sr-users September 2005

sr-users@lists.kamailio.org

231 participants
507 discussions

[Serusers] suppress CLI in SIP-SIP calls
by Gerd Feiner 01 Sep '05

01 Sep '05

Hi, how do I suppress the CLI (CLIR) in SIP-SIP calls? It seems to me, that SIP-clients of any kind send the CLI information (or originating user-ID) in any case. Can I somehow suppress CLIs in SER on a per- user basis? Brgds, Gerd

1 0

[Serusers] xmlrpc calls
by zkeatts 01 Sep '05

01 Sep '05

I am currently trying to do an xml-rpc call to usrloc.show_contacts. The xml packet I am sending is the following POST /RPC2 HTTP/1.0 User-Agent: Radio UserLand/7.1b7 (WinNT) Host: localhost:5060 Content-Type: text/xml Content-length: 131 <?xml version=\"1.0\"?> <methodCall> <methodName>usrloc.show_contacts</methodName> <params> </params> </methodCall> As a return packet I am getting HTTP/1.0 200 OK Via: SIP/2.0/UDP 127.0.0.1:32769 Server: Sip EXpress router (0.10.99-janakj_experimental (i386/linux)) Content-Length: 303 Warning: 392 127.0.0.1:5060 "Noisy feedback tells: pid=5820 req_src_ip=127.0.0.1 req_src_port=32769 in_uri=/RPC2 out_uri=/RPC2 via_cnt==1" <?xml version="1.0" encoding="UTF-8"?> <methodResponse> <fault> <value><struct> <member><name>faultCode</name> <value><i4>400</i4></value></member> <member><name>faultString</name> <value><string>More Parameters Expected</string></value></member> </struct></value> </fault> </methodResponse> This tells me that I am not entering the correct information, but I am at a loss to exactly what else I should be inserting. I did a search for rpc_show_contacts and found in ./sip_router/modules/usrloc/ul_rpc.c static void rpc_show_contacts(rpc_t* rpc) After searching some more I could not find the rpc_t structure. Does anyone know what values I should be passing via XML? Thanks, Zach Keatts Software Engineer Nuvio.com

2 6

[Serusers] URGENT:Authenitcation Mode
by Ashutosh Kumar 01 Sep '05

01 Sep '05

Hi, IF I set auth_db:calculate_ha1=no, will the radius authentication also be in non-digest (plaintext/basic) mode?? Reply please. Very urgent. Regards, Ashutosh Kumar

2 1

[Serusers] maxfwd module with Max-Forwards > 255 broken
by Hendrik Scholz 01 Sep '05

01 Sep '05

Hi! I checked how SER would behave with large Max-Forwards values. Paragraph 20.22 of RFC 3261 notes Max-Forwards to be anywhere between 0 and 255 but SER lacks a check for the upper boundry in the maxfwd module. I'm not sure how the correct way to remove the broken header field and introducing a correct one would be so I leave this for somebody who knows :) Hendrik -- freenet Cityline GmbH, Hamburger Chaussee 2-4, 24114 Kiel, Germany Phone: +49 (0)431 9020552, Fax: +49 (0)431 9020559 Internet: http://www.freenet.de, eMail: hendrik.scholz(a)freenet-ag.de

2 1

[Serusers] overflowing Expire values
by Hendrik Scholz 01 Sep '05

01 Sep '05

Hi! I gave 3.1.2.4 of draft-ietf-sipping-torture-tests-07 a try and sent - a REGISTER with Expires > 2^31 and lower than 2^32 (2147483748 in my case). - a REGISTER with Expires > 2^32 (4294967596 = 2^32 + 300) I used print_expires() to print the resulting values SER (0.9.3 + changes) parsed. It's a negative value in first case and 300 in the latter one. parser/parse_expires.h defines exp_body_t to have 'int val' which is not enough to store the parsed values. Changing it to 'unsigned int val' prevents the negative values from coming up in SER but does not solve the main problem. The draft stats that a default value of 3600 seconds should be assumed in case of errors, so an additional check to make sure _e->val will always be below 2^32 is necessary. I do have a small patch for our non-standard branch and could wrap one up for HEAD if needed. Hendrik -- freenet Cityline GmbH, Hamburger Chaussee 2-4, 24114 Kiel, Germany Phone: +49 (0)431 9020552, Fax: +49 (0)431 9020559 Internet: http://www.freenet.de, eMail: hendrik.scholz(a)freenet-ag.de

2 2

Fwd: Re: [Serusers] Blocking calls from unregistered users
by Pavol Segec 01 Sep '05

