstn.gw_ip = "" desc "PSTN GW Address" 206. #pstn.gw_port = "" desc "PSTN GW Port" 207. #!endif 208. 209. #!ifdef WITH_VOICEMAIL 210. # VoiceMail Routing on offline, busy or no answer 211. # 212. # - by default Voicemail server IP is empty to avoid misrouting 213. #voicemail.srv_ip = "" desc "VoiceMail IP Address" 214. #voicemail.srv_port = "5060" desc "VoiceMail Port" 215. #!endif 216. 217. #!ifdef WITH_ASTERISK 218. asterisk.bindip = "50.0.0.10" desc "Asterisk IP Address" 219. asterisk.bindport = "5060" desc "Asterisk Port" 220. kamailio.bindip = "50.0.0.1" desc "Kamailio IP Address" 221. kamailio.bindport = "5060" desc "Kamailio Port" 222. #!endif 223. 224. ####### Modules Section ######## 225. 226. # set paths to location of modules (to sources or installation folders) 227. #!ifdef WITH_SRCPATH 228. mpath="modules/" 229. #!else 230. mpath="/usr/lib64/kamailio/modules/" 231. #!endif 232. 233. #!ifdef WITH_MYSQL 234. loadmodule "db_mysql.so" 235. #!endif 236. 237. loadmodule "mi_fifo.so" 238. loadmodule "kex.so" 239. loadmodule "tm.so" 240. loadmodule "tmx.so" 241. loadmodule "sl.so" 242. loadmodule "rr.so" 243. loadmodule "pv.so" 244. loadmodule "maxfwd.so" 245. loadmodule "usrloc.so" 246. loadmodule "registrar.so" 247. loadmodule "textops.so" 248. loadmodule "siputils.so" 249. loadmodule "xlog.so" 250. loadmodule "sanity.so" 251. loadmodule "ctl.so" 252. loadmodule "cfg_rpc.so" 253. loadmodule "mi_rpc.so" 254. loadmodule "acc.so" 255. 256. #!ifdef WITH_AUTH 257. loadmodule "auth.so" 258. loadmodule "auth_db.so" 259. #!ifdef WITH_IPAUTH 260. loadmodule "permissions.so" 261. #!endif 262. #!endif 263. 264. #!ifdef WITH_ALIASDB 265. loadmodule "alias_db.so" 266. #!endif 267. 268. #!ifdef WITH_SPEEDDIAL 269. loadmodule "speeddial.so" 270. #!endif 271. 272. #!ifdef WITH_MULTIDOMAIN 273. loadmodule "domain.so" 274. #!endif 275. 276. #!ifdef WITH_PRESENCE 277. loadmodule "presence.so" 278. loadmodule "presence_xml.so" 279. #!endif 280. 281. #!ifdef WITH_NAT 282. loadmodule "nathelper.so" 283. loadmodule "rtpproxy.so" 284. #!endif 285. 286. #!ifdef WITH_TLS 287. loadmodule "tls.so" 288. #!endif 289. 290. #!ifdef WITH_ANTIFLOOD 291. loadmodule "htable.so" 292. loadmodule "pike.so" 293. #!endif 294. 295. #!ifdef WITH_XMLRPC 296. loadmodule "xmlrpc.so" 297. #!endif 298. 299. #!ifdef WITH_DEBUG 300. loadmodule "debugger.so" 301. #!endif 302. 303. #!ifdef WITH_ASTERISK 304. loadmodule "uac.so" 305. #!endif 306. 307. 308. #loadmodule "topoh.so" 309. #modparam("topoh", "mask_key", "balalayka") 310. #modparam("topoh", "mask_ip", "50.0.0.1") 311. 312. # ----------------- setting module-specific parameters --------------- 313. 314. 315. # ----- mi_fifo params ----- 316. modparam("mi_fifo", "fifo_name", "/tmp/kamailio_fifo") 317. 318. 319. # ----- tm params ----- 320. # auto-discard branches from previous serial forking leg 321. modparam("tm", "failure_reply_mode", 3) 322. # default retransmission timeout: 30sec 323. modparam("tm", "fr_timer", 30000) 324. # default invite retransmission timeout after 1xx: 120sec 325. modparam("tm", "fr_inv_timer", 120000) 326. 327. 