In the interest of sharing and promoting DNSSEC, I was recently stumped
on a problem where I noticed I could not call sip:test.echo@sip5060.net
without disabling the dnssec.so module in my kamailio.cfg. The last
time I had tried the sip5060 echo test was several months ago, and in
the intervening time, I had applied the numerous debian package updates.
Thus, I could not isolate the cause of the problem to one of the many
package updates such as kamailio 4.4.x, libval, my own DNSSEC dns
server, etc... My initial only clue was kamailio's syslog messages:
May 12 18:02:49 tensor /usr/sbin/kamailio[24128]: ERROR: tm [ut.h:296]:
uri2dst2(): ERROR: uri2dst: failed to resolve "sip5060.net"
:unresolvable A or AAAA request (-7)
May 12 18:02:49 tensor /usr/sbin/kamailio[24128]: ERROR: tm
[t_fwd.c:1712]: t_forward_nonack(): ERROR: t_forward_nonack: failure to
add branches
May 12 18:02:49 tensor /usr/sbin/kamailio[24128]: ERROR: sl
[sl_funcs.c:363]: sl_reply_error(): ERROR: sl_reply_error used:
Unresolvable destination (478/SL)
To summarize the problem, I found that kamailio's dnssec.so was failing
queries to domains that were not DNSSEC protected such as sip5060.net.
This behavior is a bug, since sip5060.net is in this case, provably not
participating in DNSSEC from the toplevel "net." zone [1].
The fix was to provide a default configuration file to libval, which was
somehow not included in Debian's libval15 package. I created the
following configuration from the default dnsval.conf in the source
distribution:
https://dnssec-tools.org/download/dnsval-2.2.tar.gzhttps://dnssec-tools.org/download/dnsval-2.2.tar.gz.asc
as well as their wiki:
https://www.dnssec-tools.org/wiki/index.php/Dnsval.conf
cat << 'EOF' > /etc/dnssec-tools/dnsval.conf
##################################
# Global Options
##################################
global-options
trust-oob-answers yes
# I'm running a DNSSEC nameserver locally,
# so 4 KiB queries to localhost should be OK:
edns0-size 4096
env-policy disable
app-policy disable
rec-fallback no
;
: trust-anchor
. DS 19036 8 2
49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
;
: zone-security-expectation
. validate
;
: provably-insecure-status
. trusted
;
: clock-skew
. 0
;
EOF
In summary: I find it odd that a default dnsval.conf was not included
with my system's normal installation of the "libval15:amd64" package,
version 2.2-4. After providing dnsval.conf, kamailio's dnssec.so was
happy again.
Side notes:
* To identify the directory for dnsval.conf, run
libval-config --dnsval-config
On Debian, libval-config is in the libval-dev pacakge, and this package
includes a man page for dnsval.conf as well.
* To test your libval and dnsval.conf, try
dt-validate -s
On Debian, dt-validate is in the libval-bin package.
- David
[1] -- Authenticated denial of existence:
https://tools.ietf.org/html/rfc5155https://tools.ietf.org/html/rfc7129
And for sip5060.net, there's an NSEC3 record in the top level net. zone
proving non-existance of sip5060.net DS records:
http://dnsviz.net/d/sip5060.net/dnssec/
Translation: sip5060.net provably not enabled DNSEC.
Hi,1) A generic subscriber is added to kamailio database:kamctl add pbx password2) Our UAC simulator (sipp) sends a call from a non subscribed username=8181111111@local_domain using a subscribed username for authentication (username=pbx, realm=local_domain) but kamailio does not authenticated the call:UAC =====> INVITE (From username=818111111@local_domain) ===> kamailioUAC <===== 407 <===== KamailioUAC =====> INVITE (AUTH username=pbx, realm=local_domain, nonce=???, response=????) =====> kamailio(kamailio route[AUTH} module does not authenticate it)The correct password is being sent to kamailio.Your assistance is greatly appreciatedThanks,AR
Hi,
1) A generic subscriber is added to kamailio database:kamctl add pbx password
2) Our UAC simulator (sipp) sends a call from a non subscribed username=8181111111@local_domain using a subscribed username for authentication (username=pbx, realm=local_domain) but kamailio does not authenticated the call:
UAC =====> INVITE (From username=818111111@local_domain) ===> kamailioUAC <===== 407 <===== KamailioUAC =====> INVITE (AUTH username=pbx, realm=local_domain, nonce=???, response=????) =====> kamailio(kamailio route[AUTH} module does not authenticate it)
The correct password is being sent to kamailio.
