-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I've got my Kamailio script working, hurray! I had created SRV and NAPTR records for the proxies but was missing a critical line in the script:

dns_try_naptr=yes

This enables Kamailio to query the NAPTR and SRV records and then decide on the appropriate traffic to talk to the other proxy for non local calls.

 http://kamailio.net/dokuwiki/doku.php/core-cookbook:3.0.x#dns_try_naptr

This was tough for a Kamailio noob like myself :-) I've put the whole thing on my wiki in case anybody else would like to build a federated SIP system.
https://www.johncahill.net/wiki/index.php/Skype_like_conferencing_System

Thanks again for the help Daniel. I will update your wiki  also, (which I shamelessly ripped off), if you give me write access.

Cheers,
John

On 21/05/13 13:15, johnc wrote:
>
> Hi,
>
> I've worked out what's going wrong and I fear there is a mistake in your config at:
>
> http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour
>
> inter-domain calls are going in plain text over UDP. I can see the invites at the reciving end doing a packet capture using tcpdump. My firewall blocks these thus explaining why nothing was seen in the kamailio log at that end.
>
> tcpdump -vvv -i eth0 src 46.43.48.253 and udp and port 5060 >debug.txt
>
> How do I make all inter-domain traffic only TLS?
>
> I've ensured that there are just valid TLS SRV records at both ends:
>
> host -t SRV _sips._tcp.unspeak.im
> _sips._tcp.unspeak.im has SRV record 0 0 5061 unspeak.im.
> host -t SRV _sips._tcp.atoll.dmcip.com
> _sips._tcp.atoll.dmcip.com has SRV record 0 10 5061 atoll.dmcip.com.
>
> Many thanks for all your help so far.
>
> Regards,
> John
>
>
> -------- Original Message --------
> Subject: Re: [SR-Users] http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour
> Date: Tue, 21 May 2013 05:28:31 +0100
> From: johnc <johnc@aktivix.org>
> Reply-To: Kamailio (SER) - Users Mailing List <sr-users@lists.sip-router.org>
> To: miconda@gmail.com, "Kamailio (SER) - Users Mailing List" <sr-users@lists.sip-router.org>
>
>
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi,
>
> Here is a The kamailio log from the sip proxy (atoll.dmcip.com) of the
> caller. There is nothing in the called server's (unspeak.im) logs from
> the call.
>
> johnc@atoll.dmcip.com ----Call---> gnuday@unspeak.im
>
> The call gets as far as "SIP 100 trying".
>
>
> Both servers have only port 5061 TCP open on the firewall to only
> allow TLS.
>
> Any help would be greatly appreciated.
>
> Many thanks.
>
> Regards,
> John
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.12 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQIcBAEBAgAGBQJRmvfnAAoJELy1jPQ1KER7O8EP/RfxYhBP4zhP6ioZq/piMIQX
> 6zCEX+dC087MHtST3lOqx1oQf5ERHbR8vRpbuZyoflnKHspAijwEvuQwWuPfGXlR
> RQlMowAMcKuEZ6RL4FS+Tm2VlFz+HFxH4KxJgOi721DGdzUrT4eKUf4hD3vsRlj/
> QY7fLWiNj5TgHFu4yRu/OSVQ5DYr+PFrV8T7GtwgbCCq2Wzu1TdtuLTKJeUlHQJ/
> v9uQxLJyFTUsjGWdWj1ynEBJ1CoYMwWj85eorjsylW/PQ49SJupNd1w4CkagCpAO
> 78h+qgcm2znxJajiA/sqD+31qzGCx2muSEVfFApg5JsLanr62xQuhAGYxLhDMR6u
> yda9ItUlFWrzrAy+TGf9NZyBN2l+pjAU2O4jWuEJRZ0znf9AshwS/zvRdbkGecqa
> E26eMSnfWks+JvE5YjIShyaKxXEcrNYm9RdrUQbKqzHwM0zS+/V42iZp9pZA73+T
> pWdwWasi0P5H1bBhLkdIO6mxidsahMbkUjeOeAzP7JVKszvjWow4ks/Pd/b+Rk6m
> /3A2bAyGn3SkPo4PveXBDGGdqA5sEMivm4WOBAGkXN2dIDtXCZ2bVGv7ucsm8qzC
> gAJ80cdiH2n3x8WFp9xlRBmcqG89b8JUW8I2KDjSCkEnltUByA7MC3YXQ+MdrlrI
> lBnxCsMyckAXGJnZniD+
> =Zcfa
> -----END PGP SIGNATURE-----
>
>
>
>
> _______________________________________________
> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users@lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJRm8EmAAoJELy1jPQ1KER7IzAP+gMoS2KCMngGPqJdOOSgwVaN
MkXNfl0AvaueQAPS3UbWRdRRxdae4NrLLcZo130wSDhiHFgQR+/i828gw325l0yC
+NqAPwNR8VkHByrB8dbOJ6dx91bi/YGuUBI9KWITofAYMtwBBZEu9Svnzi/yxCsa
TMTdk98ZrDy5TrBLFBcbW8721jqVFlXLmFKSfN8NUfztT57Vt70pk7LKry/MNNWO
cEva2AuQHfZF8UoI6pdIsoxoz5KjLvu2ij9fxG1QQQsGseU8X8xB9U1YM7y+qIPO
4ym9TJkaEVU7QOdZcocXBP4Jx94Ft4Va2hIKyovlxOdYZv9tIVpnthMGiP3S+Ryl
+iN0Sp+oWC9LItJUX9Bduhv8Ral//UzfwLFepbeFiW09x5wv/q307Hk3akYKwfgs
qDmIFtG5aZLED7WsPu8TuY+1VhPqwFa1jEuriJeh833W59nEFHrJ04S9+QEjvRWR
A4xNzk8z0w6qP57gWRCsw9QvVyw2xEY/xlocoHIrNLJvJSgXhA5JvxPargPNoEoJ
bGvxYSrqUAv3CONaUtrOgwzaGGKebJHTWRfIeK8Iq6+8uRvPLdXhrAuZ67maexpZ
Wm4nIohQhECNIlzPowKJM3ALv+/3N53HaTImX5Wrf4CCIHHLt7t1sbzkvML1o1Wn
8p0H75miO+m/F/3XL+ot
=V7yj
-----END PGP SIGNATURE-----