sr-users

sr-users@lists.kamailio.org

25 participants
37536 discussions

[Users] Multiple networks source address
by T.R. Missner 10 Jan '07

10 Jan '07

Hello, I ran into a seemingly strange issue using openser to proxy an invite from the public internet to a private ipsec tunnel on my network. The problem appears to be caused by the fact that the packet is sent out to on the correct interface ( eth1 in my case ) but still is using the source address of et0 in the ip header. This is causing my ipsec tunnel to ignore the packet. Is there anyway to control the source addr in the IP header? Using a simple python script to send a upd packet across the same path I have verified this is not a tunnel issue. Example et0: 4.X.X.229 packet arrives on this interface eth1: 10.X.X.13 packet is sent out this interface RURI is re-written and t_relay is used to send the packet to destination: 10.X.X.115 Here is a partially redacted packet as captured by tethereal: Frame 1 (982 bytes on wire, 982 bytes captured) Arrival Time: Jan 2, 2007 16:49:35.536412000 [Time delta from previous packet: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Packet Length: 982 bytes Capture Length: 982 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:sip:sdp] Ethernet II, Src: DellComp_f6:27:19 (00:06:5b:f6:27:19), Dst: DellComp_ec:8d:a3 (00:06:5b:ec:8d:a3) Destination: DellComp_ec:8d:a3 (00:06:5b:ec:8d:a3) Address: DellComp_ec:8d:a3 (00:06:5b:ec:8d:a3) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: DellComp_f6:27:19 (00:06:5b:f6:27:19) Address: DellComp_f6:27:19 (00:06:5b:f6:27:19) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 4.X.X.229 (4.X.X.229), Dst: 10.X.X.108 (10.X.X.108) ------> should source from 10.X.X.13 not 4.X.X.229 Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 968 Identification: 0x0076 (118) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x1dfe [correct] [Good: True] [Bad : False] Source: 4.X.X.229 (4.X.X.229) Destination: 10.X.X.108 (10.X.X.108) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 6060 (6060) Source port: 5060 (5060) Destination port: 6060 (6060) Length: 948 Checksum: 0x1c67 [incorrect, should be 0x222a] Session Initiation Protocol Request-Line: INVITE sip:+1720560XXXX@10.X.X.108:6060 SIP/2.0 Method: INVITE [Resent Packet: False] Message Header Record-Route: <sip:4.X.X.229;lr;ftag=as0473b81f> Via: SIP/2.0/UDP 4.X.X.229;branch=z9hG4bK7a42.e0b9bac5.0 Transport: UDP Sent-by Address: 4.X.X.229 ..... Any clues on how to fix this problem? Thanks, T.R.