328. # ----- rr params ----- 329. # add value to ;lr param to cope with most of the UAs 330. modparam("rr", "enable_full_lr", 1) 331. # do not append from tag to the RR (no need for this script) 332. #!ifdef WITH_ASTERISK 333. modparam("rr", "append_fromtag", 1) 334. #!else 335. modparam("rr", "append_fromtag", 0) 336. #!endif 337. 338. 339. # ----- registrar params ----- 340. modparam("registrar", "method_filtering", 1) 341. /* uncomment the next line to disable parallel forking via location */ 342. # modparam("registrar", "append_branches", 0) 343. /* uncomment the next line not to allow more than 10 contacts per AOR */ 344. #modparam("registrar", "max_contacts", 10) 345. # max value for expires of registrations 346. modparam("registrar", "max_expires", 3600) 347. # set it to 1 to enable GRUU 348. modparam("registrar", "gruu_enabled", 0) 349. 350. 351. # ----- acc params ----- 352. /* what special events should be accounted ? */ 353. modparam("acc", "early_media", 0) 354. modparam("acc", "report_ack", 0) 355. modparam("acc", "report_cancels", 0) 356. /* by default ww do not adjust the direct of the sequential requests. 357. if you enable this parameter, be sure the enable "append_fromtag" 358. in "rr" module */ 359. modparam("acc", "detect_direction", 0) 360. /* account triggers (flags) */ 361. modparam("acc", "log_flag", FLT_ACC) 362. modparam("acc", "log_missed_flag", FLT_ACCMISSED) 363. modparam("acc", "log_extra", 364. "src_user=$fU;src_domain=$fd;src_ip=$si;" 365. "dst_ouser=$tU;dst_user=$rU;dst_domain=$rd") 366. modparam("acc", "failed_transaction_flag", FLT_ACCFAILED) 367. /* enhanced DB accounting */ 368. #!ifdef WITH_ACCDB 369. modparam("acc", "db_flag", FLT_ACC) 370. modparam("acc", "db_missed_flag", FLT_ACCMISSED) 371. modparam("acc", "db_url", DBURL) 372. modparam("acc", "db_extra", 373. "src_user=$fU;src_domain=$fd;src_ip=$si;" 374. "dst_ouser=$tU;dst_user=$rU;dst_domain=$rd") 375. #!endif 376. 377. 378. # ----- usrloc params ----- 379. /* enable DB persistency for location entries */ 380. #!ifdef WITH_USRLOCDB 381. modparam("usrloc", "db_url", DBURL) 382. modparam("usrloc", "db_mode", 2) 383. modparam("usrloc", "use_domain", MULTIDOMAIN) 384. #!endif 385. 386. 387. # ----- auth_db params ----- 388. #!ifdef WITH_AUTH 389. modparam("auth_db", "db_url", DBURL) 390. modparam("auth_db", "calculate_ha1", yes) 391. modparam("auth_db", "password_column", "password") 392. modparam("auth_db", "load_credentials", "") 393. modparam("auth_db", "use_domain", MULTIDOMAIN) 394. 395. # ----- permissions params ----- 396. #!ifdef WITH_IPAUTH 397. modparam("permissions", "db_url", DBURL) 398. modparam("permissions", "db_mode", 1) 399. #!endif 400. 401. #!endif 402. 403. 404. # ----- alias_db params ----- 405. #!ifdef WITH_ALIASDB 406. modparam("alias_db", "db_url", DBURL) 407. modparam("alias_db", "use_domain", MULTIDOMAIN) 408. #!endif 409. 410. 411. # ----- speeddial params ----- 412. #!ifdef WITH_SPEEDDIAL 413. modparam("speeddial", "db_url", DBURL) 414. modparam("speeddial", "use_domain", MULTIDOMAIN) 415. #!endif 416. 417. 