Masking Contact Header - sr-users - kamailio.org

List overview All Threads
Download

Masking Contact Header

Dispatcher problem $avp(dsattrs)...

Local Route blocks

Duarte Rocha

12 Feb 2019 12 Feb '19

1:56 p.m.

Greetings, Is there an automated way of masking\encoding\encrypting the Contact header once it goes through a Kamailio proxy and have it restored? I'm using uac_replace_from() and uac_replace_to() for changing these values and having them restored automatically. Is there any tool like this for Contact Header? Cheers

Attachments:

attachment.html (text/html — 509 bytes)

Reply

Show replies by date

YASIN CANER

12 Feb 12 Feb

2:28 p.m.

Hello You can use topoh and topos module that hiding all topology. If you want to hide only contact header , uac replace is good because it has a ability restore. I assume that hiding contact header because anonymous calls. Right? Regards Yasin caner Duarte Rocha <duarterocha91(a)gmail.com> şunları yazdı (12 Şub 2019 21:56):

Greetings, Is there an automated way of masking\encoding\encrypting the Contact header once it goes through a Kamailio proxy and have it restored? I'm using uac_replace_from() and uac_replace_to() for changing these values and having them restored automatically. Is there any tool like this for Contact Header? Cheers _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Reply

Nicolas Breuer

2:43 p.m.

You cannot hide the contact with Topoh ?

Le 12 févr. 2019 à 20:30, YASIN CANER <caner_yaso(a)hotmail.com> a écrit : Hello You can use topoh and topos module that hiding all topology. If you want to hide only contact header , uac replace is good because it has a ability restore. I assume that hiding contact header because anonymous calls. Right? Regards Yasin caner Duarte Rocha <duarterocha91(a)gmail.com> şunları yazdı (12 Şub 2019 21:56):

Greetings, Is there an automated way of masking\encoding\encrypting the Contact header once it goes through a Kamailio proxy and have it restored? I'm using uac_replace_from() and uac_replace_to() for changing these values and having them restored automatically. Is there any tool like this for Contact Header? Cheers _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

_______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Reply

Alex Balashov

2:45 p.m.

I think the question about the motive for altering the Contact is prerequisite to all this. It is not necessarily apt to presume that topology hiding is the goal. — Sent from mobile, with due apologies for brevity and errors.

On Feb 12, 2019, at 2:43 PM, Nicolas Breuer <Nicolas.Breuer(a)belcenter.biz> wrote: You cannot hide the contact with Topoh ?

Le 12 févr. 2019 à 20:30, YASIN CANER <caner_yaso(a)hotmail.com> a écrit : Hello You can use topoh and topos module that hiding all topology. If you want to hide only contact header , uac replace is good because it has a ability restore. I assume that hiding contact header because anonymous calls. Right? Regards Yasin caner Duarte Rocha <duarterocha91(a)gmail.com> şunları yazdı (12 Şub 2019 21:56):

Greetings, Is there an automated way of masking\encoding\encrypting the Contact header once it goes through a Kamailio proxy and have it restored? I'm using uac_replace_from() and uac_replace_to() for changing these values and having them restored automatically. Is there any tool like this for Contact Header? Cheers _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

_______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

_______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Reply

Marcos Pytel

6:05 p.m.

Hi! Im have an endpoint device that have a problem with long routers headers. I dont know why cut the route when send packet to the server and kamailio crash because cant parse the route. If i active topoh, the router header is encrypted but is bigest than the original. If i active the topos the kamailio crashed for another reason (I need try with the lastest version). There is another way to send routes with less info? Or other config to fix it? Thanks! Marcos. Obtener Outlook para Android On Tue, Feb 12, 2019 at 4:48 PM -0300, "Alex Balashov" <abalashov(a)evaristesys.com> wrote: I think the question about the motive for altering the Contact is prerequisite to all this. It is not necessarily apt to presume that topology hiding is the goal. — Sent from mobile, with due apologies for brevity and errors.

On Feb 12, 2019, at 2:43 PM, Nicolas Breuer wrote: You cannot hide the contact with Topoh ?

Le 12 févr. 2019 à 20:30, YASIN CANER a écrit : Hello You can use topoh and topos module that hiding all topology. If you want to hide only contact header , uac replace is good because it has a ability restore. I assume that hiding contact header because anonymous calls. Right? Regards Yasin caner Duarte Rocha şunları yazdı (12 Şub 2019 21:56):

Greetings, Is there an automated way of masking\encoding\encrypting the Contact header once it goes through a Kamailio proxy and have it restored? I'm using uac_replace_from() and uac_replace_to() for changing these values and having them restored automatically. Is there any tool like this for Contact Header? Cheers _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

_______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

_______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

_______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Reply

Henning Westerholt

13 Feb 13 Feb

3:19 a.m.

Am Mittwoch, 13. Februar 2019, 00:05:46 CET schrieb Marcos Pytel:

Im have an endpoint device that have a problem with long routers headers. I dont know why cut the route when send packet to the server and kamailio crash because cant parse the route. If i active topoh, the router header is encrypted but is bigest than the original. If i active the topos the kamailio crashed for another reason (I need try with the lastest version). There is another way to send routes with less info? Or other config to fix it? [..]

Hello Marcos, you can certainly use the textops module to remove headers, but in the case of the Route header it will probably break something regarding the SIP protocol. Kamailio should not crash if it encounters a invalid header. Can you open a bug report with more information about this in our issue tracker on github? Then this crash could be just fixed. Best regards, Henning -- Henning Westerholt - https://skalatan.de/blog/ Kamailio services - https://skalatan.de/services Kamailio security assessment - https://skalatan.de/de/assessment

Reply

Nicolas Breuer

3:54 a.m.