4 4

Re: [Serusers] Please help with LCR
by Steve Blair 10 Jan '07

10 Jan '07

Great! The only other advice I'd give you is to think about the gateway list, from matching and prefix. I ran into a few odd cases after deploying LCR where I had to define additional rules to handle URIs with slightly different syntax. -Steve Arun Kumar wrote: > Hi Steve, > > thanks very much your code is working fine now ser is able to use my > both gw and able to send calls on both gw if first fail then it will > send to other. > > thanks very much for helping me. > > thanks > arun > > On 1/10/07, *Steve Blair* <blairs(a)isc.upenn.edu > <mailto:blairs@isc.upenn.edu>> wrote: > > > Arun: > > This depends a little on your configuration. Generally speaking the > !load_gws and !next_gw would be in route block 0. You will most likely > want to do any per-call checks or rewrites before determining which > gateway should receive the call. The failure_route can be inserted > after > your route blocks. > > -Steve > > Arun Kumar wrote: > > Hi, > > > > thanks, One more thing can you please guide me where do I've to > place > > this code in my ser.cfg. > > > > thanks > > > > arun > > > > On 1/10/07, *Steve Blair * <blairs(a)isc.upenn.edu > <mailto:blairs@isc.upenn.edu> > > <mailto: blairs(a)isc.upenn.edu <mailto:blairs@isc.upenn.edu>>> wrote: > > > > > > Arun: > > > > I would try something like the following: > > > > if (!load_gws()) { > > sl_send_reply("500", "Server Internal Error - > Cannot load > > gateways"); > > break; > > } else { > > xlog("L_INFO", "\n[SER]: - [$Tf] Method: <$rm> > R-uri: <$ru> > > From: <$fu> > > To <$tu> : Successfully Loaded Gateway List\n"); > > }; > > > > ...... > > > > if (!next_gw()) { > > t_reply("503", "Service not available - No more > gateways"); > > break; > > } else { > > t_on_failure("2"); <--- This will be where you > load the > > next > > gateway > > t_relay(); > > break; > > }; > > > > failure_route[2] { > > > > if (!next_gw()) { > > xlog("L_CRIT","No more gateways for <$tu>\n"); > > t_reply("503", "Service not available - No more > gateways"); > > break; > > } else { > > t_on_failure("2"); > > t_relay(); > > break; > > } > > } > > > > -Steve > > > > Arun Kumar wrote: > > > Hi > > > > > > thanks for your prompt reply but I've already checked and I'm > > not able > > > to make my lcr working by seeing these two pages I got > this conf but > > > > > > This config is sending the call to my first gateway but > when My > > first > > > gateway is down its not sending the calls to other > gateways. Plese > > > help me to make this working. Here is my config file. > > > > > > ------------------------ > > > debug=3 > > > fork=no > > > log_stderror=yes > > > > > > listen= 192.168.2.210 <http://192.168.2.210> > <http://192.168.2.210> > > <http://192.168.2.210/> # INSERT YOUR IP > > > ADDRESS HERE > > > port=5060 > > > children=4 > > > > > > dns=no > > > rev_dns=no > > > fifo="/tmp/ser_fifo" > > > fifo_db_url="mysql://ser:pass@localhost/ser" > > > > > > loadmodule "/usr/local/lib/ser/modules > > > /mysql.so" > > > loadmodule "/usr/local/lib/ser/modules/sl.so" > > > loadmodule "/usr/local/lib/ser/modules/tm.so" > > > loadmodule "/usr/local/lib/ser/modules/rr.so" > > > loadmodule "/usr/local/lib/ser/modules/maxfwd.so" > > > loadmodule "/usr/local/lib/ser/modules/usrloc.so" > > > loadmodule "/usr/local/lib/ser/modules/registrar.so" > > > loadmodule "/usr/local/lib/ser/modules/auth.so" > > > loadmodule "/usr/local/lib/ser/modules/auth_db.so" > > > loadmodule "/usr/local/lib/ser/modules/uri.so" > > > loadmodule "/usr/local/lib/ser/modules/uri_db.so" > > > loadmodule "/usr/local/lib/ser/modules/domain.so" > > > loadmodule "/usr/local/lib/ser/modules/nathelper.so" > > > loadmodule "/usr/local/lib/ser/modules/avpops.so" > > > loadmodule "/usr/local/lib/ser/modules/textops.so" > > > loadmodule "/usr/local/lib/ser/modules/mediaproxy.so" > > > loadmodule "/usr/local/lib/ser/modules/permissions.so" > > > loadmodule "/usr/local/lib/ser/modules/acc.so" > > > loadmodule "/usr/local/lib/ser/modules/auth_radius.so" > > > loadmodule "/usr/local/lib/ser/modules/lcr.so" > > > > > > > > > modparam("auth_db|permissions|uri_db|usrloc|domain", > "db_url", " > > > mysql://ser:pass@localhost/ser") > > > modparam("auth_db", "calculate_ha1", 1) > > > modparam("auth_db", "password_column", "password") > > > modparam("nathelper", "rtpproxy_disable", 1) > > > modparam("nathelper", "natping_interval", 0) > > > > > > modparam("mediaproxy","natping_interval", 30) > > > modparam("mediaproxy","mediaproxy_socket", > > "/var/run/mediaproxy.sock") > > > # > > > > > > modparam("mediaproxy","sip_asymmetrics","/usr/local/etc/ser/sip-clients") > > > > # > > > > > > modparam("mediaproxy","rtp_asymmetrics","/usr/local/etc/ser/rtp-clients") > > > > > > > > modparam("usrloc", "db_mode", 2) > > > > > > modparam("registrar", "nat_flag", 6) > > > > > > modparam("rr", "enable_full_lr", 1) > > > > > > modparam("tm", "fr_inv_timer", 120) > > > modparam("tm", "fr_inv_timer_avp", "inv_timeout") > > > > > > modparam("permissions", "db_mode", 1) > > > modparam("permissions", "trusted_table", "trusted") > > > > > > modparam("lcr","db_url", "mysql://ser:pass@localhost/ser") > > > modparam("lcr","gw_table","gw") > > > modparam("lcr","gw_name_column","gw_name") > > > modparam("lcr","ip_addr_column","ip_addr") > > > modparam("lcr","port_column","port") > > > modparam("lcr","grp_id_column","grp_id") > > > modparam("lcr","lcr_table","lcr") > > > modparam("lcr","prefix_column","prefix") > > > modparam("lcr","from_uri_column","from_uri") > > > modparam("lcr","priority_column","priority") > > > modparam("lcr","contact_avp","1401") > > > modparam("lcr","fr_inv_timer_avp","fr_inv_timer_avp") > > > modparam("lcr","fr_inv_timer",90) > > > modparam("lcr","fr_inv_timer_next",60) > > > # ------ Account and Radius modules-------------- > > > modparam("acc", "db_url", " mysql://ser:pass@localhost/ser") > > > > > > modparam("acc","log_level",1) > > > modparam("acc","log_flag",1) > > > modparam("acc", "db_flag", 1) > > > > > > modparam("acc","radius_flag",1) > > > modparam("acc","service_type",15) > > > > > > #modparam("acc","radius_config","/usr/local/etc/radiusclient-ng/radiusclient.conf") > > > > > > > > > > route { > > > > > > # > > > ----------------------------------------------------------------- > > > # Sanity Check Section > > > # > > > ----------------------------------------------------------------- > > > if (!mf_process_maxfwd_header("10")) { > > > sl_send_reply("483", "Too Many Hops"); > > > break; > > > }; > > > > > > if (msg:len > max_len) { > > > sl_send_reply("513", "Message Overflow"); > > > break; > > > }; > > > > > > # > > > ----------------------------------------------------------------- > > > # Record Route Section > > > # > > > ----------------------------------------------------------------- > > > if (method=="INVITE" && client_nat_test("3")) { # > setflag(1); > > > # INSERT YOUR IP ADDRESS HERE > > > record_route_preset(" 192.168.2.210:5060 > <http://192.168.2.210:5060> > > <http://192.168.2.210:5060> > > > <http://192.168.2.210:5060/>;nat=yes"); > > > } else if (method!