Your assistance is greatly appreciated
Thanks,AR
the problem is:
rtpengine was compiled with USE_SCTP,but kamailio that was installed via RPM is without this flag.
How to tell compiler NOT TO "
USE USE_SCTP" flag?
+++++++++++++++++++++++
Makefile.defs:SCTP ?= 0 - and it compiles without sctp.
Now kamailio.log:ERROR: rtpengine [rtpengine.c:1113]: child_init(): Name or service not knownERROR: <core> [sr_module.c:929]: init_mod_child(): Error while initializing module rtpengine (/usr/lib64/kamailio/modules/rtpengine.so)
View this message in context: Re: Another question about RTPengine module
Sent from the Users mailing list archive at Nabble.com.
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
[hidden email]
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
[hidden email]
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
If you reply to this email, your message will be added to the discussion below: http://sip-router.1086192.n5.nabble.com/Another-question-about-RTPengine-mo… To unsubscribe from Another question about RTPengine module, click here.
NAML
--
View this message in context: Re: Another question about RTPengine module
Sent from the Users mailing list archive at Nabble.com.
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
[hidden email]
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
[hidden email]
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
If you reply to this email, your message will be added to the discussion below: http://sip-router.1086192.n5.nabble.com/Another-question-about-RTPengine-mo… To unsubscribe from Another question about RTPengine module, click here.
NAML
--
View this message in context: Re: Another question about RTPengine module
Sent from the Users mailing list archive at Nabble.com.
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
On Sunday, May 15, 2016 6:21 PM, Dmitry <mbike2000ru(a)yahoo.com> wrote:
yes, I wrote that modparam are recognized.MODPARAM must be placed i the sae place where the RTPPROXY resides in the config.+++++++++++++++++++++++++++++++
Another question:kazoo kamailio KAMAILIO-V :4.3.5:kamailio -vversion: kamailio 4.3.5 (x86_64/linux)flags: STATS: Off, USE_TCP, USE_TLS, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MEM, SHM_MMAP, PKG_MALLOC, DBG_QM_MALLOC, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RESADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MBpoll method support: poll, epoll_lt, epoll_et, sigio_rt, select.id: unknowncompiled on 17:51:55 Mar 8 2016 with gcc 4.4.7
To add the RTPENGINE - I found Kamailio 4.3.5 sources https://www.kamailio.org/pub/kamailio/4.3.5/src/
When I start kamailio I get the following error:ERROR: <core> [sr_module.c:431]: version_control(): module compile flags mismatch for /usr/lib64/kamailio/modules/rtpengine.so
I did the following to add missing modules: #make include_modules="rtpengine topoh" cfg #make all cp /usr/src/kamailio-4.3.5/modules/rtpengine/rtpengine.so /usr/lib64/kamailio/modules/rtpengine.so
How to fix it?
The sources version seems to be the same
On Saturday, May 14, 2016 1:21 AM, ycaner <yasin.caner(a)netgsm.com.tr> wrote:
Hello;
i am not sure. i downloaded from git kamailio. add rtpengine instead of rtpproxy . it works fine. it is hard to solve problem without log.
Cheers.
try to run with kamailio -E -dd , maybe it gives information.
check kamailio.cfg is that rtpengine is loaded like loadmodule "rtpengine.so"
2016-05-13 11:35 tarihinde Dmitry [via SIP Router] yazdı:
one more question about rtpengine.
I installed Kamailio (centos 6.7) from source as You recommended make include_modules="db_mysql utils regex dnssec jansson lcr xmlrpc rtpengine " cfg
no rtpengine daemon (it is not installed) but the picture is the same: modparam ("rtpengine,....) kamailio -c loading modules under config path: /usr/local/lib64/kamailio/modules/ 0(19523) ERROR: <core> [modparam.c:150]: set_mod_param_regex(): No module matching <rtpengine> found
it means that it does not depend upon rtpengine daemon.
# single rtproxy
modparam("rtpengine", "rtpengine_sock", "udp:localhost:12221") I copied it from http://www.kamailio.net/docs/modules/4.2.x/modules/rtpengine.html
STRACE kamctl start -says nothing anout rtpengine
What else is it possible to do to find the cause of the problem?