418. # ----- domain params ----- 419. #!ifdef WITH_MULTIDOMAIN 420. modparam("domain", "db_url", DBURL) 421. # register callback to match myself condition with domains list 422. modparam("domain", "register_myself", 1) 423. #!endif 424. 425. 426. #!ifdef WITH_PRESENCE 427. # ----- presence params ----- 428. modparam("presence", "db_url", DBURL) 429. 430. # ----- presence_xml params ----- 431. modparam("presence_xml", "db_url", DBURL) 432. modparam("presence_xml", "force_active", 1) 433. #!endif 434. 435. 436. #!ifdef WITH_NAT 437. # ----- rtpproxy params ----- 438. modparam("rtpproxy", "rtpproxy_sock", "udp:127.0.0.1:7722") 439. 440. # ----- nathelper params ----- 441. modparam("nathelper", "natping_interval", 30) 442. modparam("nathelper", "ping_nated_only", 1) 443. modparam("nathelper", "sipping_bflag", FLB_NATSIPPING) 444. modparam("nathelper", "sipping_from", "sip:pinger@kamaz") 445. 446. # params needed for NAT traversal in other modules 447. modparam("nathelper|registrar", "received_avp", "$avp(RECEIVED)") 448. modparam("usrloc", "nat_bflag", FLB_NATB) 449. #!endif 450. 451. 452. #!ifdef WITH_TLS 453. # ----- tls params ----- 454. modparam("tls", "config", "//etc/kamailio/tls.cfg") 455. #!endif 456. 457. #!ifdef WITH_ANTIFLOOD 458. # ----- pike params ----- 459. modparam("pike", "sampling_time_unit", 2) 460. modparam("pike", "reqs_density_per_unit", 16) 461. modparam("pike", "remove_latency", 4) 462. 463. # ----- htable params ----- 464. # ip ban htable with autoexpire after 5 minutes 465. modparam("htable", "htable", "ipban=>size=8;autoexpire=300;") 466. #!endif 467. 468. #!ifdef WITH_XMLRPC 469. # ----- xmlrpc params ----- 470. modparam("xmlrpc", "route", "XMLRPC"); 471. modparam("xmlrpc", "url_match", "^/RPC") 472. #!endif 473. 474. #!ifdef WITH_DEBUG 475. # ----- debugger params ----- 476. modparam("debugger", "cfgtrace", 1) 477. #!endif 478. 479. ####### Routing Logic ######## 480. 481. 482. # Main SIP request routing logic 483. # - processing of any incoming SIP request starts with this route 484. # - note: this is the same as route { ... } 485. request_route { 486. 487. # per request initial checks 488. route(REQINIT); 489. 490. xlog("L_NOTICE","$rm from $fu (IP:$si:$sp) Main Route before ---NAT---\n"); 491. route(DEBUG); 492. # NAT detection 493. route(NATDETECT); 494. 495. xlog("L_NOTICE","$rm from $fu (IP:$si:$sp) in Route[NATDETECT] fix_nat-register\n"); 496. route(DEBUG); 497. 498. # CANCEL processing 499. if (is_method("CANCEL")) 500. { 501. if (t_check_trans()) { 502. route(RELAY); 503. } 504. exit; 505. } 506. 507. route(DEBUG); 508. 509. # handle requests within SIP dialogs 510. route(WITHINDLG); 511. 512. route(DEBUG); 513. 514. ### only initial requests (no To tag) 515. 516. t_check_trans(); 517. 518. route(DEBUG); 519. 520. # authentication 521. route(AUTH); 522. 523. route(DEBUG); 524. 525. # record routing for dialog forming requests (in case they are routed) 526. # - remove preloaded route headers 527. remove_hf("Route"); 528. if (is_method("INVITE|SUBSCRIBE")) 529. record_route(); 530. 531. # account only INVITEs 532. if (is_method("INVITE")) 533. { 534. setflag(FLT_ACC); # do accounting 535. } 536. 