="REGISTER") { > > > record_route(); > > > }; > > > # > > > ----------------------------------------------------------------- > > > # Call Tear Down Section > > > # > > > ----------------------------------------------------------------- > > > if (method=="BYE" || method=="CANCEL") { setflag(1); > > > end_media_session(); > > > }; > > > > > > # > > > ----------------------------------------------------------------- > > > # Loose Route Section > > > # > > > ----------------------------------------------------------------- > > > if (loose_route()) { > > > > > > if ((method=="INVITE" || method=="REFER") && > !has_totag()) { > > > sl_send_reply("403", "Forbidden Cant cross 1st > bridge"); > > > break; > > > }; > > > > > > if (method=="INVITE") { > > > > > > if (!allow_trusted()) { > > > > > > if (!proxy_authorize("","subscriber")) { > > > proxy_challenge("","0"); > > > break; > > > } else if (!check_from()) { > > > sl_send_reply("403", "Use From=ID"); > > > break; > > > }; > > > > > > consume_credentials(); > > > }; > > > > > > if > (client_nat_test("3")||search("^Route:.*;nat=yes")){ > > > setflag(6); > > > use_media_proxy(); > > > }; > > > }; > > > > > > route(1); > > > break; > > > }; > > > # > > > ----------------------------------------------------------------- > > > # Call Type Processing Section > > > # > > > ----------------------------------------------------------------- > > > if (!is_uri_host_local()) { > > > if (is_from_local() || allow_trusted()) { > > > sl_send_reply("404", "I am trusted host, "); > > > route(4); > > > route(1); > > > } else { > > > sl_send_reply("403", "Forbidden, I am here"); > > > }; > > > break; > > > }; > > > > > > if (method=="ACK") { setflag(1); > > > route(1); > > > break; > > > } if (method=="CANCEL") { setflag(1); > > > route(1); > > > break; > > > } else if (method=="INVITE") { setflag(1); > > > # sl_send_reply("410", "I am sending your call, "); > > > route(3); > > > break; > > > } else if (method=="REGISTER") { > > > route(2); > > > break; > > > }; > > > > > > lookup("aliases"); > > > if (!is_uri_host_local()) { > > > route(4); > > > route(1); > > > break; > > > }; > > > > > > if (!lookup("location")) { > > > sl_send_reply("404", "User Not Found"); > > > break; > > > }; > > > > > > route(1); > > > } > > > > > > route[1] { > > > > > > # > > > ----------------------------------------------------------------- > > > # Default Message Handler > > > # > > > ----------------------------------------------------------------- > > > > > > t_on_reply("1"); > > > > > > if (!t_relay()) { > > > > > > if (method=="INVITE" || method=="ACK") { setflag(1); > > > end_media_session(); > > > }; > > > > > > sl_reply_error(); > > > }; > > > } > > > > > > route[2] { > > > > > > # > > > ----------------------------------------------------------------- > > > # REGISTER Message Handler > > > # > > > ----------------------------------------------------------------- > > > > > > sl_send_reply("100", "Trying"); > > > > > > if (!search("^Contact:[ ]*\*") && client_nat_test("7")) { > > > setflag(6); > > > fix_nated_register(); > > > force_rport(); > > > }; > > > > > > if (!www_authorize("","subscriber")) { > > > www_challenge("","0"); > > > break; > > > }; > > > if (!check_to()) { > > > sl_send_reply("401", "Unauthorized"); > > > break; > > > }; > > > > > > consume_credentials(); > > > > > > if (!save("location")) { > > > sl_reply_error(); > > > }; > > > } > > > > > > route[3] { > > > > > > # > > > ----------------------------------------------------------------- > > > # INVITE Message Handler > > > # > > > ----------------------------------------------------------------- > > > > > > if (client_nat_test("3")) { > > > setflag(7); > > > force_rport(); > > > fix_nated_contact(); > > > }; > > > > > > if (!allow_trusted()) { > > > > > > if (!proxy_authorize("","subscriber")) { > > > proxy_challenge("","0"); > > > break; > > > } else if (!check_from()) { > > > sl_send_reply("403", "Use From=ID"); > > > break; > > > }; > > > > > > consume_credentials(); > > > }; > > > > > > route(4); > > > > > > if(!load_gws()){ > > > sl_send_reply("500", "Internal server error, unable to load > > gateways"); > > > break; > > > } > > > if(!next_gw()){ > > > sl_send_reply("503", "Service not available, no > gateways found"); > > > break; > > > }; > > > > > > if (!is_uri_host_local()) { > > > route(4); > > > route(1); > > > break; > > > }; > > > > > > > > > # route(1); > > > } > > > > > > route[4] { > > > > > > # > > > ----------------------------------------------------------------- > > > # NAT Traversal Section > > > # > > > ----------------------------------------------------------------- > > > > > > if (isflagset(6) || isflagset(7)) { > > > if (!isflagset(8)) { > > > setflag(8); > > > use_media_proxy(); > > > }; > > > }; > > > } > > > > > > onreply_route[1] { > > > > > > if ((isflagset(6) || isflagset(7)) && > > > (status=~"(180)|(183)|2[0-9][0-9]")) { > > > > > > if (!search("^Content-Length:[ ]*0")) { > > > use_media_proxy(); > > > }; > > > }; > > > > > > if (client_nat_test("1")) { > > > fix_nated_contact(); > > > }; > > > } > > > > > > > > > thanks very much > > > > > > arun > > > > > > On 1/10/07, * Greger V. Teigre* <greger(a)teigre.com > <mailto:greger@teigre.com> > > <mailto: greger(a)teigre.com <mailto:greger@teigre.com>> > > > <mailto: greger(a)teigre.com <mailto:greger@teigre.com> > <mailto:greger@teigre.com <mailto:greger@teigre.com>>>> wrote: > > > > > > A quick search on iptel.org <http://iptel.org> > <http://iptel.org> > > <http://iptel.org> would have given > > > you these: > > > http://www.iptel.org/lcr_module_drop_in_for_0_9_x > > > http://www.iptel.org/lcr_with_mysql_accounting > <http://www.iptel.org/lcr_with_mysql_accounting> > > <http://www.iptel.org/lcr_with_mysql_accounting> > > > > > > > > > Arun Kumar wrote: > > >> Hi > > >> > > >> please help with LCR can some one show his lcr config > file > > >> please. I'm not able to make it working. > > >> > > >> please help > > >> > > >> thanks > > >> arun > > >> > > > ------------------------------------------------------------------------ > > >> > > >> _______________________________________________ > > >> Serusers mailing list > > >> Serusers(a)lists.iptel.org > <mailto:Serusers@lists.iptel.org> <mailto:Serusers@lists.iptel.org > <mailto:Serusers@lists.iptel.org>> > > <mailto:Serusers@lists.iptel.org > <mailto:Serusers@lists.iptel.org> <mailto:Serusers@lists.iptel.org > <mailto:Serusers@lists.iptel.org>>> > > >> http://lists.iptel.org/mailman/listinfo/serusers > > >> > > > > > > > > > > > > ------------------------------------------------------------------------ > > > > > > _______________________________________________ > > > Serusers mailing list > > > Serusers(a)lists.iptel.org <mailto:Serusers@lists.iptel.org> > <mailto: Serusers(a)lists.iptel.org <mailto:Serusers@lists.iptel.org>> > > > http://lists.iptel.org/mailman/listinfo/serusers > > > > > > > > >

