<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hello,</p>
<p>sockets are matched only on address/ip or advertised value, if
you want to match on domain, you have to add advertised address to
listen global parameter.</p>
<p>There is no dns done on route header to do the match, that can
have significant on performance, security and routing impact
(e.g., a bad actor controlling whatever dns record can point a
domain to your sip server address and then your server believes
that route headers are added by itself).</p>
<p>You can eventually do it yourself in the config using ipops
module and select the socket based on the result.</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div class="moz-cite-prefix">On 25.02.21 12:16, Ilie Soltanici
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAJQ6-U0_1vC5+eJ4J0+mh1Egt6JZjYrgkTQGOwJhPOQLeBcXLQ@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Hello,
<div><br>
</div>
<div>I do have 2 network interfaces in 2 different networks, so
I don't know if disabling this warning will be the best option
here, it's just like a workaround. </div>
<div>The weird thing is that the 'rr' Kamailio is complaining (
sbc-fqdn:5067) is actually the IP address (socket) he is
listening on:</div>
<div><br>
</div>
<div>ping
sbc-fqdn
</div>
<div>64 bytes from kamailio (1.1.1.1): icmp_seq=1 ttl=64
time=0.041 ms<br>
</div>
<div><br>
</div>
<div>kamcmd corex.list_sockets</div>
<div>{<br>
PROTO: tls<br>
NAME: 1.1.1.1<br>
ADDRLIST: {<br>
ADDR: 1.1.1.1<br>
}<br>
PORT: 5067<br>
MCAST: no<br>
MHOMED: no<br>
SOCKNAME: -<br>
ADVERTISE: -<br>
}<br>
</div>
<div><br>
</div>
<div>(IP Address is replaced)</div>
<div><br>
</div>
<div>I was trying to enable sockname_mode for the rr module (
modparam("rr", "sockname_mode", 1)
), but didn't notice any changes in the RR header. Still
missing the 'sn' parameter:</div>
<div><br>
</div>
<div>INVITE
<a class="moz-txt-link-freetext" href="sip:+123456789@sbc-fqdn:5067;user=phone;transport=tls">sip:+123456789@sbc-fqdn:5067;user=phone;transport=tls</a> SIP/2.0</div>
<div>Record-Route:
<a class="moz-txt-link-rfc2396E" href="sip:192.168.1.1:5060;ftag=98c057b8808f44c48900f71f51443eeb;lr;r2=on"><sip:192.168.1.1:5060;ftag=98c057b8808f44c48900f71f51443eeb;lr;r2=on></a><br>
Record-Route:
<a class="moz-txt-link-rfc2396E" href="sip:sbc-fqdn:5067;transport=tls;ftag=98c057b8808f44c48900f71f51443eeb;lr;r2=on"><sip:sbc-fqdn:5067;transport=tls;ftag=98c057b8808f44c48900f71f51443eeb;lr;r2=on></a><br>
</div>
<div><br>
</div>
<div>I'm missing something else here?</div>
<div>Thank you.</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Thu, 25 Feb 2021 at 10:18,
Daniel-Constantin Mierla <<a
href="mailto:miconda@gmail.com" target="_blank"
moz-do-not-send="true">miconda@gmail.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<p>Hello,</p>
<p>there is a rr modparam to turn of that warning, if you do
not have many network interfaces/sockets that would
require to select a specific one, then should be enough.
Otherwise, see the archive in the past two weeks or so,
there was a discussion about using socket names with
record routes.</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div>On 25.02.21 10:51, Ilie Soltanici wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hello,
<div><br>
</div>
<div>The loose_route function from the rr module is
always getting an error in the logs that's not able to
find the socket when the BYE request is coming from
Kam to the Teams:</div>
<div><br>
</div>
<div>Feb 24 18:20:58 kamailio kam[24681]: WARNING: {BYE
(1) | Seq=102 | Source IP=192.1668.1.1 (udp) | Call
ID=2e701c07f99c5cb89fc72db225a6e309} rr [loose.c:800]:
rr_do_force_send_socket(): no socket found to match
second RR
(<a moz-do-not-send="true">sip:sbc-fqdn:5067;transport=tls;ftag=4ccd608c55e94f4aa094151dfd9e23a4;lr;r2=on</a>)<br>
</div>
<div><br>
</div>
<div>This is the BYE message:</div>
<div><br>
</div>
<div>||||||||||||||||||||<br>
====================<br>
tag: rcv<br>
pid: 24681<br>
process: 3<br>
time: 1614190858.750938<br>
date: Wed Feb 24 18:20:58 2021<br>
proto: udp ipv4<br>
srcip: 192.168.1.2<br>
srcport: 5060<br>
