- sr-users - kamailio.org

Branch 5.1 created
by Daniel-Constantin Mierla 12 Nov '17

12 Nov '17

Hello, the GIT branch 5.1 has just been created, it will host the release series 5.1.x. To get this branch from GIT, you can use: git clone https://github.com/kamailio/kamailio.git kamailio cd kamailio git checkout -b 5.1 origin/5.1 Hopefully in two-three weeks time frame the full release of 5.1.0 will be out. >From now on, any corresponding fix has to be pushed first to master branch and then cherry-picked to branch 5.1. No new features can get in branch 5.1. Enhancements to documentation or helping tools, as well as kemi exports are still allowed. If you are not sure about doing or not a backport, ask on sr-dev mailing list. Cheers, Daniel -- Daniel-Constantin Mierla www.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio Advanced Training - www.asipto.com Kamailio World Conference - www.kamailioworld.com

1 0

GeoIP2 module deb package
by Joel Serrano 12 Nov '17

12 Nov '17

Hi, I can't seem to find the geoip2 module for debian stretch (installing from packages, kamailio 5.0 branch). Is it not available in the repository? Thanks, Joel.

2 4

Kamilio for IMS and VoLTE Setup Questions
by Jack Folgolburg 11 Nov '17

11 Nov '17

Hello, I saw the Kamailio World 2017 presentation "Kamilio for IMS and VoLTE" (https://www.youtube.com/watch?v=Wdhcdv5JVPw). I would like to install the servers for evaluation and testing. The slides say to use Ubuntu 16.04, but there are no xenial packages at the ng-voice repository. Is it okay to install on Ubuntu 14.04, since there are trusty packages? I have done this and got through all the configuration prompts. After installation, is there any way to confirm that the site is operational? How to bring up the management console (i.e. what is local URL)? In the presentation, it looks like a commercial site at ng-voice is accessed. I understand that there is a REST API. Is this API documented anywhere? Maybe, the most important question is, after installation, what is the fastest way to add two users and test access from IMS clients? Thank you, James

1 0

183 acc records even if early_media equals to 0
by Marco Capetta 09 Nov '17

09 Nov '17

Dear All, I'm facing a strange problem with the call accounting module: even if in my configuration I have the parameter: modparam("acc", "early_media", 0) I can find some ACC records with sip_code 180 or 183. I investigated those cases and this issue seems to happen when an endpoint sends an 183 message immediately followed by a 200 OK. The issue seems started from kamailio version 4.4.1, but I cannot be really sure of this. Have you ever had a similar problem? Do you have any suggestions on how to solve it? Thanks Marco