On Friday, May 13, 2016 11:45 AM, ycaner <[hidden email]> wrote:
Hello;
rtpengine module isnt default. you need to add with "make include_modules". after make && make install , automatically it will be copied to lib/modules.
Cheers.
2016-05-13 09:42 tarihinde Dmitry [via SIP Router] yazdı:
And one more question on it:
If the Kamailio was installed from RPM and rtpengine.so is missing - May I add rtpengine.so the following way: make include_modules="rtpengine" cfg
make all and then copy rtpengine.so to /modules/ directory
Is this way (adding missing modules) is correct?
On Friday, May 13, 2016 11:25 AM, Dmitry <[hidden email]> wrote:
hello
I tested on Centos 6.7 as well as Ubuntu server - the problem is the same. RTPENGINE was installed both from dpkg and from Source (manual compilation)
So I need a clarification on it.
RTPENGINE daemon is started.
The Kamailio module itself is taken from /usr/src/kamailio, where the source was compiled.
mpath="/usr/lib/x86_64-linux-gnu/kamailio/modules/"
cp /usr/src/kamailio/modules/rtpengine/rtpengine.so /usr/lib/x86_64-linux-gnu/kamailio/modules/rtpengine.so
sudo /etc/init.d/kamailio restart | grep rtp
ERROR: <core> [modparam.c:163]: set_mod_param_regex(): set_mod_param_regex: No module matching <rtpengine> found
version: kamailio 5.0.0-dev4 (x86_64/linux)
Any help is appreciated.
On Thursday, May 12, 2016 6:04 PM, Dmitry <[hidden email]> wrote:
Hi,
I installed Kamailio from GIT. I did make include_modules="db_mysql utils regex dnssec jansson lcr xmlrpc rtpengine " cfg
Actually loadmodule "rtpengine.so" does not affect kamailio start/restart. modparam("rtpengine", "rtpengine_sock", "udp:localhost:12221") causes this failure: [modparam.c:150]: set_mod_param_regex(): No module matching <rtpengine> found
On Thursday, May 12, 2016 12:26 PM, ycaner <[hidden email]> wrote:
Hello;
on bash , kamailio -V gives Version , kamailio -c gives debug result. you can ask from here https://groups.google.com/forum/#!forum/2600hz-dev for kazoo rpm. if there is something wrong , they will fix it.
you can install from source code from here => https://www.kamailio.org/w/
and "make include_modules="db_mysql utils regex dnssec jansson lcr xmlrpc rtpengine " cfg " in kamailio folder before 'make all' , helps you add modules. if there is a dependecies is missing , gives error.
Cheers.
2016-05-11 19:51 tarihinde Dmitry [via SIP Router] yazdı:
I installed Kamailio : yum install -y kazoo-kamailio
https://2600hz.atlassian.net/wiki/display/Dedicated/via+RPM
git clone https://github.com/sipwise/rtpengine.git
the latest version of rtpengine and I do not know how to view the version of Kazoo-Kamailio
On Wednesday, May 11, 2016 6:31 PM, ycaner <[hidden email]> wrote:
hello ;
maybe some devel are missing. which version using?i will try.
cheers.
--
View this message in context: http://sip-router.1086192.n5.nabble.com/Another-question-about-RTPengine-mo…
Sent from the Users mailing list archive at Nabble.com.
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
[hidden email]
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
[hidden email]
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
If you reply to this email, your message will be added to the discussion below: http://sip-router.1086192.n5.nabble.com/Another-question-about-RTPengine-mo… To unsubscribe from Another question about RTPengine module, click here.
NAML
--
I will clarify the question in my previous post.I installed Kamailio from 2600hz repo via yum (it is for kazoo).
But when cp /usr/src/kamailio/modules/rtpengine/rtpengine.so /usr/lib64/kamailio/modules/rtpengine.so
the kamailio does not see this moduleNo module matching <rtpengine> found
Is there something like modules.list (it is used when I compile Kamailio manually) when the kamailio was installed via RPM?
Hi,
I am trying to use Kamailio with WebTRC to make and receive calls from the browser.
Using the rpms from the Kamailio repository I have installed and tried the websocket config example from the source code. Using the first debug example from here https://www.kamailio.org/wiki/tutorials/tls/testing-and-debugginga I can see that my TLS wss setup is working. But I try JSCommunicator and sipML5 I get no success, they fail to register in Kamailio. From the logs I can see that something goes wrong with TLS. Doing some research, it is more like that several products are currently broken and not working...