dstip: 192.1668.1.1<br>
dstport: 5060<br>
~~~~~~~~~~~~~~~~~~~~<br>
BYE
<a moz-do-not-send="true">sip:api-du-c-euno.pstnhub.microsoft.com:443;x-i=58a922ac-934d-49cb-93b0-a7b435a36ea5;x-c=2e701c07f99c5cb89fc72db225a6e309/d/8/7776d3cf84d340a79f0a433d743e7a1a</a>
SIP/2.0<br>
Via: SIP/2.0/UDP
192.168.1.2:5060;branch=z9hG4bK24411a29;rport<br>
Route:
<a moz-do-not-send="true"><sip:192.168.1.1:5060;ftag=4ccd608c55e94f4aa094151dfd9e23a4;lr;r2=on></a>,<a
moz-do-not-send="true"><sip:sbc-fqdn:5067;transport=tls;ftag=4ccd608c55e94f4aa094151dfd9e23a4;lr;r2=on></a>,<a
moz-do-not-send="true"><sip:sip-du-a-eu.pstnhub.microsoft.com:5061;transport=tls;lr></a><br>
Max-Forwards: 70<br>
From: <a moz-do-not-send="true"><sip:+1234566789@sbc-fqdn:5067;user=phone></a>;tag=as72ae570b<br>
To:
user1<a moz-do-not-send="true"><sip:+87654321@sip.pstnhub.microsoft.com:5061;user=phone></a>;tag=4ccd608c55e94f4aa094151dfd9e23a4<br>
Call-ID: 2e701c07f99c5cb89fc72db225a6e309<br>
CSeq: 102 BYE<br>
User-Agent: COMPANY<br>
Content-Length: 0<br>
<br>
||||||||||||||||||||<br>
====================<br>
</div>
<div><br>
</div>
<div>The domain from the second rr (sbc-fqdn:5067) it's
perfectly valid and resolved from the kam server and
from outside.</div>
<div><br>
</div>
<div>version: kamailio 5.4.4 (x86_64/linux) bdf4e0</div>
<div><br>
</div>
<div>Any thought here?</div>
<div>Thanks<br clear="all">
<div><br>
</div>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Wed, 24 Feb 2021 at
21:40, Ilie Soltanici <<a
href="mailto:iliusha.md@gmail.com" target="_blank"
moz-do-not-send="true">iliusha.md@gmail.com</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px
0px 0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex">
<div dir="ltr">Changing enable_full_lr parameter from
the rr module fixed the issue. Now I'm getting ACK
from MS to 200OK.
<div>Thank you</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Wed, 24 Feb
2021 at 15:12, Juha Heinanen <<a
href="mailto:jh@tutpro.com" target="_blank"
moz-do-not-send="true">jh@tutpro.com</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px
0px 0px 0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex"><br>
> SIP/2.0 200 OK<br>
> Via: SIP/2.0/TLS
52.114.75.24:5061;branch=z9hG4bK6b5ac083<br>
> Record-Route:<br>
>
<a moz-do-not-send="true"><sip:fqdn:5067;transport=tls;r2=on;ftag=7a6409ee42ac48a897be110166a2bb0b;lr=on></a><br>
> Record-Route: <a moz-do-not-send="true"><sip:sip-du-a-eu.pstnhub.microsoft.com:5061;transport=tls;lr></a><br>
<br>
I have ;r2=on in both R-R headers. And also you
have ;lr=on in one and<br>
;lr in the other.<br>
<br>
-- Juha<br>
<br>
_______________________________________________<br>
Kamailio (SER) - Users Mailing List<br>
<a href="mailto:sr-users@lists.kamailio.org"
target="_blank" moz-do-not-send="true">sr-users@lists.kamailio.org</a><br>
<a
href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users"
rel="noreferrer" target="_blank"
moz-do-not-send="true">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br>
</blockquote>
</div>
</blockquote>
</div>
<br>
<fieldset></fieldset>
<pre>_______________________________________________
Kamailio (SER) - Users Mailing List
<a href="mailto:sr-users@lists.kamailio.org" target="_blank" moz-do-not-send="true">sr-users@lists.kamailio.org</a>
<a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" target="_blank" moz-do-not-send="true">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<pre cols="72">--
Daniel-Constantin Mierla -- <a href="http://www.asipto.com" target="_blank" moz-do-not-send="true">www.asipto.com</a>
<a href="http://www.twitter.com/miconda" target="_blank" moz-do-not-send="true">www.twitter.com/miconda</a> -- <a href="http://www.linkedin.com/in/miconda" target="_blank" moz-do-not-send="true">www.linkedin.com/in/miconda</a>
Funding: <a href="https://www.paypal.me/dcmierla" target="_blank" moz-do-not-send="true">https://www.paypal.me/dcmierla</a></pre>
</div>
</blockquote>
</div>
</blockquote>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Funding: <a class="moz-txt-link-freetext" href="https://www.paypal.me/dcmierla">https://www.paypal.me/dcmierla</a></pre>
</body>
</html>