1 0

Re: [Serusers] Please help with LCR
by Steve Blair 10 Jan '07

10 Jan '07

Arun: This depends a little on your configuration. Generally speaking the !load_gws and !next_gw would be in route block 0. You will most likely want to do any per-call checks or rewrites before determining which gateway should receive the call. The failure_route can be inserted after your route blocks. -Steve Arun Kumar wrote: > Hi, > > thanks, One more thing can you please guide me where do I've to place > this code in my ser.cfg. > > thanks > > arun > > On 1/10/07, *Steve Blair * <blairs(a)isc.upenn.edu > <mailto:blairs@isc.upenn.edu>> wrote: > > > Arun: > > I would try something like the following: > > if (!load_gws()) { > sl_send_reply("500", "Server Internal Error - Cannot load > gateways"); > break; > } else { > xlog("L_INFO", "\n[SER]: - [$Tf] Method: <$rm> R-uri: <$ru> > From: <$fu> > To <$tu> : Successfully Loaded Gateway List\n"); > }; > > ...... > > if (!next_gw()) { > t_reply("503", "Service not available - No more gateways"); > break; > } else { > t_on_failure("2"); <--- This will be where you load the > next > gateway > t_relay(); > break; > }; > > failure_route[2] { > > if (!next_gw()) { > xlog("L_CRIT","No more gateways for <$tu>\n"); > t_reply("503", "Service not available - No more gateways"); > break; > } else { > t_on_failure("2"); > t_relay(); > break; > } > } > > -Steve > > Arun Kumar wrote: > > Hi > > > > thanks for your prompt reply but I've already checked and I'm > not able > > to make my lcr working by seeing these two pages I got this conf but > > > > This config is sending the call to my first gateway but when My > first > > gateway is down its not sending the calls to other gateways. Plese > > help me to make this working. Here is my config file. > > > > ------------------------ > > debug=3 > > fork=no > > log_stderror=yes > > > > listen= 192.168.2.210 <http://192.168.2.210> > <http://192.168.2.210/> # INSERT YOUR IP > > ADDRESS HERE > > port=5060 > > children=4 > > > > dns=no > > rev_dns=no > > fifo="/tmp/ser_fifo" > > fifo_db_url="mysql://ser:pass@localhost/ser" > > > > loadmodule "/usr/local/lib/ser/modules > > /mysql.so" > > loadmodule "/usr/local/lib/ser/modules/sl.so" > > loadmodule "/usr/local/lib/ser/modules/tm.so" > > loadmodule "/usr/local/lib/ser/modules/rr.so" > > loadmodule "/usr/local/lib/ser/modules/maxfwd.so" > > loadmodule "/usr/local/lib/ser/modules/usrloc.so" > > loadmodule "/usr/local/lib/ser/modules/registrar.so" > > loadmodule "/usr/local/lib/ser/modules/auth.so" > > loadmodule "/usr/local/lib/ser/modules/auth_db.so" > > loadmodule "/usr/local/lib/ser/modules/uri.so" > > loadmodule "/usr/local/lib/ser/modules/uri_db.so" > > loadmodule "/usr/local/lib/ser/modules/domain.so" > > loadmodule "/usr/local/lib/ser/modules/nathelper.so" > > loadmodule "/usr/local/lib/ser/modules/avpops.so" > > loadmodule "/usr/local/lib/ser/modules/textops.so" > > loadmodule "/usr/local/lib/ser/modules/mediaproxy.so" > > loadmodule "/usr/local/lib/ser/modules/permissions.so" > > loadmodule "/usr/local/lib/ser/modules/acc.so" > > loadmodule "/usr/local/lib/ser/modules/auth_radius.so" > > loadmodule "/usr/local/lib/ser/modules/lcr.so" > > > > > > modparam("auth_db|permissions|uri_db|usrloc|domain", "db_url", " > > mysql://ser:pass@localhost/ser") > > modparam("auth_db", "calculate_ha1", 1) > > modparam("auth_db", "password_column", "password") > > modparam("nathelper", "rtpproxy_disable", 1) > > modparam("nathelper", "natping_interval", 0) > > > > modparam("mediaproxy","natping_interval", 30) > > modparam("mediaproxy","mediaproxy_socket", > "/var/run/mediaproxy.sock") > > # > > > modparam("mediaproxy","sip_asymmetrics","/usr/local/etc/ser/sip-clients") > > # > > > modparam("mediaproxy","rtp_asymmetrics","/usr/local/etc/ser/rtp-clients") > > > > > modparam("usrloc", "db_mode", 2) > > > > modparam("registrar", "nat_flag", 6) > > > > modparam("rr", "enable_full_lr", 1) > > > > modparam("tm", "fr_inv_timer", 120) > > modparam("tm", "fr_inv_timer_avp", "inv_timeout") > > > > modparam("permissions", "db_mode", 1) > > modparam("permissions", "trusted_table", "trusted") > > > > modparam("lcr","db_url", "mysql://ser:pass@localhost/ser") > > modparam("lcr","gw_table","gw") > > modparam("lcr","gw_name_column","gw_name") > > modparam("lcr","ip_addr_column","ip_addr") > > modparam("lcr","port_column","port") > > modparam("lcr","grp_id_column","grp_id") > > modparam("lcr","lcr_table","lcr") > > modparam("lcr","prefix_column","prefix") > > modparam("lcr","from_uri_column","from_uri") > > modparam("lcr","priority_column","priority") > > modparam("lcr","contact_avp","1401") > > modparam("lcr","fr_inv_timer_avp","fr_inv_timer_avp") > > modparam("lcr","fr_inv_timer",90) > > modparam("lcr","fr_inv_timer_next",60) > > # ------ Account and Radius modules-------------- > > modparam("acc", "db_url", " mysql://ser:pass@localhost/ser") > > > > modparam("acc","log_level",1) > > modparam("acc","log_flag",1) > > modparam("acc", "db_flag", 1) > > > > modparam("acc","radius_flag",1) > > modparam("acc","service_type",15) > > > #modparam("acc","radius_config","/usr/local/etc/radiusclient-ng/radiusclient.conf") > > > > > > route { > > > > # > ----------------------------------------------------------------- > > # Sanity Check Section > > # > ----------------------------------------------------------------- > > if (!mf_process_maxfwd_header("10")) { > > sl_send_reply("483", "Too Many Hops"); > > break; > > }; > > > > if (msg:len > max_len) { > > sl_send_reply("513", "Message Overflow"); > > break; > > }; > > > > # > ----------------------------------------------------------------- > > # Record Route Section > > # > ----------------------------------------------------------------- > > if (method=="INVITE" && client_nat_test("3")) { # setflag(1); > > # INSERT YOUR IP ADDRESS HERE > > record_route_preset("192.168.2.210:5060 > <http://192.168.2.210:5060> > > <http://192.168.2.210:5060/>;nat=yes"); > > } else if (method!