So can anyone help me (share a config and tricky) or point to a document that would help me to get it running?
Thanks,
Moacir
Hello all!
After some time I was able to get this working here, and now I am coming
back to share my configuration with you guys (in case someone needs to get
this working).
Here is what we have done:
route[REGISTRAR] {
if (is_method("REGISTER"))
{
if(isflagset(FLT_NATS))
{
setbflag(FLB_NATB);
# uncomment next line to do SIP NAT pinging
## setbflag(FLB_NATSIPPING);
}
xlog("L_INFO", "checking $tu registered with
User-Agent:$hdr(User-Agent)\n");
if(reg_fetch_contacts("location", "$tu", "caller"))
{
xlog("L_INFO", "$(ulc(caller=>count)) records found
for $tu\n");
$var(i) = 0;
while($var(i) < $(ulc(caller=>count)))
{
xlog("L_INFO", "record $var(i) with
ruid:$(ulc(caller=>ruid)[$var(i)]) -
User-Agent:$(ulc(caller=>user_agent)[$var(i)])");
if
($hdr(User-Agent)=~$(ulc(caller=>user_agent)[$var(i)]))
{
$var(ruid) =
$(ulc(caller=>ruid)[$var(i)]);
xlog("L_INFO", "unregistering $tu
ruid:$var(ruid)");
unregister("location", "$tu",
"$var(ruid)");
}
$var(i) = $var(i) + 1;
}
}
if (!save("location", "0x00"))
sl_reply_error();
exit;
}
}
There are some logs over there because we used it to see what was going on
while testing the configurations.
With this we can get just one register per User-Agent.
And again, thanks Olle for your help in this problem
*Bruno Emer*
Mobile: +55 11 96540-0044
email: brunoemer(a)gmail.com
<https://www.facebook.com/bruno.emer.5>
<https://www.linkedin.com/profile/view?id=86461237&trk=spm_pic>
<https://twitter.com/brunoemer_>
<https://www.flickr.com/photos/122070309@N03/>
<http://google.com/+BrunoEmer> <http://instagram.com/brunoemer_>
2016-04-01 17:37 GMT-03:00 Bruno Emer <brunoemer(a)gmail.com>:
> Sure it is!
>
> This is exactly what I was looking for! Actually I wasn't able to see that
> there was a way to perform this action!
>
> Thanks for your help, Olle!
>
> I will try to create this, and when I have it done, I will post my script
> here, so if someone else need the same problem I can help.
>
> Now, I have just one more question about my scenario: when I register a
> user, is there a way to create something like a "custom field" on the
> location? To explain better: If possible, I can add something like a custom
> header that says if the user is registered from a phone device or the web
> interface, then I can perform the loop and replace only the oldest contact
> using that device...
>
>
>
> *Bruno Emer*
>
> Mobile: +55 11 96540-0044
> email: brunoemer(a)gmail.com
>
> 2016-04-01 17:18 GMT-03:00 Bruno Emer <brunoemer(a)gmail.com>:
>
>> This is my problem... I want to have 2 contacts for AOR, and not only
>> one.
>>
>> When the 3rd arrives, it must remove the oldest and continue with 2...
>>
>> *If I am using the 0x04 parameter, it will save just one contact, and the
>> user will not be able to get the Invite both, in the mobile device and web
>> interface.*
>>
>> *Bruno Emer*
>>
>> Mobile: +55 11 96540-0044
>> email: brunoemer(a)gmail.com
>> <https://www.facebook.com/bruno.emer.5>
>> <https://www.linkedin.com/profile/view?id=86461237&trk=spm_pic>
>> <https://twitter.com/brunoemer_>
>> <https://www.flickr.com/photos/122070309@N03/>
>> <http://google.com/+BrunoEmer> <http://instagram.com/brunoemer_>
>>
>> 2016-04-01 17:07 GMT-03:00 Bruno Emer <brunoemer(a)gmail.com>:
>>
>>> Hello, *Olle!*
>>>
>>> *Thanks for your help in this case, and don't worry about the time
>>> (actually I wasn't even expecting to get an answer today).*
>>>
>>>
>>> *I know the max_contacts parameter. But the problem is that if I set the
>>> max_contacts to 2, when the user tries to register again, he gets an error
>>> message 503. The point is that I want to get the user registered, and
>>> replace the oldest location entry for the newest one.*
>>>
>>>
>>>
>>> *Bruno Emer*
>>>
>>> Mobile: +55 11 96540-0044
>>> email: brunoemer(a)gmail.com
>>>
>>> 2016-04-01 16:31 GMT-03:00 Bruno Emer <brunoemer(a)gmail.com>:
>>>
>>>> Hello all.
