Using multiple domains in one server is pretty hard.
The schema even fights with me. I can't have both "graff" in the
"isc.org" domain and "graff" in the "flame.org" domain, for instance,
at least with the same user name. I think the unique field there
should be a <user, domain> tuple. Additionally, all tables should
probably grow a domain column, and lookup() would take that as an
argument (defaulting to the host-portion of the URI, probably)
That also makes things easier on routing rules, and on aliasing, and
on user interfaces, at least IMHO.
Are there any plans to make this sort of thing much easier? If not, I
may decide to hack on it a bit and see what I come up with.
Of course, I'd also like to replace the scripting language with
embedded Perl, but... :)
--Michael
Hello,
I wanted to configure ser so that only registered user are allowed to make calls. I have set up digest authentication but still unregistered users can make calls. I wonder if I'm missing something on my config file (as attached below).
Could someone please tell me what am I doing wrong, or provide me some configuration example on solving this issue?
Thanks and regards,
Claudio
###########
ser.conf
###########
route{
# Do strict routing if pre-loaded route headers present
rewriteFromRoute();
if (uri==myself) {
if (method=="REGISTER") {
if (!www_authorize("<my_ip>", "subscriber")) {
www_challenge("<my_ip>", "0");
break;
};
if (method=="INVITE" & !check_from()) {
sl_send_reply("403","Forbidden");
break;
};
save("location");
break;
};
# native SIP destinations are handled using our USRLOC DB
if (!lookup("location")) {
sl_send_reply("404", "Not Found");
break;
};
};
# forward to current uri now
if (!t_relay()) {
sl_reply_error();
};
}
##########
Hi,
I downloaded SER yesterday and I am trying to
run it as a UAS.
I am using the sample configuration uas.cfg.
I modified it so that on receiving an INVITE
I send a 200 OK. Now the problem is when I
use the t_reply command to send the 200 OK,
it doesn't add any SDP part to it.
Is there anyway an SDP can be added to the
200 OK response to the INVITE.
Appreciate any help
Viji
__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com
Is anybody aware of any SIP ALG developed or being developed for linux/freebsd?
Jaime
PS: If nobody is looking at the FCP client side for SER, I would like to
contribute in my spare time. Please let me know where should I start and may be
I could give it a try.
Jiri Kuthan <jiri(a)iptel.org> on 08/01/2003 21:39:20
To: Jaime GILL/EN/HTLUK@HTLUK
serusers(a)lists.iptel.org
cc:
Subject: Re: [Serusers] FCP support in SER
This piece of work is stalling for some reasons.
First, the gentlemen who was supposed to integrate an FCP
client silently stepped away from this assignment. FCP
server on linux is working.
The other problem with FCP is there are no real standards.
I was expecting the Midcom WG in the IETF to come up with one.
Instead, it spent two years with doing things whose use
I very strongly doubt.
If there is any volunteer on this mailing list who would
wish to complete or create the FCP client module, we will be
glad to provide guidance.
Users willing to traverse NATs may consider STUN/UPnP or ALGs
as an alternative solution. Users willing to traverse firewalls
may need to use an ALG or VPN technology. Unfortunately, NAT/FWs
break too many things and there is no one-size-fits-it-all
solution addressing all scenarios.
-Jiri
At 06:14 PM 1/8/2003, jaime.gill(a)orange.co.uk wrote:
>Hi,
>
>I am wondering if this is the right place to ask, but here it goes.
>
>Is the SER software going to incorporate the client side of FCP (Firewall
>Control Protcol) as a module at some point?
>
>Regards,
>
>Jaime
>
>
>
>*******************************************************************************
>Important.
>Confidentiality: This communication is intended for the above-named person and
>may be confidential and/or legally privileged. Any opinions expressed in this
>communication are not necessarily those of the company. If it has come to you
>in error you must take no action based on it, nor must you copy or show it to
>anyone; please delete/destroy and inform the sender immediately.
