Hello,

the default cfg is usually not a bad starting point. There are e.g. also parts in it for authentication, both for username/password based and also for ip-based.

You can actually activate the ip authentication with a define, I think.

Cheers,

Henning

--

Henning Westerholt – https://skalatan.de/blog/

Kamailio services – https://gilawa.com

From: Blake Ivey via sr-users <sr-users@lists.kamailio.org>
Sent: Sonntag, 28. April 2024 23:46
To: sr-users@lists.kamailio.org
Cc: Blake Ivey <uga5324@gmail.com>
Subject: [SR-Users] Outbound Proxy/Forwarder

Hi everyone,

New user who is trying to make an outbound proxy to route a lot of freepbx boxes for outbound calls. 

I got this setup and working using dsiprouter. Calls come in from freepbx trunk using outbound proxy, authenticated using IP auth, and then gets signed with our stirshaken cert, then routes out to our carriers. 

Interested in using plain kamailio. Got everything compiled and libstirshaken compiled. 

Just wanted to see if someone could point me in the right direction for the cfg file. 

I assume I would match how I have it in dsiprouter. That config has a lot of things I'm not using and having a hard time deciphering it. 

My thoughts on what I need:

MySQL database. Have a table for ip auth,  a table for voice carriers, and a table for 911 carriers. 

Invite comes in, it checks ip auth table and responds with 403 if it's not on the list. If it is, proceed to stir shaken signing, and then route the call? I assume I will need to have some logic to tell voice calls and emergency calls. 

I got plain old routing/forwarding working and now want to focus on locking it down. 

Any thoughts, examples configs, anything would be awesome. 

I am hoping to get this working and then having a primary/standby or even load balancing them but im in the very early stages of trying to get my head around Kamailio. 

Thanks for any insights!