2 11

t_relay_to_udp - 500 server error occurred (6/SL)
by Donat Zenichev 09 Nov '17

09 Nov '17

Hi all. I have a problem with t_relay_to_udp function. My topology: UAC -> tcp -> kamailio <-> udp <-> asterisk Kamailio processes requests from clients over TCP and relays requests to asterisk over UDP. Kamailio gets INVITE from client, relays it to asterisk, then he sends 100 trying to user client and abruptly sends 500 internal error to client (after 100 trying). But the main interesting thing is, that asterisk answers on INVITE and dialog continues between kamailio and asterisk (without user agent client) - it reaches the destination then, without originator : ) How error on kamailio looks like: Nov 8 15:23:37 ip-10-2-1-229 kamailio[10339]: ERROR: tm [t_fwd.c:1716]: t_forward_nonack(): ERROR: t_forward_nonack: no branches for forwarding Nov 8 15:23:37 ip-10-2-1-229 kamailio[10339]: ERROR: sl [sl_funcs.c:363]: sl_reply_error(): ERROR: sl_reply_error used: I'm terribly sorry, server error occurred (6/SL) The same problem is, when I change transport protocol between kamailio and asterisk to TCP, using the t_relay_to_tcp function. When I use t_relay function, it works fine, nothing happens that can drop dialogs between kamailio and clients. Relaying code part: if ($var(to_asterisk)=="1") { xlog("L_NOTICE","Relaying to asterisk - change socket to udp:10.1.1.1:5070 \n"); force_send_socket(udp:10.1.1.1:5070); if (!t_relay_to_udp()) { sl_reply_error(); } } I need to use t_relay_to_udp with force_send_socket, because kamailio changes the source port (source socket) every time he generate new INVITEs to asterisk and this is irrelevant. Dump between kamailio and user agent client: INVITE sip:1111111111example@kam1.domain.com:5070;transport=TCP SIP/2.0 Via: SIP/2.0/TCP uac.domain.example:5065;branch=z9hG4bK-d8754z-67b9ad24dbc5c1d0-1---d8754z- Max-Forwards: 70 Contact: <sip:debug.device-example@uac.domain.example:5065;transport=TCP> To: <sip:1111111111example@kam1.domain.com:5070;transport=TCP> From: <sip:debug.device-example@kam1.domain.com:5070 ;transport=TCP>;tag=93394e63 Call-ID: NzQ1NWU5NzUxYmY4ZWVjMjYwNDYwMTBmYzYxODZkZmM. CSeq: 2 INVITE Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE Content-Type: application/sdp Proxy-Authorization: Digest username="debug.device-example",realm=" kam1.domain.com ",nonce="WgQGlVoEBWnhH3CF6DE77uKxKJx0tT4e",uri="sip:1111111111example@kam1.domain.com:5070 ;transport=TCP",response="4753aa849715d26d0dde1b3c2314c843",a orithm=MD5 Supported: replaces, norefersub, extended-refer, timer, X-cisco-serviceuri User-Agent: Z 3.3.25608 r25552 Allow-Events: presence, kpml Content-Length: 241 v=0 o=Z 0 0 IN IP4 uac.domain.example s=Z c=IN IP4 uac.domain.example t=0 0 m=audio 8000 RTP/AVP 8 3 110 0 98 101 a=rtpmap:110 speex/8000 a=rtpmap:98 iLBC/8000 a=fmtp:98 mode=20 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-15 a=sendrecv SIP/2.0 100 trying -- your call is important to us Via: SIP/2.0/TCP uac.domain.example:5065;branch=z9hG4bK-d8754z-67b9ad24dbc5c1d0-1---d8754z-;rport=43486 To: <sip:1111111111example@kam1.domain.com:5070;transport=TCP> From: <sip:debug.device-example@kam1.domain.com:5070 ;transport=TCP>;tag=93394e63 Call-ID: NzQ1NWU5NzUxYmY4ZWVjMjYwNDYwMTBmYzYxODZkZmM. CSeq: 2 INVITE Server: MS Lync Content-Length: 0 SIP/2.0 500 I'm terribly sorry, server error occurred (6/SL) Via: SIP/2.0/TCP uac.domain.example:5065;branch=z9hG4bK-d8754z-67b9ad24dbc5c1d0-1---d8754z-;rport=43486 To: <sip:1111111111example@kam1.domain.com:5070 ;transport=TCP>;tag=9a78ee8ed9a3d4ba441c41d83ba2e904.4113 From: <sip:debug.device-example@kam1.domain.com:5070 ;transport=TCP>;tag=93394e63 Call-ID: NzQ1NWU5NzUxYmY4ZWVjMjYwNDYwMTBmYzYxODZkZmM. CSeq: 2 INVITE Server: example Content-Length: 0 Thanks in advance for hints. -- -- BR, Donat Zenichev Wnet VoIP team Tel: +380(44) 5-900-800 http://wnet.ua

1 0

Topoh module configuration for SIP proxy and SIP registrar
by Christian Conus 08 Nov '17

08 Nov '17

Hello, I am trying to configure the topoh module for kamailio 5.0.2. I read the documentation but some points are still not clear to me. The topology of my network is as follow: - Two SIP proxies - Two SIP registrars - Only one SIP proxy is running (the other take over automatically in case the first fails) - Both registrars are running (proxy sends requests to both registrars using round robin algorithm) Text mode graph of the topology (hope it helps understand): I tried to enable topoh on SIP proxy only, on both proxy and registrars, with same mask_key everywhere and with different mask_key between proxy and registrars but everytime I could still see parts of the SIP header which was not obfuscated. My questions are: - Is it necessary to enable topoh module on each SIP proxy and SIP registrar ? - The mask_key should be the same on each server or it should be different between proxy and registrars? - the mask address should be the same on each server or it should be different between proxy and registrars ? Thanks in advance for your help, Christian -- Sent from: http://sip-router.1086192.n5.nabble.com/Users-f3.html