>
>Monitoring/Viruses
>Orange may monitor all incoming and outgoing emails in line with current
>legislation. Although we have taken steps to ensure that this email and
>attachments are free from any virus, we advise that in keeping with good
>computing practice the recipient should ensure they are actually virus free.
>
>Orange PCS Limited is a subsidiary of Orange SA and is registered in England No
>2178917, with its address at St James Court, Great Park Road, Almondsbury Park,
>Bradley Stoke, Bristol BS32 4QJ.
>*******************************************************************************
>
>_______________________________________________
>Serusers mailing list
>serusers(a)lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers
--
Jiri Kuthan http://iptel.org/~jiri/
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
*******************************************************************************
Important.
Confidentiality: This communication is intended for the above-named person and
may be confidential and/or legally privileged. Any opinions expressed in this
communication are not necessarily those of the company. If it has come to you
in error you must take no action based on it, nor must you copy or show it to
anyone; please delete/destroy and inform the sender immediately.
Monitoring/Viruses
Orange may monitor all incoming and outgoing emails in line with current
legislation. Although we have taken steps to ensure that this email and
attachments are free from any virus, we advise that in keeping with good
computing practice the recipient should ensure they are actually virus free.
Orange PCS Limited is a subsidiary of Orange SA and is registered in England No
2178917, with its address at St James Court, Great Park Road, Almondsbury Park,
Bradley Stoke, Bristol BS32 4QJ.
*******************************************************************************
Hello,
I'm trying to compile the radius_acc modude but have run into the following error:
######
make[1]: Entering directory `/home/cthorell/ser-0.8.10/modules/radius_acc'
gcc -fPIC -DPIC -O9 -funroll-loops -Wcast-align -Wall -m486 -malign-loops=4 -DNAME='"ser"' -DVERSION='"0.8.10"' -DARCH='"i386"' -DOS='"linux"' -DCOMPILER='"gcc 2.95"' -D__CPU_i386 -DCFG_DIR='"/usr/local/etc/ser/"' -DPKG_MALLOC -DSHM_MEM -DSHM_MMAP -DADAPTIVE_WAIT -DADAPTIVE_WAIT_LOOPS=1024 -DDNS_IP_HACK -DUSE_IPV6 -DDBG_QM_MALLOC -DFAST_LOCK -DHAVE_GETHOSTBYNAME2 -DHAVE_UNION_SEMUN -DHAVE_SCHED_YIELD -c acc.c -o acc.o
acc.c:38: radiusclient.h: File not found
make[1]: *** [acc.o] Error 1
make[1]: Leaving directory `/home/cthorell/ser-0.8.10/modules/radius_acc'
######
I can't find radiusclient.h either on ser-0.8.10 or freeradius-0.8.1 directories. Where can I find this file?
Thanks,
Claudio
I got SER up and running with a whopping total of three "domains"
being served on the same server. It was mostly painless, if missing some
features I'd like to have seen (more on that in later messages.)
What open source products are people using for voice mail, voice menu
prompts (press 1 for sales, press 2 for the executative restroom) and
for conference calls (which include PSTN calls as well as IP phones)?
--Michael
Hi,
Are there any plans to add SIP Symmetric Response support
(http://www.iptel.org/info/players/ietf/firewall/nat/draft-ietf-sip-symmetri…)
into SER, so that it would be possible to use compliant UAs behind NATs
with SER being on a public IP? The idea is simple: when the SIP packet
is received from UA, the server checks if an empty `rport' parameter
is present in the first Via field, and if yes then compares IP:PORT in
the first Via header with the actual IP:PORT this request came from,
and adds `received' and `rport' parameters into the header if either
doesn't match before forwarding request further.
Then, when replying or forwarding the request, the server checks if
any of received or rport is present and uses it instead of the
UA-provided values in corresponding Via header.