="REGISTER") { > > record_route(); > > }; > > # > ----------------------------------------------------------------- > > # Call Tear Down Section > > # > ----------------------------------------------------------------- > > if (method=="BYE" || method=="CANCEL") { setflag(1); > > end_media_session(); > > }; > > > > # > ----------------------------------------------------------------- > > # Loose Route Section > > # > ----------------------------------------------------------------- > > if (loose_route()) { > > > > if ((method=="INVITE" || method=="REFER") && !has_totag()) { > > sl_send_reply("403", "Forbidden Cant cross 1st bridge"); > > break; > > }; > > > > if (method=="INVITE") { > > > > if (!allow_trusted()) { > > > > if (!proxy_authorize("","subscriber")) { > > proxy_challenge("","0"); > > break; > > } else if (!check_from()) { > > sl_send_reply("403", "Use From=ID"); > > break; > > }; > > > > consume_credentials(); > > }; > > > > if (client_nat_test("3")||search("^Route:.*;nat=yes")){ > > setflag(6); > > use_media_proxy(); > > }; > > }; > > > > route(1); > > break; > > }; > > # > ----------------------------------------------------------------- > > # Call Type Processing Section > > # > ----------------------------------------------------------------- > > if (!is_uri_host_local()) { > > if (is_from_local() || allow_trusted()) { > > sl_send_reply("404", "I am trusted host, "); > > route(4); > > route(1); > > } else { > > sl_send_reply("403", "Forbidden, I am here"); > > }; > > break; > > }; > > > > if (method=="ACK") { setflag(1); > > route(1); > > break; > > } if (method=="CANCEL") { setflag(1); > > route(1); > > break; > > } else if (method=="INVITE") { setflag(1); > > # sl_send_reply("410", "I am sending your call, "); > > route(3); > > break; > > } else if (method=="REGISTER") { > > route(2); > > break; > > }; > > > > lookup("aliases"); > > if (!is_uri_host_local()) { > > route(4); > > route(1); > > break; > > }; > > > > if (!lookup("location")) { > > sl_send_reply("404", "User Not Found"); > > break; > > }; > > > > route(1); > > } > > > > route[1] { > > > > # > ----------------------------------------------------------------- > > # Default Message Handler > > # > ----------------------------------------------------------------- > > > > t_on_reply("1"); > > > > if (!t_relay()) { > > > > if (method=="INVITE" || method=="ACK") { setflag(1); > > end_media_session(); > > }; > > > > sl_reply_error(); > > }; > > } > > > > route[2] { > > > > # > ----------------------------------------------------------------- > > # REGISTER Message Handler > > # > ----------------------------------------------------------------- > > > > sl_send_reply("100", "Trying"); > > > > if (!search("^Contact:[ ]*\*") && client_nat_test("7")) { > > setflag(6); > > fix_nated_register(); > > force_rport(); > > }; > > > > if (!www_authorize("","subscriber")) { > > www_challenge("","0"); > > break; > > }; > > if (!check_to()) { > > sl_send_reply("401", "Unauthorized"); > > break; > > }; > > > > consume_credentials(); > > > > if (!save("location")) { > > sl_reply_error(); > > }; > > } > > > > route[3] { > > > > # > ----------------------------------------------------------------- > > # INVITE Message Handler > > # > ----------------------------------------------------------------- > > > > if (client_nat_test("3")) { > > setflag(7); > > force_rport(); > > fix_nated_contact(); > > }; > > > > if (!allow_trusted()) { > > > > if (!proxy_authorize("","subscriber")) { > > proxy_challenge("","0"); > > break; > > } else if (!check_from()) { > > sl_send_reply("403", "Use From=ID"); > > break; > > }; > > > > consume_credentials(); > > }; > > > > route(4); > > > > if(!load_gws()){ > > sl_send_reply("500", "Internal server error, unable to load > gateways"); > > break; > > } > > if(!next_gw()){ > > sl_send_reply("503", "Service not available, no gateways found"); > > break; > > }; > > > > if (!is_uri_host_local()) { > > route(4); > > route(1); > > break; > > }; > > > > > > # route(1); > > } > > > > route[4] { > > > > # > ----------------------------------------------------------------- > > # NAT Traversal Section > > # > ----------------------------------------------------------------- > > > > if (isflagset(6) || isflagset(7)) { > > if (!isflagset(8)) { > > setflag(8); > > use_media_proxy(); > > }; > > }; > > } > > > > onreply_route[1] { > > > > if ((isflagset(6) || isflagset(7)) && > > (status=~"(180)|(183)|2[0-9][0-9]")) { > > > > if (!search("^Content-Length:[ ]*0")) { > > use_media_proxy(); > > }; > > }; > > > > if (client_nat_test("1")) { > > fix_nated_contact(); > > }; > > } > > > > > > thanks very much > > > > arun > > > > On 1/10/07, * Greger V. Teigre* <greger(a)teigre.com > <mailto:greger@teigre.com> > > <mailto: greger(a)teigre.com <mailto:greger@teigre.com>>> wrote: > > > > A quick search on iptel.org <http://iptel.org> > <http://iptel.org> would have given > > you these: > > http://www.iptel.org/lcr_module_drop_in_for_0_9_x > > http://www.iptel.org/lcr_with_mysql_accounting > <http://www.iptel.org/lcr_with_mysql_accounting> > > > > > > Arun Kumar wrote: > >> Hi > >> > >> please help with LCR can some one show his lcr config file > >> please. I'm not able to make it working. > >> > >> please help > >> > >> thanks > >> arun > >> > ------------------------------------------------------------------------ > >> > >> _______________________________________________ > >> Serusers mailing list > >> Serusers(a)lists.iptel.org <mailto:Serusers@lists.iptel.org> > <mailto:Serusers@lists.iptel.org <mailto:Serusers@lists.iptel.org>> > >> http://lists.iptel.org/mailman/listinfo/serusers > >> > > > > > > > ------------------------------------------------------------------------ > > > > _______________________________________________ > > Serusers mailing list > > Serusers(a)lists.iptel.org <mailto:Serusers@lists.iptel.org> > > http://lists.iptel.org/mailman/listinfo/serusers > > > >