537. # dispatch requests to foreign domains 538. route(SIPOUT); 539. 540. ### requests for my local domains 541. 542. # handle presence related requests 543. route(PRESENCE); 544. 545. route(DEBUG); 546. 547. # handle registrations 548. route(REGISTRAR); 549. 550. route(DEBUG); 551. 552. if ($rU==$null) 553. { 554. # request with no Username in RURI 555. sl_send_reply("484","Address Incomplete"); 556. exit; 557. } 558. 559. # dispatch destinations to PSTN 560. # route(PSTN); 561. 562. route(DEBUG); 563. 564. # user location service 565. route(LOCATION); 566. 567. route(DEBUG); 568. 569. route(RELAY); 570. 571. } 572. 573. 574. route[RELAY] { 575. 576. # enable additional event routes for forwarded requests 577. # - serial forking, RTP relaying handling, a.s.o. 578. if (is_method("INVITE|BYE|SUBSCRIBE|UPDATE")) { 579. if(!t_is_set("branch_route")) t_on_branch("MANAGE_BRANCH"); 580. } 581. if (is_method("INVITE|SUBSCRIBE|UPDATE")) { 582. if(!t_is_set("onreply_route")) t_on_reply("MANAGE_REPLY"); 583. } 584. if (is_method("INVITE")) { 585. if(!t_is_set("failure_route")) t_on_failure("MANAGE_FAILURE"); 586. } 587. 588. if (!t_relay()) { 589. sl_reply_error(); 590. } 591. exit; 592. } 593. 594. # Per SIP request initial checks 595. route[REQINIT] { 596. #!ifdef WITH_ANTIFLOOD 597. # flood dection from same IP and traffic ban for a while 598. # be sure you exclude checking trusted peers, such as pstn gateways 599. # - local host excluded (e.g., loop to self) 600. if(src_ip!=myself) 601. { 602. if($sht(ipban=>$si)!=$null) 603. { 604. # ip is already blocked 605. xdbg("request from blocked IP - $rm from $fu (IP:$si:$sp)\n"); 606. exit; 607. } 608. if (!pike_check_req()) 609. { 610. xlog("L_ALERT","ALERT: pike blocking $rm from $fu (IP:$si:$sp)\n"); 611. $sht(ipban=>$si) = 1; 612. exit; 613. } 614. } 615. #!endif 616. 617. if (!mf_process_maxfwd_header("10")) { 618. sl_send_reply("483","Too Many Hops"); 619. exit; 620. } 621. 622. if(!sanity_check("1511", "7")) 623. { 624. xlog("Malformed SIP message from $si:$sp\n"); 625. exit; 626. } 627. } 628. 629. # Handle requests within SIP dialogs 630. route[WITHINDLG] { 631. if (has_totag()) { 632. # sequential request withing a dialog should 633. # take the path determined by record-routing 634. if (loose_route()) { 635. route(DLGURI); 636. if (is_method("BYE")) { 637. setflag(FLT_ACC); # do accounting ... 638. setflag(FLT_ACCFAILED); # ... even if the transaction fails 639. } 640. else if ( is_method("ACK") ) { 641. # ACK is forwarded statelessy 642. route(NATMANAGE); 643. } 644. else if ( is_method("NOTIFY") ) { 645. # Add Record-Route for in-dialog NOTIFY as per RFC 6665. 646. record_route(); 647. } 648. route(RELAY); 649. } else { 650. if (is_method("SUBSCRIBE") && uri == myself) { 651. # in-dialog subscribe requests 652. route(PRESENCE); 653. exit; 654. } 655. if ( is_method("ACK") ) { 656. if ( t_check_trans() ) { 657. # no loose-route, but stateful ACK; 658. # must be an ACK after a 487 659. # or e.g. 404 from upstream server 660. route(RELAY); 661. exit; 662. } else { 663. # ACK without matching transaction ... ignore and discard 664. exit; 665. } 666. } 667. sl_send_reply("404","Not here"); 668. } 669. exit; 670. } 671. } 672. 