Hi,
Have just installed kamailio 4.3.4 and for some reason not getting cfgtraces from debugger. I've picked the default kamailio-advanced.cfg, and did no changes other than setting #!define WITH_DEBUG.
Any suggestions on what could be causing this to happen?
Thanks!
Joao Alves
This message and the information contained herein is proprietary and confidential and subject to the Amdocs policy statement,
you may review at http://www.amdocs.com/email_disclaimer.asp
Hi,
Have just installed kamailio 4.3.4 and for some reason not getting cfgtraces from debugger. I've picked the default kamailio-advanced.cfg, and did no changes other than setting #!define WITH_DEBUG.
Any suggestions on what could be causing this to happen?
Thanks!
Joao Alves
This message and the information contained herein is proprietary and confidential and subject to the Amdocs policy statement,
you may review at http://www.amdocs.com/email_disclaimer.asp
Hello,
during the past few days I made some updates related to the security
aspects of kamailio.org services.
Two are relevant for the community.
1) First, kamailio.org uses now a TLS certificate signed by
letsencrypt.org, a free trusted CA backed up by Mozilla and other
internet companies, so browsing via HTTPS should no longer issue any
warning of untrusted certificate (previously we used a CACert.org
certificate which was not trusted automatically by browsers).
Wiki and mailing lists portals use the letsencrypt certificate as well,
so is no reason not to browse all kamailio.org and lists.sip-router.org
pages only via HTTPS. Perhaps in the near future we will try to enable
redirect of HTTP to HTTPS at least for the main page and login pages for
wiki, mailing lists and other places that require sensitive data.
Now SSLLabs test ranks https://kamailio.org with grade A:
* https://www.ssllabs.com/ssltest/analyze.html?d=kamailio.org&latest
As a side note, for those that haven't noticed it, for quite some time
kamailio.org is available also over IPv6.
2) Second, emails forwarded by kamailio.org and lists.sip-router.org are
having now a DKIM signature. Also, there are SPF records in DNS for
these domains. Hopefully, those two will help getting the emails to be
allowed by various spam filters out there, as their legit origin can be
checked.
If you check the sources of an email messages and the email server of
receiving party is doing DKIM/SPF checks, you should see some headers
like next (taken from an email I received to my gmail account from
sr-users mailing list):
"""
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of sr-users-bounces(a)lists.sip-router.org designates 193.22.119.66 as permitted sender) smtp.mailfrom=sr-users-bounces(a)lists.sip-router.org;
dkim=pass header.i=(a)lists.sip-router.org
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.sip-router.org; s=20151206;
h=Sender:Content-Type:List-Subscribe:List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id:Reply-To:Subject:MIME-Version:Message-ID:To:From:Date; bh=lGjvCZYcxBHUHaJDnut1j2YTyPsXTnXHzUb0CgcDc1Q=;
b=DlD+MKoEqyISB5Ba775t3zg70FC6ouC+tEo7j5zv4dn2Dhm4pWqkQXSfU4Kp1NqW1ZRYFC/mpg/7LEcGW2FlDL9J0FpUg1VjNmN7D1wvtW08hBBw91tsXImu9yf7KZjg/p4IbXu6vznldubrSxweIaV3q/xbrLgaqP5Dsrvs/9A=;
"""
Kamailio is not enforcing any of those policies on received email
messages, so sending to the lists should not be affected.
Should anyone discover problems when browsing the web portals or notices
issues with emails from our mailing lists, report them to sr-dev mailing
list.
Also, if anyone has more hints on increasing the security/privacy for
the web server and email systems we run for kamailio.org, do not
hesitate to provide us suggestions.
Cheers,
Daniel
--
Daniel-Constantin Mierla
http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda
Book: SIP Routing With Kamailio - http://www.asipto.comhttp://miconda.eu
I am trying to enable RTPPROXY on debian, but it seems RTPProxy is ignoring
my arguments...
So, I am launching RTPPROXY using command:
rtpproxy -l _MY_PUBLIC_IP_ -s udp:127.0.0.1 7722 -p /var/run/rtpproxy.pid
-R -a -P -r /tmp/rtppath -S /tmp/rtpspool -u rtpproxy rtpproxy
Also tried with:
rtpproxy -l _MY_PUBLIC_IP_ -s udp:127.0.0.1 7722 -u rtpproxy rtpproxy
And when I try to start Kamailio service I am getting error:
0(10562) ERROR: rtpproxy [rtpproxy.c:1681]: send_rtpp_command(): can't send
command to a RTP proxy
0(10562) ERROR: rtpproxy [rtpproxy.c:1716]: send_rtpp_command(): proxy does
not respond, disable it
0(10562) WARNING: rtpproxy [rtpproxy.c:1573]: rtpp_test(): can't get
version of the RTP proxy
0(10562) WARNING: rtpproxy [rtpproxy.c:1610]: rtpp_test(): support for RTP
proxy has been disabled temporarily
p.s. I have checked RTPPROXY, and I am sure that it is launched
ps aux | grep rtpproxy
returned me:
root 2770 0.0 0.0 19392 480 ? Ssl 04:59 0:00 /usr/bin/rtpproxy -l
_MY_PUBLIC_IP_ -s udp:127.0.0.1 7722 -p /var/run/rtpproxy.pid -R -a -P -r
/tmp/rtppath -S /tmp/rtpspool -u rtpproxy rtpproxy
root 2775 0.0 0.0 11740 932 pts/1 S+ 04:59 0:00 grep --color=auto rtp
Which says everything is ok and rtpproxy is running with arguments that I
declared
But the problem is, When I check it with:
netstat -tulpn | grep rtpproxy
I am receiving:
udp 0 0 127.0.0.1:22222 0.0.0.0:* 2853/rtpproxy
As you can see rtpproxy is listening on port 22222 and completely ignoring
arguments I declared :(
Where and What am I doing wrong?