1 0

[Serusers] Please help with LCR
by Arun Kumar 10 Jan '07

10 Jan '07

Hi please help with LCR can some one show his lcr config file please. I'm not able to make it working. please help thanks arun

3 3

[Serusers] OT? Duplicated digits.
by Juan 10 Jan '07

10 Jan '07

My system is DIDprovider ---SER---Cisco AS5350---Calling card platform. Since December the 1st we noticed a large increase in the amount of wrong numbers received at the CC platform. As this problem arrises once the call is established and there is no RTP relay I don't think is a SER question but I resort to your major knowledge to see if someone can enlight me about where to look to solve the problem. BTW. No changes were made in the equipment at neither end. Thanks in advance Juan

2 1

[Serusers] BYE and SER.cfg
by Benito Caracuel 10 Jan '07

10 Jan '07

Hello all, In my ser.cfg I do: route{.... if (method=="BYE"){log(1,"enter in method bye")do ABCD.....} ....} When SER receives a BYE, SER doesn´t do "ABCD...." and if I put SER in debug mode, I can`t read the log "enter in method bye" but I can read the line"method: <BYE>" why doesn`t work "if method="BYE"? Thanks. _________________________________________________________________ Llama a tus amigos de PC a PC: ¡Es GRATIS! http://get.live.com/messenger/overview