2 10

evapi_async_relay() failed
by Abdul Basit 07 Nov '17

07 Nov '17

Hi list, I am configuring CGRateS with kamailio 4.4 using deb packages on debian 8. I am facing a issue while processing event_route[dialog:start] for answering call INVITE at evapi_async_relay("{\"event\":\"CGR_CALL_START\", with following error /usr/sbin/kamailio[13887]: ERROR: evapi [evapi_mod.c:288]: w_evapi_async_relay(): failed to suspend request processing However, after discussion with Dan on IRC i replaced function evapi_async_relay() with evapi_relay() resolved the issue. Whats causing this error? Can anyone suggest some way out for keep using evapi_async_relay? -- regards, abdul basit

2 1

Kamailio SIP-I
by Saleem Manasfi 07 Nov '17

07 Nov '17

Dears, Please if you can let us know how does Kamailio reads the SIP-I body (ISUP)? Is there any document or link that may help?

2 1

Re: [SR-Users] Regarding Opensource DID Routing Solution using Kamailio
by surendra tiwari 06 Nov '17

06 Nov '17

Hi All, I have used the kamailio and redis to create the DID routing solution.please find below in github.this repository is created to help the person who want to setup there own DID routing solution with following feature: 1. Inbound Termination with Carrier IP validation. 2. Carrier LCR for DID/TFN to PSTN forwarding. 3. Inbound Abuse Block. 4. CDR in MongoDB. 5. IPTables Block for Sip-Scanners. 6. Integration with RtpEngine. 7. RedisDB for quick DB Access. https://github.com/surendratiwari3/KamInboundSIP On Mon, Nov 6, 2017 at 9:56 PM, Daniel-Constantin Mierla <miconda(a)gmail.com> wrote: > Hello, > > your email was addressed to kamailio-announce mailing list (I took your > message from its bounces filter), but that list is only for announcement > issued by Kamailio project (major news about our releases, security > incidents, events, etc...). > > News from community members are welcome and can be sent to: > > - sr-users(a)lists.kamailio.org for non-commercial announcements > > - business(a)lists.kamailio.org for announcements related to commercial > offerings/products (but here you can also send non-commercial announcements) > > Your announcement is not commercial and can be sent to sr-users. Once it > will be there, I will also make a news article on kamailio.org website. > > I didn't have the time yet to check in detail what you put together, but > sounds interesting. > > Thanks for sharing, > Daniel > > (cc-ed Fred as he is moderator for kamailio announce mailing list) > > On 01.11.17 18:46, surendra tiwari wrote: > > Hi All, > > I have used the kamailio and redis to create the DID routing > solution.please find below in github.this repository is created to help the > person who want to setup there own DID routing solution with following > feature: > > > 1. Inbound Termination with Carrier IP validation. > 2. Carrier LCR for DID/TFN to PSTN forwarding. > 3. Inbound Abuse Block. > 4. CDR in MongoDB. > 5. IPTables Block for Sip-Scanners. > 6. Integration with RtpEngine. > 7. RedisDB for quick DB Access. > > > https://github.com/surendratiwari3/KamInboundSIP > > -- > With Regards, > Surendra Tiwari > VoIP Application Developer, > +91-9967609476 <+91%2099676%2009476> > > > -- > Daniel-Constantin Mierlawww.twitter.com/miconda -- www.linkedin.com/in/miconda > Kamailio Advanced Training, Nov 13-15, 2017, in Berlin - www.asipto.com > Kamailio World Conference - www.kamailioworld.com > > -- With Regards, Surendra Tiwari VoIP Application Developer, Plivo Comm +91-9967609476

1 0

Sipcapture HEP Values
by Soltanici Ilie 06 Nov '17

06 Nov '17

Hi all, How can i get the Destination IP from HEP packet? I tried $hep(dst _ip) like in documentation (https://www.kamailio.org/wiki/cookbooks/devel/pseudovariables#sipcapture_mo…) - but is not working. (pvar "hep" has an invalid name param [dst_ip]). Thank You.