Sorry for my English and Thanks in advance...
--
Javokhir M.M.
________________________________________________
Disclaimer: The information in this e-mail is confidential. If you are not
addressed recipient then please return and delete this e-mail from your
system. Unauthorised use of or disclose the contents of this e-mail may be
unlawful.
Hi,
I'm using dlg_set_property(ka-src) and dlg_set_property(ka-dst) to keep
alive my clients. In case of a network change the client does a Re-Invite
with the new contact address and kamailio does keep-alives to the new
address properly as the fix reported here:
https://github.com/kamailio/kamailio/issues/273
The problem happens when the Re-Invite transaction on the client side is
not complete and kamailio happens to send an OPTIONS keep-alive at that
same time, the client fails to send back a 200 OK, because the client
itself is trying to gain access on the new network.
So as a work-around I thought would it be possible to end the dialog on
missing at least 3 responses and not killing the dialog if one response is
missed. Can it be a configurable parameter in the dialog module or
something on those lines. Just a suggestion !!
Thanks.
- Jayesh
Hi folk!
Have a strange issue, and cannot understand what is wrong.
Test scheme UA(sip) -> INVITE -> Kamailio
The transport protocol used is TCP.
The issue is reproduced randomly, in case of wrong INVITE, Kamailio does not
parse Method from R-URI and answer "400 CSeq method does not match request
method".
The log with debug level 3 for such INVITE:
https://gist.github.com/vance-od/c4e1c783adba02d80c58
my first confuse is why in line 2 different number of bytes: "read= 1025
bytes, parsed=1037"
the second is in line 12: Method value is empty
after this everithing brokes and kamailio answers 400.
Just another call: the same setup (same device, kamailio instance etc), same
conditions, just another call. Everything is OK, similar part for good call:
https://gist.github.com/vance-od/01b5dff2d81f0878cff4
All my attempts to find the diff between to messages goes to nothing, the 2
INVITEs looks similar, the wireshark analyse of TCP level - also had no
result (all is similar)
The issue happens only with one of our devices and only in case of TCP/TLS
(UDP constantly ok, this is why I am assured the problem is in device, but I
need proofs)
version: kamailio 4.2.5 (i386/linux)
flags: STATS: Off, EXTRA_DEBUG, USE_TCP, USE_TLS, TLS_HOOKS, USE_RAW_SOCKS,
DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MEM, SHM_MMAP, PKG_MALLOC,
F_MALLOC, DBG_F_MALLOC, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE,
USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RES
ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16,
MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB
poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
will appreciate any help or idea ,with such a mess!
Cheers!
--
View this message in context: http://sip-router.1086192.n5.nabble.com/random-incorrect-method-parsing-tp1…
Sent from the Users mailing list archive at Nabble.com.
Hi,
We are using Kamailio 4.2.3 and we have following query related to
Performance tests.
We see that kamailio wiki page has performance test results plotted for the
Open SERV1.2.0. Would like to know is similar test are done for the later
versions of kamailio till 4.2.3 ? If Yes please provide the link.
Regards,
Prashanth
Hello Everyone,
Looking for some design suggestion.
I am trying achieve routing based on domain.tld. I thought use drouting, but not sure if it suitable for this task.
Example:
Kamailio Server 1
|
|__________________ PBX Group 1 domain1.tld
|
|____ PBX Server 1
|
|____PBX Server 2
|__________________ PBX Group 2 domain2.tld
|
|____ PBX Server 1
|
|____PBX Server 2
and so on.
Slava.
Hi,
I'm new to Kamailio and I'm trying to understand the architectural options
and levels of redundancy that can be attained with Kamailio.
In my particular scenario I would be using Kamailio as proxy server (no
user registrations) to handle global prefix routing between 3 major
regions; Americas, EMEA, and Aisa-Pacific. The idea would be to create a
pool of Kamailio servers in each region. The pool would consist of two HA
pairs. The HA pairs would be placed in two separate datacenter, and
sessions would be distributed between the datacenter. In the event the
Kamailio server failed it would have a local backup in the datacneter. In
the event a datacenter failed, there would be an alternate datacenter
available in the region.
Can the LCR feature/module share a database, so that each kamailio server
in the region have the same call routing information?
Is there a feature or a way to automate the configuration of several
Kamailio servers, when you want them to have the same routing
logic/configuration. Is there a module, feature or API that would allow
Kamailio to fetch a config, or possibly push the config via an API when the
application is initialized.
What is the best method for establishing a 1:1 back up with Kamailio? If we
use TCP and route-via headers, the SIP session would be pinned through the
active proxy server. Is there away to provide stateful failover so that the
session state is maintained between primary and the backup server?
Any pointers or recommendations would be highly appreciated.
Regards,
Frank