3 2

Re: [Serusers] One way audio
by Greger V. Teigre 10 Jan '07

10 Jan '07

You need to look at when NAT is detected (nat_uac_test) for INVITE and for 200 OK in onreply route for the same call. Make sure NAT is detected for both, if not, find out why it is not detected. g-) Gareth Owen wrote: > > Thanks Greger, I've already worked through the getting started doc and > think I've got a good understanding but am still getting the one-way > audio. Can you suggest anything to help me understand how I can track > the problem? Thanks gareth. > > > > ------------------------------------------------------------------------ > > *From:* Greger V. Teigre [mailto:greger@teigre.com] > *Sent:* 04 January 2007 06:5 > *To:* gareth.owen(a)bevoice.net > *Cc:* serusers(a)lists.iptel.org > *Subject:* Re: [Serusers] One way audio > > > > Try gettingstarted doc. http://iptel.org/ser/doc/gettingstarted > g-) > > Gareth Owen wrote: > > Can someone help? > > > > I am fairly new to SER and Mediaproxy and can't find a detailed > explanation of how nathelper etc work, so I'm struggling! > > > > My config is:- > > > > SER 0.9.6 > > Mediaproxy 1.7.2 > > Fedora Core 4 86x64 > > > > SER and Mediaproxy run on the same server which acts as a gateway to a > remote Sonus PSTN gateway over a VPN. > > > > I also use Asterisk on my local network. The SER server acts as a > router between Asterisk servers and the PSTN via the Sonus. This works > fine but my problem is when I attempt to use X-Lite 3.0 UA behind NAT > on a remote network. Asterisk is not used in this config but proves > that two way audio is fine using SER and the Sonus gateway. > > > > Problem: X-Lite behind NAT on remote network to Sonus PSTN gateway via > SER and Mediaproxy, I get only one ay audio. The audio is fine from > X-Lite to PSTN but not in the reverse direction. > > > > Thanks for your help > > ** ** > > ** ** > > ** ** > > ** ** > > > > > > > > > > > > > > > ------------------------------------------------------------------------ > > > > _______________________________________________ > Serusers mailing list > Serusers(a)lists.iptel.org <mailto:Serusers@lists.iptel.org> > http://lists.iptel.org/mailman/listinfo/serusers >

1 0

[Serusers] Can I see your PSTN with Accounting?
by Bart Fisher 10 Jan '07

10 Jan '07

Noob here, sorry :) I've been working with SER for about a month and I have a working config using what's provided by iptel.org 'getting started' gw-pstn.cfg - But here's were I'm stuck. I'd like to add accounting, but I haven't found a good example based on gw-pstn.cfg where accounting has been added. Google turns up old updated information. I'm hoping someone can post or email their gw-pstn.cfg with acc enabled: Note: Basically the gw-pstn.cfg script provides a good example of using SER with nathelper and mediaproxy as well as rewriting to a PSTN Gateway Can you help me? TIA Bart bart(a)icpage.com