1 0

Invalid JSON when dumping htable with JSONRPC-S
by Marrold 03 Nov '17

03 Nov '17

Hi All, I am currently trying to retrieve the contents of a htable using the JSONRPC-S module over HTTP, however I have observed if a slot contains multiple values, the JSON returned has duplicate keys which could be considered invalid. Here are the relevant lines from kamailio.cfg - event_route[xhttp:request] { if ($hu =~ "^/carrier") { jsonrpc_exec('{"jsonrpc": "2.0", "method": "htable.dump", "params" : {"htable": "carrier"}, "id": 1}'); xhttp_reply("200", "OK", "text/html", "$jsonrpl(body)"); } } And the output, showing a slot with two items- { "entry": 5, "size": 2, "slot": { "item": { "name": "carrierA", "value": "90", "type": "str" }, "item": { "name": "carrierB", "value": "190", "type": "str" } } } And the same from `kamcmd -s unix:/tmp/kamailio_ctl htable.dump carrier` - { entry: 5 size: 2 slot: { item: { name: carrierA value: 90 type: str } item: { name: carrierB value: 190 type: str } } } Would it be possible to change it to something like the following - { "entry": 5, "size": 2, "slot": [ { "name": "carrierA", "value": "90", "type": "str" }, { "name": "carrierB", "value": "190", "type": "str" } ] } Any other suggestions or work arounds would be appreciated, Thanks Matthew

2 1

Contacts in 302
by Diego Nadares 03 Nov '17

03 Nov '17

Hi Guys, I'm generating a 302 reply from kamailio. In this 302 I append new branches with new contacts. if($var(routing)=~"redirect"){ jansson_get("contacts_len", "$var(evmsg)", "$var(contacts_len)"); xlog("L_INFO", "Contacts len $var(contacts_len)"); $var(i) = 0; while ($var(i) < $var(contacts_len)){ jansson_get("contacts[$var(i)]", "$var(evmsg)", "$var(contact)"); append_branch($var(contact), "0.5"); $var(i) = $var(i) + 1; } send_reply("302", "Moved Temporarily"); exit; } The problem i'm facing is that I can't delete the original contact *<sip:1111@188.111.111.111:5060 <http://sip:1111@188.111.111.111:5060>>* The resulting conctact: Contact: *<sip:1111@188.111.111.111:5060 <http://sip:1111@188.111.111.111:5060>>*, <sip:1111@188.111.111.112>;q=0.5, <sip:1111@188.111.111.112>;q=0.5 I all ready tried with remove_hf('Contact') and adding the new ones after that but it doesn't worke either. The problem is that one gw takes the first contact over and over again and never the other two. Thanks in advance. Diego.

2 4

Multiple IPs
by Oz Mortimer 03 Nov '17

03 Nov '17

Hi all, I have Kamailio set as an SBC with freeswitch behind - that all works fine. Freeswitch can send calls out VIA Kamailio to external IP address’, but if I try sending a call to another IP hosted by Kamailio the seems to go nowhere… Supplier -> Kamailio -> Customer1 -> Kamailio -> Customer2 The Kamailio server has multiple assigned IPs, which are used to multi-tennant - but I cant for the like of me to get Tennant to tenant calls to work (via freeswitch) Any pointers?

2 13

onreply_route block not processing replies
by José Seabra 03 Nov '17

03 Nov '17

Hi there, I'm facing an issue regarding with replies coming to kamailio that aren't processes inside of onreply_route block. Anyone here can help me understand why these replies (1XX) aren't entering on onreply_route bock? is there any situation already identified on Kamailio that can originate this behavior? The Kamailio version used is 5.0.1. Thank you Regards -- José Seabra

2 3

Branching Kamailio v5.1
by Daniel-Constantin Mierla 03 Nov '17

03 Nov '17

Hello, I am planning to create the got branch 5.1 (to be used for v5.1.x series) by end of next week (likely on Friday, Nov 10, 2017). After that, the master will be open for new features and fixes will need to be backported to 5.1. Should anyone want a different schedule, reply to the mailing lists and propose your plans. Cheers, Daniel -- Daniel-Constantin Mierla www.twitter.com/miconda -- www.linkedin.com/in/miconda Kamailio Advanced Training, Nov 13-15, 2017, in Berlin - www.asipto.com Kamailio World Conference - www.kamailioworld.com