>>>>
>>>> I have problem here and I tried to find a solution and search over
>>>> internet, but without success.
>>>>
>>>> My scenario is the following: I have an application that must be
>>>> registered in Kamailio when a user logs in the web interface, so he can get
>>>> calls (something like a web softphone using webrtc). At this point, we are
>>>> OK, and everything is working fine.
>>>>
>>>> To get these register functions I am using the parameter
>>>> "save("location", "0x04")" as described in the REGISTRAR module
>>>> documentation, so if a user logs in another web browser or computer, only
>>>> the last one will continue registered and all calls will be forwarded to
>>>> him.
>>>>
>>>> The point is that now we are creating a phone app that will do almost
>>>> the same thing as the web interface, allowing users to receive calls using
>>>> the mobile device, and here is my problem: I want to allow my users to be
>>>> registered on two devices at the same time, but if a user logs into another
>>>> device, I don't want to reply with a 503. I want to allow the user to
>>>> register again, deregistering the oldest contact.
>>>>
>>>> I saw that there is a module named "ims_usrloc_scscf" and on its
>>>> description it says "implemented overwrite oldest contact behaviour",
>>>> but I couldn't find any documentation about it.
>>>>
>>>> So, is there a way to get this working today?
>>>>
>>>>
>>>> *Bruno Emer*
>>>>
>>>> Mobile: +55 11 96540-0044
>>>> email: brunoemer(a)gmail.com
>>>>
>>>
>>>
>>
>
counter to the docs for nathelper fix_nated_sdp the config parser rejects any pseudovariables in the second parameter claiming they need to be constant.
Does anyone know another way to change the "c=" line in an SDP?
Or do I have to patch the nathelper module to include a free_fixup_function for the fix_nated_sdp stuff?
This is on kamailio 4.2
Thanks,
Kevin
Hello All,
Kamailio instance just crashed with the following logs
May 13 06:05:34 P172 /usr/local/kamailio/sbin/kamailio[12675]: INFO: <core>
[main.c:809]: sig_usr(): signal 15 received
May 13 06:05:34 P172 /usr/local/kamailio/sbin/kamailio[12674]: INFO: <core>
[main.c:809]: sig_usr(): signal 15 received
May 13 06:05:34 P172 /usr/local/kamailio/sbin/kamailio[12682]: INFO: <core>
[main.c:809]: sig_usr(): signal 15 received
May 13 06:05:34 P172 /usr/local/kamailio/sbin/kamailio[12684]: INFO: <core>
[main.c:809]: sig_usr(): signal 15 received
May 13 06:05:34 P172 /usr/local/kamailio/sbin/kamailio[12667]: INFO: <core>
[mem/f_malloc.c:598]: fm_free(): freeing a free fragment
(0x7f23ff39cb88/0x7f23ff39cbd0) - ignore
to add i have collected a gdb backtrace as below,
root@IP:/home/corefiles# gdb /usr/local/kamailio/sbin/kamailio
/home/c/core.kamailio.sig11.12671
chetan/ corefiles/
root@P172:/home/corefiles# gdb /usr/local/kamailio/sbin/kamailio
/home/c/core.kamailio.sig11.12671
chetan/ corefiles/
root@P172:/home/corefiles# gdb /usr/local/kamailio/sbin/kamailio
/home/corefiles/core.kamailio.sig11.12671
The version of Kamilio used by me is as below;.
version: *kamailio 4.4.1 (x86_64/linux) 90be8b*
flags: STATS: Off, USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS,
DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MEM, SHM_MMAP, PKG_MALLOC,
Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX,
FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR,
USE_DST_BLACKLIST, HAVE_RESOLV_RES
ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16,
MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB
poll method support: poll, epoll_lt, epoll_et, sigio_rt, select.
id: 90be8b
Thanking You,
Sunil More
Ph : 9503338275