2 1

[Serusers] Question
by Bill 10 Jan '07

10 Jan '07

I am setting up a SER/Mediaproxy/MySQL box. I have it setup and running except for NAT. When I put up a call this is what my session look like. The 127 are the fakeconversations.py. The other session is my live traffic but the other end has all ????????????????. Any ideas. I am using the basic SER/Mediaproxy config below. Caller Via Called Status Duration Codec Type Traffic ---------------------------------------------------------------------------- ---------------------------------------- 127.0.0.1:10000 - 10.0.1.100:60004 - 127.0.0.1:10002 active 0'10" Dynamic(127) Audio 94.38k/188.58k/94.38k 10.0.2.1:15040 - 10.0.1.100:60000 - ?.?.?.?:? inactive 4'41" Dynamic(107) Audio 1.58M/0/0 Total traffic: 120.55kbps/74.61kbps/149.22kbps (in1/in2/out) Session count: 2 Proxy version: 1.8.0 #####################SER.CFG [root@voipproxy1 mediaproxy]# cat /usr/local/etc/ser/ser.cfg # $Id: nat-mediaproxy.cfg 51 2006-01-31 13:28:04Z /CN=Paul Hazlett/emailAddress=paul(a)onsip.org $ debug=7 fork=yes log_stderror=no listen=10.0.1.100 # INSERT YOUR IP ADDRESS HERE port=5060 children=4 sock_mode=0666 dns=no rev_dns=no fifo="/tmp/ser_fifo" fifo_db_url="mysql://ser:heslo@localhost/ser" loadmodule "/usr/local/lib/ser/modules/mysql.so" loadmodule "/usr/local/lib/ser/modules/sl.so" loadmodule "/usr/local/lib/ser/modules/tm.so" loadmodule "/usr/local/lib/ser/modules/rr.so" loadmodule "/usr/local/lib/ser/modules/maxfwd.so" loadmodule "/usr/local/lib/ser/modules/usrloc.so" loadmodule "/usr/local/lib/ser/modules/registrar.so" loadmodule "/usr/local/lib/ser/modules/auth.so" loadmodule "/usr/local/lib/ser/modules/auth_db.so" loadmodule "/usr/local/lib/ser/modules/uri.so" loadmodule "/usr/local/lib/ser/modules/uri_db.so" loadmodule "/usr/local/lib/ser/modules/domain.so" loadmodule "/usr/local/lib/ser/modules/mediaproxy.so" loadmodule "/usr/local/lib/ser/modules/nathelper.so" loadmodule "/usr/local/lib/ser/modules/textops.so" modparam("auth_db|domain|uri_db|usrloc", "db_url", "mysql://ser:heslo@localhost/ser") modparam("auth_db", "calculate_ha1", 1) modparam("auth_db", "password_column", "password") modparam("nathelper", "rtpproxy_disable", 1) modparam("nathelper", "natping_interval", 0) modparam("mediaproxy","natping_interval", 30) modparam("mediaproxy","mediaproxy_socket", "/var/run/mediaproxy.sock") modparam("mediaproxy","sip_asymmetrics","/usr/local/etc/ser/sip-clients") modparam("mediaproxy","rtp_asymmetrics","/usr/local/etc/ser/rtp-clients") modparam("usrloc", "db_mode", 2) modparam("registrar", "nat_flag", 6) modparam("rr", "enable_full_lr", 1) route { # ----------------------------------------------------------------- # Sanity Check Section # ----------------------------------------------------------------- if (!mf_process_maxfwd_header("10")) { sl_send_reply("483", "Too Many Hops"); break; }; if (msg:len > max_len) { sl_send_reply("513", "Message Overflow"); break; }; # ----------------------------------------------------------------- # Record Route Section # ----------------------------------------------------------------- if (method=="INVITE" && client_nat_test("3")) { # INSERT YOUR IP ADDRESS HERE record_route_preset("10.0.1.100:5060;nat=yes"); } else if (method!="REGISTER") { record_route(); }; # ----------------------------------------------------------------- # Call Tear Down Section # ----------------------------------------------------------------- if (method=="BYE" || method=="CANCEL") { end_media_session(); }; # ----------------------------------------------------------------- # Loose Route Section # ----------------------------------------------------------------- if (loose_route()) { if ((method=="INVITE" || method=="REFER") && !has_totag()) { sl_send_reply("403", "Forbidden"); break; }; if (method=="INVITE") { if (!proxy_authorize("","subscriber")) { proxy_challenge("","0"); break; } else if (!check_from()) { sl_send_reply("403", "Use From=ID"); break; }; consume_credentials(); if (client_nat_test("3") || search("^Route:.*;nat=yes")) { setflag(6); use_media_proxy(); }; }; route(1); break; }; # ----------------------------------------------------------------- # Call Type Processing Section # ----------------------------------------------------------------- if (uri!=myself) { route(4); route(1); break; }; if (method=="ACK") { route(1); break; } else if (method=="CANCEL") { route(1); break; } else if (method=="INVITE") { route(3); break; } else if (method=="REGISTER") { route(2); break; }; lookup("aliases"); if (uri!=myself) { route(4); route(1); break; }; if (!lookup("location")) { sl_send_reply("404", "User Not Found"); break; }; route(1); } route[1] { # ----------------------------------------------------------------- # Default Message Handler # ----------------------------------------------------------------- t_on_reply("1"); if (!t_relay()) { if (method=="INVITE" || method=="ACK") { end_media_session(); }; sl_reply_error(); }; } route[2] { # ----------------------------------------------------------------- # REGISTER Message Handler # ---------------------------------------------------------------- sl_send_reply("100", "Trying"); if (!search("^Contact:[ ]*\*") && client_nat_test("7")) { setflag(6); fix_nated_register(); force_rport(); }; if (!www_authorize("","subscriber")) { www_challenge("","0"); break; }; if (!check_to()) { sl_send_reply("401", "Unauthorized"); break; }; consume_credentials(); if (!save("location")) { sl_reply_error(); }; } route[3] { # ----------------------------------------------------------------- # INVITE Message Handler # ----------------------------------------------------------------- if (client_nat_test("3")) { setflag(7); force_rport(); fix_nated_contact(); }; if (!proxy_authorize("","subscriber")) { proxy_challenge("","0"); break; } else if (!check_from()) { sl_send_reply("403", "Use From=ID"); break; }; consume_credentials(); lookup("aliases"); if (uri!=myself) { route(4); route(1); break; }; if (!lookup("location")) { sl_send_reply("404", "User Not Found"); break; }; route(4); route(1); } route[4] { # ----------------------------------------------------------------- # NAT Traversal Section # ----------------------------------------------------------------- if (isflagset(6) || isflagset(7)) { if (!isflagset(8)) { setflag(8); use_media_proxy(); }; }; } onreply_route[1] { if ((isflagset(6) || isflagset(7)) && (status=~"(180)|(183)|2[0-9][0-9]")) { if (!search("^Content-Length:[ ]*0")) { use_media_proxy(); }; }; if (client_nat_test("1")) { fix_nated_contact(); }; } ######################MEDIAPROXY.INI [Dispatcher] defaultProxy = /var/run/mediaproxy.sock [MediaProxy] ;start = yes ;socket = /var/run/mediaproxy.sock ;group = openser ;listen = None ;allow = None proxyIP = 10.0.1.100 portRange = 60000:65000 ;TOS = 0xb8 ;idleTimeout = 60 ;holdTimeout = 3600 ;forceClose = 0 [Accounting] ; one of none, radius or database accounting = database [Database] user = ser password = heslo host = localhost database = ser table = acc [Radius] secret = secret server = localhost authport = 1812 acctport = 1813 dictionaries = /etc/radiusclient-ng/dictionary, /etc/openser/radius/dictionary, /usr/local/mediaproxy/dictionary retries = 2 timeout = 3 Bill

2 1

[Serusers] ser_ctl
by Jean Sigue 10 Jan '07

10 Jan '07

Hi, After compiling the pre-release 0.10 , I still have the serctl not ser_ctl. How do i fix it Jean R. Sigue Senior Network Engineer CCNP, CSS1, NSA OMX Global Services USA Direct: 1 908-673-6004 Mobile: (917-257-9742) Fax: 1 908-673-6057 Visiting address: 2 Connell Drive Berkeley Heights, NJ 07922 <http://www.omxgroup.com/>www.omxgroup.com No. 1 in marketplace solutions ******************************************************************************** This e-mail and the information it contains may be privileged and/or confidential. It is for the intended addressee(s) only. The unauthorised use, disclosure or copying of this e-mail, or any information it contains, is prohibited. If you are not an intended recipient, please contact the sender and delete the material from your computer. ********************************************************************************

4 4

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users