673. # Handle SIP registrations 674. route[REGISTRAR] { 675. if (is_method("REGISTER")) 676. { 677. if(isflagset(FLT_NATS)) 678. { 679. setbflag(FLB_NATB); 680. # uncomment next line to do SIP NAT pinging 681. setbflag(FLB_NATSIPPING); 682. } 683. if (!save("location")) 684. sl_reply_error(); 685. 686. 687. #!ifdef WITH_ASTERISK 688. route(REGFWD); 689. #!endif 690. 691. exit; 692. } 693. } 694. 695. 696. #!ifdef WITH_ASTERISK 697. # Test if coming from Asterisk 698. route[FROMASTERISK] { 699. if($si==$sel(cfg_get.asterisk.bindip) && $sp==$sel(cfg_get.asterisk.bindport)) return 1; 700. return -1; 701. } 702. 703. 704. # Send to Asterisk 705. route[TOASTERISK] { 706. $du = "sip:" + $sel(cfg_get.asterisk.bindip) + ":" + $sel(cfg_get.asterisk.bindport); 707. xlog("L_INFO","[$fU@$si:$sp]{$rm} From Outside World to Asterisk Box $du\n"); 708. route(RELAY); 709. exit; 710. } 711. 712. # Forward REGISTER to Asterisk 713. route[REGFWD] { 714. if(!is_method("REGISTER")) 715. { 716. return; 717. } 718. 719. xlog("[$mi] PRINT AU: $au PRINT fU: $fU Received SIP Message (method: $rm) ($ml bytes) to $Ri:$Rp from $si:$sp:\n$mb\n"); 720. 721. t_relay_to_udp("50.0.0.10", "5060"); 722. 723. xlog("[$mi] PRINT AU: $au PRINT fU: $fU Sended SIP Message (method: $rm) ($ml bytes) to $Ri:$Rp from $si:$sp:\n$mb\n"); 724. 725. } 726. #!endif 727. 728. # USER location service 729. route[LOCATION] { 730. 731. #!ifdef WITH_SPEEDDIAL 732. # search for short dialing - 2-digit extension 733. if($rU=~"^[0-9][0-9]$") 734. if(sd_lookup("speed_dial")) 735. route(SIPOUT); 736. #!endif 737. 738. #!ifdef WITH_ALIASDB 739. # search in DB-based aliases 740. if(alias_db_lookup("dbaliases")) 741. route(SIPOUT); 742. #!endif 743. 744. #!ifdef WITH_ASTERISK 745. if(is_method("INVITE") && (!route(FROMASTERISK))) { 746. # if new call from out there - send to Asterisk 747. # - non-INVITE request are routed directly by Kamailio 748. # - traffic from Asterisk is routed also directy by Kamailio 749. route(TOASTERISK); 750. exit; 751. } 752. #!endif 753. 754. $avp(oexten) = $rU; 755. if (!lookup("location")) { 756. $var(rc) = $rc; 757. route(TOVOICEMAIL); 758. t_newtran(); 759. switch ($var(rc)) { 760. case -1: 761. case -3: 762. send_reply("404", "Not Found"); 763. exit; 764. case -2: 765. send_reply("405", "Method Not Allowed"); 766. exit; 767. } 768. } 769. 770. # when routing via usrloc, log the missed calls also 771. if (is_method("INVITE")) 772. { 773. setflag(FLT_ACCMISSED); 774. } 775. 776. route(RELAY); 777. exit; 778. } 779. 780. # Presence server route 781. route[PRESENCE] { 782. if(!is_method("PUBLISH|SUBSCRIBE")) 783. return; 784. 785. if(is_method("SUBSCRIBE") && $hdr(Event)=="message-summary") { 786. route(TOVOICEMAIL); 787. # returns here if no voicemail server is configured 788. sl_send_reply("404", "No voicemail service"); 789. exit; 790. } 791. 792. #!ifdef WITH_PRESENCE 793. if (!t_newtran()) 794. { 795. sl_reply_error(); 796. exit; 797. } 798. 