Please let me know if there are work in progress on this, so that
I will not have to reinvent the wheel.
Thanks!
-Maxim
Hi,
I am wondering if this is the right place to ask, but here it goes.
Is the SER software going to incorporate the client side of FCP (Firewall
Control Protcol) as a module at some point?
Regards,
Jaime
*******************************************************************************
Important.
Confidentiality: This communication is intended for the above-named person and
may be confidential and/or legally privileged. Any opinions expressed in this
communication are not necessarily those of the company. If it has come to you
in error you must take no action based on it, nor must you copy or show it to
anyone; please delete/destroy and inform the sender immediately.
Monitoring/Viruses
Orange may monitor all incoming and outgoing emails in line with current
legislation. Although we have taken steps to ensure that this email and
attachments are free from any virus, we advise that in keeping with good
computing practice the recipient should ensure they are actually virus free.
Orange PCS Limited is a subsidiary of Orange SA and is registered in England No
2178917, with its address at St James Court, Great Park Road, Almondsbury Park,
Bradley Stoke, Bristol BS32 4QJ.
*******************************************************************************
hi,
i have met the same problem with acc. i can get the invite message for accounting,but i can't get the bye message, i also capture the udp packages on ser server, i use MSN for UA, i find the sip messeges like: invite,100 trying,180 ringing ,200 ok(for invite),but when i hangup, there are not bye message, it's like sending bye message from UA to UA directly,while not going throug ser server,so there is not BYE message for accounting, is it true?
how to get the bye message for accounting? please help.
my ser.cfg is like:
..
loadmodule "/usr/local/lib/ser/modules/mysql.so"
loadmodule "/usr/local/lib/ser/modules/sl.so"
loadmodule "/usr/local/lib/ser/modules/acc.so"
#loadmodule "/usr/local/lib/ser/modules/auth.so"
loadmodule "/usr/local/lib/ser/modules/print.so"
loadmodule "/usr/local/lib/ser/modules/tm.so"
loadmodule "/usr/local/lib/ser/modules/rr.so"
loadmodule "/usr/local/lib/ser/modules/maxfwd.so"
loadmodule "/usr/local/lib/ser/modules/usrloc.so"
loadmodule "/usr/local/lib/ser/modules/registrar.so"
..
modparam("acc", "db_url","sql://ser:heslo@localhost/ser")
modparam("acc","report_ack",1)
modparam("acc","log_level",1)
modparam("acc", "acc_flag", 1 )
modparam("acc", "missed_flag", 3 )
# -- tm params --
modparam("tm", "fr_timer", 10 )
modparam("tm", "fr_inv_timer", 20 )
modparam("tm", "wt_timer", 10 )
..
route{
# initial sanity checks -- messages with
# max_forwars==0, or excessively long requests
if (!mf_process_maxfwd_header("10")) {
sl_send_reply("483","Too Many Hops");
break;
};
if (len_gt( max_len )) {
sl_send_reply("513", "Message too big");
break;
};
# Do strict routing if pre-loaded route headers present
rewriteFromRoute();
# if the request is for other domain use UsrLoc
# (in case, it does not work, use the following command
# with proper names and addresses in it)
if (uri==myself) {
if (method=="REGISTER") {
# Uncomment this if you want to use digest authentication
# if (!www_authorize("192.168.139.125", "subscriber")) {
# www_challenge("192.168.139.125", "0");
# break;
# };
save("location");
break;
};
# native SIP destinations are handled using our USRLOC DB
if (!lookup("location")) {
sl_send_reply("404", "Not Found");
break;
};
};
# set for accounting (the same value as in acc_flag!)
if (method=="INVITE" || method=="BYE"){
setflag(1);
# ... and also report on missed calls ... note that reporting
# on missed calls is mutually exclusive with silent C timer
#
setflag(3);
};
# forward to current uri now
if (!t_relay()) {
sl_reply_error();
};
}
thanks!