1 0

WebRTC error code 488 in iOS application
by Denys Pozniak 03 Nov '17

03 Nov '17

Hello! Probably this case is not connected Kamailio directly, but it can be somebody will point me in the correct direction :) We have VoIP solution: FreeSWITCH -> Kamailio + Rtpengine -> WebRTC Chrome. Everything works Ok except iOS application based on React Native WebRTC ( https://github.com/oney/react-native-webrtc) + JsSIP. It answers error 488 on incoming INVITE (wSDP): INVITE SDP to iOS: *......* *v=0* *o=FreeSWITCH 1508701860 1508701861 IN IP4 52.52.52.52* *s=FreeSWITCH* *c=IN IP4 52.52.52.52* *t=0 0* *m=audio 30028 RTP/SAVPF 0 8 102* *a=rtpmap:0 PCMU/8000* *a=rtpmap:8 PCMA/8000* *a=rtpmap:102 opus/48000/2* *a=fmtp:102 useinbandfec=1; maxaveragebitrate=14400; maxplaybackrate=8000; ptime=20; minptime=10; maxptime=40* *a=ptime:20* *a=sendrecv* *a=rtcp:30028* *a=rtcp-mux* *a=setup:actpass* *a=fingerprint:sha-1 97:1A:E9:FE:D6:65:98:E6:88:EE:D5:9F:20:A3:19:F8:86:E7:E0:E3* *a=ice-ufrag:9QBO8qg2* *a=ice-pwd:PPGPo35xGBAs6RnTdMYVM9I8fx* *a=candidate:KXENzrffZpQvwxdV 1 UDP 2130706431 52.52.52.52 30028 typ host* iOS console log: *11:55:23.670 browser.js:133 JsSIP:WebSocketInterface send() +10ms* *11:55:23.670 browser.js:133 JsSIP:RTCSession session progress +5ms* *11:55:23.671 browser.js:133 JsSIP:RTCSession emit "progress" +1ms* *11:55:23.671 webrtc.js:108 WebRTC.on progress: local* *11:55:23.679 browser.js:133 JsSIP:RTCSession emit "peerconnection" +8ms* *11:55:23.680 webrtc.js:89 WebRTC.on peerconnection* *11:55:23.680 browser.js:133 JsSIP:RTCSession emit "sdp" +1ms* *11:55:23.689 browser.js:133 JsSIP:Transport send() +20ms**11:55:23.689 browser.js:133 JsSIP:Transport sending message:* *SIP/2.0 488 Not Acceptable Here* *11:55:23.701 debug.js:115 JsSIP:ERROR:RTCSession emit "peerconnection:setremotedescriptionfailed" [error:Error: Failed to set remote offer sdp: Failed to create channels.* I found similar issue on thier git https://github.com/oney/react-native-webrtc/issues/293 and main solution is to struct SDP in way like: *a=group:BUNDLE audiom=audio PORT RTP/SAVPF N M Ka=mid:audio* How to modify SDP on Kamailio side (after Rtpengine modification) like below? *v=0* *o=FreeSWITCH 1508701860 1508701861 IN IP4 52.52.52.52* *s=FreeSWITCH* *c=IN IP4 52.52.52.52* *t=0 0* *a=group:BUNDLE audio* *m=audio 30028 RTP/SAVPF 0 8 102* *a=rtpmap:0 PCMU/8000* *a=rtpmap:8 PCMA/8000* *a=rtpmap:102 opus/48000/2* *a=fmtp:102 useinbandfec=1; maxaveragebitrate=14400; maxplaybackrate=8000; ptime=20; minptime=10; maxptime=40* *a=ptime:20* *a=sendrecv* *a=rtcp:30028* *a=rtcp-mux* *a=setup:actpass* *a=mid:audio* *a=fingerprint:sha-1 97:1A:E9:FE:D6:65:98:E6:88:EE:D5:9F:20:A3:19:F8:86:E7:E0:E3* *a=ice-ufrag:9QBO8qg2* *a=ice-pwd:PPGPo35xGBAs6RnTdMYVM9I8fx* *a=candidate:KXENzrffZpQvwxdV 1 UDP 2130706431 52.52.52.52 30028 typ host* BR, Denys