799. if(is_method("PUBLISH")) 800. { 801. handle_publish(); 802. t_release(); 803. } else if(is_method("SUBSCRIBE")) { 804. handle_subscribe(); 805. t_release(); 806. } 807. exit; 808. #!endif 809. 810. # if presence enabled, this part will not be executed 811. if (is_method("PUBLISH") || $rU==$null) 812. { 813. sl_send_reply("404", "Not here"); 814. exit; 815. } 816. return; 817. } 818. 819. # Authentication route 820. route[AUTH] { 821. 822. #!ifdef WITH_ASTERISK 823. # do not auth traffic from Asterisk - trusted! 824. if(route(FROMASTERISK)) 825. return; 826. #!endif 827. 828. 829. #!ifdef WITH_AUTH 830. 831. #!ifdef WITH_IPAUTH 832. if((!is_method("REGISTER")) && allow_source_address()) 833. { 834. # source IP allowed 835. return; 836. } 837. #!endif 838. 839. if (is_method("REGISTER") || from_uri==myself) 840. { 841. # authenticate requests 842. if (!auth_check("$fd", "subscriber", "1")) { 843. auth_challenge("$fd", "0"); 844. exit; 845. } 846. # user authenticated - remove auth header 847. if(!is_method("REGISTER|PUBLISH")) 848. consume_credentials(); 849. } 850. # if caller is not local subscriber, then check if it calls 851. # a local destination, otherwise deny, not an open relay here 852. if (from_uri!=myself && uri!=myself) 853. { 854. sl_send_reply("403","Not relaying"); 855. exit; 856. } 857. 858. #!endif 859. return; 860. } 861. 862. # Caller NAT detection route 863. route[NATDETECT] { 864. #!ifdef WITH_NAT 865. force_rport(); 866. if (nat_uac_test("19")) { 867. if (is_method("REGISTER")) { 868. fix_nated_register(); 869. } else { 870. if(is_first_hop()) 871. set_contact_alias(); 872. } 873. setflag(FLT_NATS); 874. 875. } 876. #!endif 877. return; 878. } 879. 880. # RTPProxy control 881. route[NATMANAGE] { 882. #!ifdef WITH_NAT 883. if (is_request()) { 884. if(has_totag()) { 885. if(check_route_param("nat=yes")) { 886. setbflag(FLB_NATB); 887. } 888. } 889. } 890. if (!(isflagset(FLT_NATS) || isbflagset(FLB_NATB))) 891. return; 892. 893. rtpproxy_manage(); 894. 895. if (is_request()) { 896. if (!has_totag()) { 897. if(t_is_branch_route()) { 898. add_rr_param(";nat=yes"); 899. } 900. } 901. } 902. if (is_reply()) { 903. if(isbflagset(FLB_NATB)) { 904. if(is_first_hop()) 905. set_contact_alias(); 906. } 907. 908. xlog("L_NOTICE","$rm from $fu (IP:$si:$sp) in route[NATMANAGE] RTPproxy with EI Flags\n"); 909. 910. } 911. #!endif 912. return; 913. } 914. 915. # URI update for dialog requests 916. route[DLGURI] { 917. #!ifdef WITH_NAT 918. if(!isdsturiset()) { 919. handle_ruri_alias(); 920. 921. xlog("L_NOTICE","$rm from $fu (IP:$si:$sp) in route[DLGURI] RTPproxy with EI Flags\n"); 922. 923. } 924. #!endif 925. return; 926. } 927. 928. # Routing to foreign domains 929. route[SIPOUT] { 930. if (!uri==myself) 931. { 932. append_hf("P-hint: outbound\r\n"); 933. route(RELAY); 934. } 935. } 936. 937. # PSTN GW routing 938. route[PSTN] { 939. #!ifdef WITH_PSTN 940. # check if PSTN GW IP is defined 941. if (strempty($sel(cfg_get.pstn.gw_ip))) { 942. xlog("SCRIPT: PSTN rotuing enabled but pstn.gw_ip not defined\n"); 943. return; 944. } 945. 