01 Sep '05

Hi, The code means, that if an user is establishing a call (UA generate INVITE message) and the user is not already registered on your.domain register server, the user will be challenged to authenticate itself before the call is progressed, and only authentication of users from your.domain will be authorized (accepted). Personally I think that good practise is to put some code into ser.cfg where REGISTER message is handled, which allow to register (and make a call) only users, which have account on your.domain register (orproxy with register features) server, for example: sl_send_reply("100","Trying"); if (!www_authorize("your.domain", "subscriber")) { www_challenge("your.domain", "0"); break; }; # only registered users are allowed # do not register someone else if(!check_to()){ log(1,"LOG: unregistered user registration attempt\n"); sl_send_reply("401","Unauthorized"); sl_send_reply("403","Only registered users are allowed"); break; }; # save the registration process results if (!save("location")){ sl_reply_error(); }; BR pavol Citát Ryan Pagquil <rpagquil(a)philonline.com>: > Hi, > I'm currently subscribed to iptel.org. Well iptel.org's proxy doesn't > allow unregistered users to call to anybody, I already tried it. Does > having my domain specified in the proxy_authorize section means that > only users from my domain will be asked to register first before they > can place a call? I think I already tried this.. but I'll still test. =) > > Thanks, > Ryan > > Pavol Segec wrote: > > >Hi, > > > >If I understand well, you just need to put authorization challenge into your > >ser.cfg file where INVITE messages are handled, as follows: > > > >if(!proxy_authorize("your.domain","subscriber")){ > > proxy_challenge("your.domain","0"); > > sl_send_reply("403","Forbidden"); > > break; > > }; > > > >pavol > > > >CitĂĄt Dave <ddx66(a)yahoo.com>: > > > > > > > >>You can't as far as I know. You must use a USer Agent > >>that does not allow a user to make a calls unless the > >>UA is registered. > >> > >>--- rpagquil(a)philonline.com wrote: > >> > >> > >>--------------------------------- > >>Hi, I'm setting up ser so that unregistered users > >>can't make any calls to anybody. I have configured to > >>allow all other domains to make a call to my local > >>users. But when my local user that is unregistered it > >>can still make calls to other local users. How would I > >>do to block him totally? here is my ser.cfg: debug=3 > >>fork=yes log_stderror=yes listen=202.84.24.107 > >>port=5060 children=4 dns=no rev_dns=no > >>fifo="/tmp/ser_fifo" > >>fifo_db_url="mysql://ser:heslo@localhost/ser" > >>alias=sip.philonline.com #load module part > >>loadmodule "/usr/local/lib/ser/modules/mysql.so" > >>loadmodule "/usr/local/lib/ser/modules/domain.so" > >>loadmodule "/usr/local/lib/ser/modules/sl.so" > >>loadmodule "/usr/local/lib/ser/modules/tm.so" > >>loadmodule "/usr/local/lib/ser/modules/rr.so" > >>loadmodule "/usr/local/lib/ser/modules/maxfwd.so" > >>loadmodule "/usr/local/lib/ser/modules/usrloc.so" > >>loadmodule "/usr/local/lib/ser/modules/registrar.so" > >>loadmodule "/usr/local/lib/ser/modules/auth.so" > >>loadmodule "/usr/local/lib/ser/modules/auth_db.so" > >>loadmodule "/usr/local/lib/ser/modules/uri.so" > >>loadmodule "/usr/local/lib/ser/modules/uri_db.so" > >>loadmodule "/usr/local/lib/ser/modules/mediaproxy.so" > >>loadmodule "/usr/local/lib/ser/modules/nathelper.so" > >>loadmodule "/usr/local/lib/ser/modules/textops.so" > >>loadmodule "/usr/local/lib/ser/modules/acc.so" > >>loadmodule "/usr/local/lib/ser/modules/permissions.so" > >> #module parameter setup modparam("rr", > >>"enable_full_lr", 1) > >>modparam("auth_db|uri_db|usrloc|domain|permissions", > >>"db_url", "mysql://ser:heslo@localhost/ser") > >>modparam("auth_db", "calculate_ha1", 1) > >>modparam("auth_db", "password_column", "password") > >>modparam("usrloc", "db_mode", 2) > >>modparam("nathelper", "rtpproxy_disable", 1) > >>modparam("nathelper", "natping_interval", 0) > >>modparam("mediaproxy", "natping_interval", 30) > >>modparam("mediaproxy", "mediaproxy_socket", > >>"/var/run/mediaproxy.sock") modparam("mediaproxy", > >>"sip_asymmetrics", "/usr/local/etc/ser/sip-clients") > >>modparam("mediaproxy", "rtp_asymmetrics", > >>"/usr/local/etc/ser/rtp-clients") > >>modparam("registrar", "nat_flag", 6) modparam("acc", > >>"log_level", 2) modparam("acc", "log_fmt", > >>"cdfimorstup") modparam("acc", "report_ack", 1) > >>#modparam("acc", "failed_transactions", 1) > >>modparam("acc", "log_flag", 1) #modparam("acc", > >>"report_cancels", 1) modparam("acc", "db_flag", 1) > >>modparam("acc", "db_missed_flag", 