1 1

User Registration with location awareness
by Daisy Stevens 03 Nov '17

03 Nov '17

Hi Guys Please forgive me if I seem to asking stupid questions but I am a complete dummy at the moment regarding this software. I would love to be able to set up two kamailio servers with the idea of expansion in the future to handle SIP registrations, however having a two server model how would I get the calls to route to another user that is registered on the other kamailio box? Kind Regards Daisy -- CONFIDENTIAL EMAIL FROM NETCALL TELECOM LIMITED This email, and any attachments, is intended only for the above addressee. It may contain private and/or confidential information. If you have received this email in error you are on notice of its status, please immediately notify the sender by return email then delete this message and any attachments. If you are not the addressee, except to notify the sender, you must not use, disclose, copy or distribute this email and/or its attachments. Netcall Telecom accepts no responsibility for any changes made to this message after it has been sent by the original author. Opinions or views expressed in this email may be those of the individual sender and not Netcall Telecom. Nothing in this email shall bind Netcall Telecom in any contract or obligation Netcall Telecom Ltd Registered in England 2831215. Registered Office : 3rd Floor, Hamilton House, 111 Marlowes, Hemel Hempstead, Herts, HP1 1BB

2 1

msilo Content-Type for picture and video?
by sscc 03 Nov '17

03 Nov '17

Hello kamailio folks i am successfully storing and dumping messages for off line users using msilo content type text/plain. i want to store off-line messages for pictures and videos. my particular queries are 1) is msilo store picture and videos? (i have observed blob in silo database table which is used for pictures. 2) in case it does what will be declared in content type hdr parameter? any help in this regard will highly be appreciated. regards, sscc -- Sent from: http://sip-router.1086192.n5.nabble.com/Users-f3.html

1 0

Re: [SR-Users] Reading the P-Assserted-identity header
by Gertjan Wolzak 02 Nov '17

02 Nov '17

Alex and Daniel, Thank you for the feedback, the tip from Daniel helped me pinpoint the problem. And the the one from Alex showed that. The problem was between keyboard and chair, I should have seen that the SBC removed the PAI. Once I changed that, the PAI arrived at Kamailio and manipulation was a breeze. Thanks guys.

1 0

Tcp socket error with active/active kamailio schema
by Donat Zenichev 02 Nov '17

02 Nov '17

Hi guys. I'm trying to realize active/active schema with kamailio. Topology is as following: active/active kamailio -> routing server (asterisk) Kamailio servers work as registrar/location servers and sbc. Asterisk server performs routing functions for calls. We use sip / sips / ws / wss for signaling. Schema built on aws platform and both kamailio have virtual ip address. So when first kamailio crashes, second one assigns ip address of first kamailio. And vice-versa. Both kamailio listens on both shared addresses all the time (with help of sysctl non lolcal bind function). Problem occurs when first kamailio goes down and second kamailio gets ip address of first one. Asterisk tries to send in-dialog requests (for dialogs that were established on first kamailio), request goes to second kamailio and asterisk gets a socket error. And this is proper behaviour I think, because first kamailio established tcp connection with asterisk from certain port, that is not listened on second kamailio. So that, I think that the solution is to use force_send_socket function, but I'm not confident about it. If anyone has ideas, please send your advices. Thanks in advance. -- -- BR, Donat Zenichev Wnet VoIP team Tel: +380(44) 5-900-808 http://wnet.ua <http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_cam…> Virus-free. www.avg.com <http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_cam…> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

1 0

Kamailio not calling each time
by hanoulia salameh 02 Nov '17

02 Nov '17

Hello, I have a problem with kamailio (v4.4), when i try to call from a sip phone through kamailio, the call is interrupted and hang up automatically but after 4s it continues to retry (I can see in the log file Session Progress) and goes through the asterisk (certified/13.13-cert4) and establishes a normal call (It rings at the client side) while it's still disconnected from the sip phone side But when i try again it works fine sometimes. Am I missing something in my configuration file? What can I show in order to help me? Regards

