<div dir="ltr"><div>It becomes stranger.</div><div>I've managed to put in letsencrypt cert. No better. After that i started sipdump. OK, pings to microsoft were using local IP of kamalio server. Added a few "listen" directives to config to fix it.</div><div><br></div><div>Well, now dispatcher still shows bad status. Teams admin center also shows inactive. But when someone makes a test call from Teams, I get the traffic! Like this:</div><div><br></div><div>||||||||||||||||||||<br>====================<br>tag: rcv<br>pid: 81575<br>process: 30<br>time: 1594204711.307233<br>date: Wed Jul 8 13:38:31 2020<br>proto: tls ipv4<br>srcip: 52.114.148.0<br>srcport: 10176<br>dstip: <br>dstport: 5061<br>~~~~~~~~~~~~~~~~~~~~<br>INVITE sip:+...@domain.com:5061;user=phone;transport=tls SIP/2.0^M<br>FROM: Sergey A. Smirnov<sip:+...@sip.pstnhub.microsoft.com:5061;user=phone>;tag=3c0c73c49b334dad885ed8383d9bfd02^M<br>TO: <sip:+...@domain.com:5061;user=phone>^M<br>CSEQ: 1 INVITE^M<br>CALL-ID: f90cfaf1cc465256a58910806c85e7e3^M<br>MAX-FORWARDS: 70^M<br>VIA: SIP/2.0/TLS 52.114.148.0:5061;branch=z9hG4bK38865678^M<br>RECORD-ROUTE: <sip:sip-du-a-us.pstnhub.microsoft.com:5061;transport=tls;lr>^M<br>CONTACT: <sip:api-du-c-euno.pstnhub.microsoft.com:443;x-i=61bae769-d23e-498b-800d-f1e258214d96;x-c=f90cfaf1cc465256a58910806c85e7e3/d/10/bf778faf9b964e8cb1ff2ad03b4abd68>^M<br>CONTENT-LENGTH: 1133^M<br>MIN-SE: 300^M<br>SUPPORTED: timer^M<br>USER-AGENT: Microsoft.PSTNHub.SIPProxy v.2020.7.1.9 i.USWE2.0^M<br>CONTENT-TYPE: application/sdp^M<br>ALLOW: INVITE,ACK,OPTIONS,CANCEL,BYE,NOTIFY^M<br>SESSION-EXPIRES: 3600^M<br>^M<br>v=0^M<br>o=- 247300 0 IN IP4 127.0.0.1^M<br>s=session^M<br>c=IN IP4 52.113.47.185^M<br>b=CT:10000000^M<br>t=0 0^M<br>m=audio 51320 RTP/SAVP 104 117 9 103 111 18 0 8 97 101 13 118^M<br>c=IN IP4 52.113.47.185^M<br>a=rtcp:51321^M<br>a=ice-ufrag:V73X^M<br>a=ice-pwd:KGyenWsebt1f6QY6CiwAoQzA^M<br>a=rtcp-mux^M<br>a=candidate:1 1 UDP 2130706431 52.113.47.185 51320 typ srflx raddr 10.0.32.202 rport 51320^M<br>a=candidate:1 2 UDP 2130705918 52.113.47.185 51321 typ srflx raddr 10.0.32.202 rport 51321^M<br>a=candidate:2 1 tcp-act 2121006078 52.113.47.185 49152 typ srflx raddr 10.0.32.202 rport 49152^M<br>a=candidate:2 2 tcp-act 2121006078 52.113.47.185 49152 typ srflx raddr 10.0.32.202 rport 49152^M<br>a=label:main-audio^M<br>a=mid:1^M<br>a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:vKSpeCodqNjmTXOlZUjJCgW1YXXGmmAzYg/RqziH|2^31^M<br>a=sendrecv^M<br>a=rtpmap:104 SILK/16000^M<br>a=rtpmap:117 G722/8000/2^M<br>a=rtpmap:9 G722/8000^M<br>a=rtpmap:103 SILK/8000^M<br>a=rtpmap:111 SIREN/16000^M<br>a=fmtp:111 bitrate=16000^M<br>a=rtpmap:18 G729/8000^M<br>a=fmtp:18 annexb=no^M<br>a=rtpmap:0 PCMU/8000^M<br>a=rtpmap:8 PCMA/8000^M<br>a=rtpmap:97 RED/8000^M<br>a=rtpmap:101 telephone-event/8000^M<br>a=fmtp:101 0-16^M<br>a=rtpmap:13 CN/8000^M<br>a=rtpmap:118 CN/16000^M<br>a=ptime:20^M<br>||||||||||||||||||||<br>||||||||||||||||||||<br>====================<br>tag: snd<br>pid: 81575<br>process: 30<br>time: 1594204711.311578<br>date: Wed Jul 8 13:38:31 2020<br>proto: tls ipv4<br>srcip: <br>srcport: 5061<br>dstip: 52.114.148.0<br>dstport: 5061<br>~~~~~~~~~~~~~~~~~~~~<br>SIP/2.0 404 Not Found^M<br>FROM: Sergey A. Smirnov<sip:+...@sip.pstnhub.microsoft.com:5061;user=phone>;tag=3c0c73c49b334dad885ed8383d9bfd02^M<br>TO: <sip:+...@domain.com:5061;user=phone>;tag=e69338500f192915ee9e9b54c3e94a3c-e71d1853^M<br>CSEQ: 1 INVITE^M<br>CALL-ID: f90cfaf1cc465256a58910806c85e7e3^M<br>VIA: SIP/2.0/TLS 52.114.148.0:5061;branch=z9hG4bK38865678^M<br>Server: kamailio (5.3.5 (x86_64/linux))^M<br>Content-Length: 0^M<br></div><div><br></div><div>Well, I get that 404 is because I have no forward route to my pstn. But shouldn't I rely on dispatchers output? Also all these "inactive" make me worried.<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">ср, 8 июл. 2020 г. в 10:32, Karsten Horsmann <<a href="mailto:khorsmann@gmail.com">khorsmann@gmail.