3) modparam("acc", > >>"db_url", "mysql://ser:heslo@localhost/ser") > >>modparam("uri_db", "uri_table", "uri") > >>modparam("uri_db", "uri_user_column", "username") > >>modparam("uri_db", "uri_domain_column", "domain") > >>modparam("domain", "db_mode", 1) modparam("domain", > >>"domain_table", "domain") modparam("domain", > >>"domain_col", "domain") modparam("permissions", > >>"default_allow_file", > >>"/usr/local/etc/ser/allow.permissions") > >>modparam("permissions", "default_deny_file", > >>"/usr/local/etc/ser/deny.permissions") #our routing > >>logic route { if > >>(!mf_process_maxfwd_header("10")) { > >>sl_send_reply("483", "Too many hops"); > >>break; }; if (msg:len > max_len) { > >> sl_send_reply("513", "Message overflow"); > >> break; }; ###record > >>route#### if (method=="INVITE" && > >>client_nat_test("3")) { > >>record_route_preset("202.84.24.107:5060;nat=yes"); > >> } else if (method!="REGISTER") { > >>record_route(); }; ###call tear down > >>section### if (method=="BYE" || > >>method=="CANCEL") { > >>end_media_session(); }; ###accounting### > >> if ((!has_totag() && (method=="INVITE" || > >>method=="ACK")) || (method=="BYE")) { > >>setflag(1); }; ###loose route### if > >>(loose_route()) { if (has_totag() && > >>(method=="INVITE" || method=="ACK")) { > >> if (client_nat_test("3") || > >>search("^Route:.*;nat=yes")) { > >> setflag(6); > >>use_media_proxy(); }; > >> }; route(1); > >>break; }; ###call type processing### > >>if (uri!=myself) { route(1); > >> break; }; if (uri==myself) { > >> if (method=="CANCEL") { > >> route(3); break; > >> } else if (method=="INVITE") { > >> route(3); break; > >> } else if (method=="REGISTER") { > >> route(2); > >> break; }; > >>lookup("aliases"); if (uri!=myself) { > >> route(1); > >> break; }; if > >>(!lookup("location")) { > >>sl_send_reply("404", "User not found"); > >> break; }; }; > >>route(1); } ##Default message handler## route[1] { > >> t_on_reply("1"); if (!t_relay()) { > >> if (method=="INVITE" || method=="ACK") { > >> end_media_session(); > >> }; sl_reply_error(); }; } > >> ##Register message handler## route[2] { > >>sl_send_reply("100", "Trying"); if > >>(!search("^Contact:\ +\*") && client_nat_test("7")) { > >> setflag(6); > >>fix_nated_register(); force_rport(); > >> }; if > >>(!www_authorize("sip.philonline.com","subscriber")) { > >> > >>www_challenge("sip.philonline.com","0"); > >> break; }; if (!check_to()) { > >> sl_send_reply("401", "You are Unauthorized"); > >> break; }; > >>consume_credentials(); if (!save("location")) > >>{ sl_reply_error(); }; } > >>##INVITE message Handler## route[3] { > >>if (client_nat_test("3")) { > >>setflag(7); force_rport(); > >> fix_nated_contact(); }; if > >>(!search("To: .*(a)sip.philonline.com")) { if > >>(!proxy_authorize("","subscriber")) { > >>proxy_challenge("", "0"); break; > >> }; if (!check_from() && method=="INVITE") > >>{ sl_send_reply("403", "User > >>From=ID"); break; }; > >>}; lookup("aliases"); if > >>(uri!=myself) { route(1); > >> break; }; if (!lookup("location")) > >>{ sl_send_reply("404", "User not > >>found"); break; }; if > >>(method=="CANCEL") { route(1); > >> break; }; > >>consume_credentials(); if (isflagset(6) || > >>isflagset(7)) { use_media_proxy(); > >> }; route(1); } onreply_route[1] { > >> if (isflagset(6) || isflagset(7) && > >>(status=~"(180)|(183)|2[0-9][0-9]")) { > >> if (!search("^Content-Length:\ +0")) { > >> use_media_proxy(); }; > >>}; if (client_nat_test("1")) { > >> fix_nated_contact(); }; } Thanks, > >>--ryanRyan PagquilInfodyne Inc. > >>(www.philonline.com)Tel. (632)-6870715> > >>_______________________________________________ > >> > >> > >>>Serusers mailing list > >>>serusers(a)lists.iptel.org > >>>http://lists.iptel.org/mailman/listinfo/serusers > >>> > >>> > >>> > >> > >> > >>____________________________________________________ > >>Start your day with Yahoo! - make it your home page > >>http://www.yahoo.com/r/hs > >> > >> > >>_______________________________________________ > >>Serusers mailing list > >>serusers(a)lists.iptel.org > >>http://lists.iptel.org/mailman/listinfo/serusers > >> > >> > >> > > > > > >_______________________________________________ > >Serusers mailing list > >serusers(a)lists.iptel.org > >http://lists.iptel.org/mailman/listinfo/serusers > > > > > > > > > > > -- > Ryan Pagquil > Infodyne Inc. - PhilOnline.com > 3603 Antel Global Corporate Center > DoĂąa Julia Vargas Ave. > Ortigas Center Pasig City > Tel: 687-0715 > Web: www.philonline.com > > ----- Koniec preposlanej správy -----

1 0

[Serusers] Dchp or Static ip
by chinaj123 31 Aug '05

31 Aug '05

To All, Has anyone tried to setup SER using a DHCP assigned address behind a NAT? I just want to know what the pro's and the con's were. Thanks, Alfred ____________________________________________________ Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users September 2005