2 2

Kamailio Realtime Integration with Asterisk
by Floimair Florian 02 Nov '17

02 Nov '17

Hi! I found a few tutorials from Daniel on this topic , the latest being https://kb.asipto.com/asterisk:realtime:kamailio-4.0.x-asterisk-11.3.0-astd… . Has anyone ever tried this with a more recent Asterisk version (13 or newer) and using chan_pjsip instead of chan_sip? I'd be willing to update the tutorial once I get it running but I would like to avoid going through obstacles that were already handled ;-) My desired setup is 2 Asterisk boxes (which share configuration, useres and registrations via DB) behind a Kamailio as Load-balancer (got that working already). With best regards Florian Floimair COMMEND INTERNATIONAL GMBH A-5020 Salzburg, Saalachstraße 51 f.floimair(a)commend.com<mailto:f.floimair@commend.com> http://www.commend.com<http://www.commend.com/> Security and Communication by Commend FN 178618z | LG Salzburg

1 0

Mutual TLS with Skype for Business 2015
by Francisco Valentin Vinagrero 02 Nov '17

02 Nov '17

Hello, I'm trying to replace two old Audiocodes gateways (used to interconnect our Skype for Business infrastructure to the PSTN) with a new Kamailio cluster. I am having some trouble to get the TLS mutual authentication working with Kamailio. For the moment, I'm just trying to receive the incoming OPTIONS from SfB, but I get all the time certificate verification errors: ERROR: tls [tls_util.h:42]: tls_err_ret(): TLS accept:error:14089086:SSL routines:ssl3_get_client_certificate:certificate verify failed ERROR: <core> [tcp_read.c:1330]: tcp_read_req(): ERROR: tcp_read_req: error reading My tls.cfg is quite simple, with the same config for client and server (and one single listen=tls:<my IP>:5061 in the Kamailio.cfg file) [server:default] method = TLSv1+ verify_certificate = yes require_certificate = yes private_key = /usr/local/etc/kamailio/tls/key_gw_sfb.pem certificate = /usr/local/etc/kamailio/tls/cert_gw_sfb.pem # => This certificate's Subject is the DNS alias for the cluster, with all the kamailios in the cluster as Subject Alternative Names ca_list = /usr/local/etc/kamailio/tls/myca_and_sfbca.pem # => Kamailio and Skype for Business are signed by different CAs, so here I concatenated all intermediate and root CAs [client:default] method = TLSv1+ verify_certificate = yes require_certificate = yes private_key = /usr/local/etc/kamailio/tls/key_gw_sfb.pem certificate = /usr/local/etc/kamailio/tls/cert_gw_sfb.pem ca_list = /usr/local/etc/kamailio/tls/myca_and_sfbca.pem When I run Kamailio, I can see incoming OPTIONS from Microsoft Exchange Unified Messaging (UM), whose certificate I verify without any issues. UM presents a certificate issued for a single machine, so no Subject Alternative Names (SANs) are involved. The problem comes with the TLS handshake for the Skype Mediation pool. They have a certificate with Subject = DNS alias and all the physical machines that are behind the alias appear listed as Subject Alternative Names (SANs) in the certificate. As the only difference between UM and Skype's Mediation is the certificate's Subject, I think I am missing something on my configuration to validate the SANs instead of the subject. Is the TLS module doing any reverse DNS lookup to verify this? Thanks, Francisco.

4 11

Reading the P-Assserted-identity header
by Gertjan Wolzak 01 Nov '17

01 Nov '17

Hello Kamailions, I receive anonymous calls where the PAI has a prefix which I need to strip before forwarding the call to a proxy. I am trying to read the the header with $hdr(P-Asserted-Identity) and I tried the $ai pseudovariable, but I get an empty reply back every time. xlog("PAI is $ai"); results in ; "Nov 1 16:19:55 proxy04 /usr/local/sbin/kamailio[14814]: ERROR: <script>: PAI is <null>" Same for xlog("PAI is $hdr(P-Asserted-Identity). This works for the Privacy header but not the P-Asserted-Identity header. Hope someone can tell me what I am doing wrong.... Rgds, Gertjan

3 2

Record-Route IP Value
by Soltanici Ilie 31 Oct '17

31 Oct '17

Hi All, Having the following Header: Record-Route: <sip:192.168.1.1;lr;did=637.07c7c2d7> How can i extract only IP value from this header? Thank You.

2 3

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users