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="auto">Hi,<div dir="auto"><br></div><div dir="auto">Yeah they told you that. But I got it working with letsencrypt. It's an easy and harmless try before you bumping your head on the desk in case of tls debugging. </div><div dir="auto"><br></div><div dir="auto"><br></div><div dir="auto">BTW I remember that you can sniff ms teams ssl/tls handshake with ssldump.</div><div dir="auto"><br></div><div dir="auto">And if teams is happy with there option pings to you the direct routing shows up as okay (AFAIK). </div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Роман С. <<a href="mailto:highlandy@gmail.com" target="_blank">highlandy@gmail.com</a>> schrieb am Mi., 8. Juli 2020, 09:07:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hm, letsencrypt is out of supported CA list :/ I will give it a try and roll over to sipdump if it fails. Thank you guys.<br><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">вт, 7 июл. 2020 г. в 21:19, Karsten Horsmann <<a href="mailto:khorsmann@gmail.com" rel="noreferrer" target="_blank">khorsmann@gmail.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="auto">Hi there,<div dir="auto"><br></div><div dir="auto">my teams tls problems with wildcard certs are gone after I did the an letsencrypt cert fqdn based cn. </div><div dir="auto"><br></div><div dir="auto">Did you tried that? </div><div dir="auto"><br></div><div dir="auto">Cheers </div><div dir="auto">Karsten </div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Роман С. <<a href="mailto:highlandy@gmail.com" rel="noreferrer" target="_blank">highlandy@gmail.com</a>> schrieb am Di., 7. Juli 2020, 11:46:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hello.</div><div>I'm trying to set up Kamailio as SBC for Teams using <a href="https://skalatan.de/en/blog/kamailio-sbc-teams" rel="noreferrer noreferrer" target="_blank">https://skalatan.de/en/blog/kamailio-sbc-teams</a>. <br></div><div>Setup is completely default (except things mentioned at article), but I use wildcard certificate for TLS. Well, I can't even pass dispatcher:</div><div><br></div><div>kamcmd dispatcher.list | egrep "RI|FLAG"<br> URI: sip:<a href="http://sip.pstnhub.microsoft.com" rel="noreferrer noreferrer" target="_blank">sip.pstnhub.microsoft.com</a>;transport=tls<br> FLAGS: IP<br> PRIORITY: 3<br> URI: sip:<a href="http://sip2.pstnhub.microsoft.com" rel="noreferrer noreferrer" target="_blank">sip2.pstnhub.microsoft.com</a>;transport=tls<br> FLAGS: IP<br> PRIORITY: 2<br> URI: sip:<a href="http://sip3.pstnhub.microsoft.com" rel="noreferrer noreferrer" target="_blank">sip3.pstnhub.microsoft.com</a>;transport=tls<br> FLAGS: IP<br> PRIORITY: 1</div><div><br></div><div>Where do I start to dig? <br></div></div>
_______________________________________________<br>
Kamailio (SER) - Users Mailing List<br>
<a href="mailto:sr-users@lists.kamailio.org" rel="noreferrer noreferrer" target="_blank">sr-users@lists.kamailio.org</a><br>
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer noreferrer noreferrer" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
</blockquote></div>
_______________________________________________<br>
Kamailio (SER) - Users Mailing List<br>
<a href="mailto:sr-users@lists.kamailio.org" rel="noreferrer" target="_blank">sr-users@lists.kamailio.org</a><br>
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer noreferrer" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
</blockquote></div></div>
_______________________________________________<br>
Kamailio (SER) - Users Mailing List<br>
<a href="mailto:sr-users@lists.kamailio.org" rel="noreferrer" target="_blank">sr-users@lists.kamailio.org</a><br>
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer noreferrer" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
</blockquote></div>
_______________________________________________<br>
Kamailio (SER) - Users Mailing List<br>
<a href="mailto:sr-users@lists.kamailio.org" target="_blank">sr-users@lists.kamailio.org</a><br>
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
</blockquote></div>