-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi,
I've got my Kamailio script working, hurray! I had created SRV and NAPTR records for the proxies but was missing a critical line in the script:
dns_try_naptr=yes
This enables Kamailio to query the NAPTR and SRV records and then decide on the appropriate traffic to talk to the other proxy for non local calls.
http://kamailio.net/dokuwiki/doku.php/core-cookbook:3.0.x#dns_try_naptr
This was tough for a Kamailio noob like myself :-) I've put the whole thing on my wiki in case anybody else would like to build a federated SIP system. https://www.johncahill.net/wiki/index.php/Skype_like_conferencing_System
Thanks again for the help Daniel. I will update your wiki also, (which I shamelessly ripped off), if you give me write access.
Cheers, John
On 21/05/13 13:15, johnc wrote:
Hi,
I've worked out what's going wrong and I fear there is a mistake in
your config at:
http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour
inter-domain calls are going in plain text over UDP. I can see the
invites at the reciving end doing a packet capture using tcpdump. My firewall blocks these thus explaining why nothing was seen in the kamailio log at that end.
tcpdump -vvv -i eth0 src 46.43.48.253 and udp and port 5060 >debug.txt
How do I make all inter-domain traffic only TLS?
I've ensured that there are just valid TLS SRV records at both ends:
host -t SRV _sips._tcp.unspeak.im _sips._tcp.unspeak.im has SRV record 0 0 5061 unspeak.im. host -t SRV _sips._tcp.atoll.dmcip.com _sips._tcp.atoll.dmcip.com has SRV record 0 10 5061 atoll.dmcip.com.
Many thanks for all your help so far.
Regards, John
-------- Original Message -------- Subject: Re: [SR-Users]
http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour
Date: Tue, 21 May 2013 05:28:31 +0100 From: johnc johnc@aktivix.org Reply-To: Kamailio (SER) - Users Mailing List
To: miconda@gmail.com, "Kamailio (SER) - Users Mailing List"
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi,
Here is a The kamailio log from the sip proxy (atoll.dmcip.com) of the caller. There is nothing in the called server's (unspeak.im) logs from the call.
johnc@atoll.dmcip.com ----Call---> gnuday@unspeak.im
The call gets as far as "SIP 100 trying".
Both servers have only port 5061 TCP open on the firewall to only allow TLS.
Any help would be greatly appreciated.
Many thanks.
Regards, John -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iQIcBAEBAgAGBQJRmvfnAAoJELy1jPQ1KER7O8EP/RfxYhBP4zhP6ioZq/piMIQX 6zCEX+dC087MHtST3lOqx1oQf5ERHbR8vRpbuZyoflnKHspAijwEvuQwWuPfGXlR RQlMowAMcKuEZ6RL4FS+Tm2VlFz+HFxH4KxJgOi721DGdzUrT4eKUf4hD3vsRlj/ QY7fLWiNj5TgHFu4yRu/OSVQ5DYr+PFrV8T7GtwgbCCq2Wzu1TdtuLTKJeUlHQJ/ v9uQxLJyFTUsjGWdWj1ynEBJ1CoYMwWj85eorjsylW/PQ49SJupNd1w4CkagCpAO 78h+qgcm2znxJajiA/sqD+31qzGCx2muSEVfFApg5JsLanr62xQuhAGYxLhDMR6u yda9ItUlFWrzrAy+TGf9NZyBN2l+pjAU2O4jWuEJRZ0znf9AshwS/zvRdbkGecqa E26eMSnfWks+JvE5YjIShyaKxXEcrNYm9RdrUQbKqzHwM0zS+/V42iZp9pZA73+T pWdwWasi0P5H1bBhLkdIO6mxidsahMbkUjeOeAzP7JVKszvjWow4ks/Pd/b+Rk6m /3A2bAyGn3SkPo4PveXBDGGdqA5sEMivm4WOBAGkXN2dIDtXCZ2bVGv7ucsm8qzC gAJ80cdiH2n3x8WFp9xlRBmcqG89b8JUW8I2KDjSCkEnltUByA7MC3YXQ+MdrlrI lBnxCsMyckAXGJnZniD+ =Zcfa -----END PGP SIGNATURE-----
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users