946. # route to PSTN dialed numbers starting with '+' or '00' 947. # (international format) 948. # - update the condition to match your dialing rules for PSTN routing 949. if(!($rU=~"^(\+|00)[1-9][0-9]{3,20}$")) 950. return; 951. 952. # only local users allowed to call 953. if(from_uri!=myself) { 954. sl_send_reply("403", "Not Allowed"); 955. exit; 956. } 957. 958. if (strempty($sel(cfg_get.pstn.gw_port))) { 959. $ru = "sip:" + $rU + "@" + $sel(cfg_get.pstn.gw_ip); 960. } else { 961. $ru = "sip:" + $rU + "@" + $sel(cfg_get.pstn.gw_ip) + ":" 962. + $sel(cfg_get.pstn.gw_port); 963. } 964. 965. route(RELAY); 966. exit; 967. #!endif 968. 969. return; 970. } 971. 972. # XMLRPC routing 973. #!ifdef WITH_XMLRPC 974. route[XMLRPC] { 975. # allow XMLRPC from localhost 976. if ((method=="POST" || method=="GET") 977. && (src_ip==127.0.0.1)) { 978. # close connection only for xmlrpclib user agents (there is a bug in 979. # xmlrpclib: it waits for EOF before interpreting the response). 980. if ($hdr(User-Agent) =~ "xmlrpclib") 981. set_reply_close(); 982. set_reply_no_connect(); 983. dispatch_rpc(); 984. exit; 985. } 986. send_reply("403", "Forbidden"); 987. exit; 988. } 989. #!endif 990. 991. # route to voicemail server 992. route[TOVOICEMAIL] { 993. #!ifdef WITH_VOICEMAIL 994. if(!is_method("INVITE|SUBSCRIBE")) 995. return; 996. 997. # check if VoiceMail server IP is defined 998. if (strempty($sel(cfg_get.voicemail.srv_ip))) { 999. xlog("SCRIPT: VoiceMail rotuing enabled but IP not defined\n"); 1000. return; 1001. } 1002. if(is_method("INVITE")) { 1003. if($avp(oexten)==$null) 1004. return; 1005. $ru = "sip:" + $avp(oexten) + "@" + $sel(cfg_get.voicemail.srv_ip) 1006. + ":" + $sel(cfg_get.voicemail.srv_port); 1007. } else { 1008. if($rU==$null) 1009. return; 1010. $ru = "sip:" + $rU + "@" + $sel(cfg_get.voicemail.srv_ip) 1011. + ":" + $sel(cfg_get.voicemail.srv_port); 1012. } 1013. route(RELAY); 1014. exit; 1015. #!endif 1016. 1017. return; 1018. } 1019. 1020. # manage outgoing branches 1021. branch_route[MANAGE_BRANCH] { 1022. xdbg("new branch [$T_branch_idx] to $ru\n"); 1023. route(NATMANAGE); 1024. } 1025. 1026. # manage incoming replies 1027. onreply_route[MANAGE_REPLY] { 1028. xdbg("incoming reply\n"); 1029. if(status=~"[12][0-9][0-9]") 1030. route(NATMANAGE); 1031. } 1032. 1033. # manage failure routing cases 1034. failure_route[MANAGE_FAILURE] { 1035. route(NATMANAGE); 1036. 1037. if (t_is_canceled()) { 1038. exit; 1039. } 1040. 1041. #!ifdef WITH_BLOCK3XX 1042. # block call redirect based on 3xx replies. 1043. if (t_check_status("3[0-9][0-9]")) { 1044. t_reply("404","Not found"); 1045. exit; 1046. } 1047. #!endif 1048. 1049. #!ifdef WITH_VOICEMAIL 1050. # serial forking 1051. # - route to voicemail on busy or no answer (timeout) 1052. if (t_check_status("486|408")) { 1053. $du = $null; 1054. route(TOVOICEMAIL); 1055. exit; 1056. } 1057. #!endif 1058. } 1059. 1060. 1061. route[DEBUG] { 1062. if (method==("PUBLISH|SUBSCRIBE|REGISTER|OPTIONS")) { 1063. return; 1064. } 1065. xlog("[$mi] Received SIP Message (method: $rm) ($ml bytes) to $Ri:$Rp from $si:$sp:\n$mb\n"); 1066. } -- С уважением, Александр Васин. 8 926 1437200 icq: 9906064