I tried and indeed the contact header is masked with topoh. Just one question : The masquerading is done after siptrace module because the original trace is stored in database. I suppose it's the expected behavior. I can also see that line in the trace : TH: uch Any ideas? -----Message d'origine----- De : sr-users <sr-users-bounces(a)lists.kamailio.org> De la part de Henning Westerholt Envoyé : mercredi 13 février 2019 09:20 À : sr-users(a)lists.kamailio.org Objet : Re: [SR-Users] Masking Contact Header Am Mittwoch, 13. Februar 2019, 00:05:46 CET schrieb Marcos Pytel:

Im have an endpoint device that have a problem with long routers headers. I dont know why cut the route when send packet to the server and kamailio crash because cant parse the route. If i active topoh, the router header is encrypted but is bigest than the original. If i active the topos the kamailio crashed for another reason (I need try with the lastest version). There is another way to send routes with less info? Or other config to fix it? [..]

Hello Marcos, you can certainly use the textops module to remove headers, but in the case of the Route header it will probably break something regarding the SIP protocol. Kamailio should not crash if it encounters a invalid header. Can you open a bug report with more information about this in our issue tracker on github? Then this crash could be just fixed. Best regards, Henning -- Henning Westerholt - https://skalatan.de/blog/ Kamailio services - https://skalatan.de/services Kamailio security assessment - https://skalatan.de/de/assessment _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Reply

YASIN CANER

4:58 a.m.

Hello, if there is a unrelated chars in SIP trace , there may be str len mismatch for that module . Could you share header? Thanks ________________________________ From: sr-users <sr-users-bounces(a)lists.kamailio.org> on behalf of Nicolas Breuer <Nicolas.Breuer(a)belcenter.biz> Sent: Wednesday, February 13, 2019 11:54 AM To: Kamailio (SER) - Users Mailing List Subject: Re: [SR-Users] Masking Contact Header I tried and indeed the contact header is masked with topoh. Just one question : The masquerading is done after siptrace module because the original trace is stored in database. I suppose it's the expected behavior. I can also see that line in the trace : TH: uch Any ideas? -----Message d'origine----- De : sr-users <sr-users-bounces(a)lists.kamailio.org> De la part de Henning Westerholt Envoyé : mercredi 13 février 2019 09:20 À : sr-users(a)lists.kamailio.org Objet : Re: [SR-Users] Masking Contact Header Am Mittwoch, 13. Februar 2019, 00:05:46 CET schrieb Marcos Pytel:

Im have an endpoint device that have a problem with long routers headers. I dont know why cut the route when send packet to the server and kamailio crash because cant parse the route. If i active topoh, the router header is encrypted but is bigest than the original. If i active the topos the kamailio crashed for another reason (I need try with the lastest version). There is another way to send routes with less info? Or other config to fix it? [..]

Hello Marcos, you can certainly use the textops module to remove headers, but in the case of the Route header it will probably break something regarding the SIP protocol. Kamailio should not crash if it encounters a invalid header. Can you open a bug report with more information about this in our issue tracker on github? Then this crash could be just fixed. Best regards, Henning -- Henning Westerholt - https://skalatan.de/blog/ Kamailio services - https://skalatan.de/services Kamailio security assessment - https://skalatan.de/de/assessment _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Reply

YASIN CANER

28 Feb 28 Feb

5:32 a.m.

Hello I found TH header what is mean.It is related with Dialog module SIP headers to be added when sending local generated requests (e.g., BYE) to callee. It can be useful when you use topoh module with call-id masking (see the docs of topoh module). http://kamailio.org/docs/modules/5.2.x/modules/dialog.html modparam("dialog", "lreq_callee_headers", "TH: dlh\r\n") Yasin CANER ________________________________ From: YASIN CANER <caner_yaso(a)hotmail.com> Sent: Wednesday, February 13, 2019 12:58 PM To: Nicolas Breuer; Kamailio (SER) - Users Mailing List Subject: Re: [SR-Users] Masking Contact Header Hello, if there is a unrelated chars in SIP trace , there may be str len mismatch for that module . Could you share header? Thanks ________________________________ From: sr-users <sr-users-bounces(a)lists.kamailio.org> on behalf of Nicolas Breuer <Nicolas.Breuer(a)belcenter.biz> Sent: Wednesday, February 13, 2019 11:54 AM To: Kamailio (SER) - Users Mailing List Subject: Re: [SR-Users] Masking Contact Header I tried and indeed the contact header is masked with topoh. Just one question : The masquerading is done after siptrace module because the original trace is stored in database. I suppose it's the expected behavior. I can also see that line in the trace : TH: uch Any ideas? -----Message d'origine----- De : sr-users <sr-users-bounces(a)lists.kamailio.org> De la part de Henning Westerholt Envoyé : mercredi 13 février 2019 09:20 À : sr-users(a)lists.kamailio.org Objet : Re: [SR-Users] Masking Contact Header Am Mittwoch, 13. Februar 2019, 00:05:46 CET schrieb Marcos Pytel:

Im have an endpoint device that have a problem with long routers headers. I dont know why cut the route when send packet to the server and kamailio crash because cant parse the route. If i active topoh, the router header is encrypted but is bigest than the original. If i active the topos the kamailio crashed for another reason (I need try with the lastest version). There is another way to send routes with less info? Or other config to fix it? [..]

Hello Marcos, you can certainly use the textops module to remove headers, but in the case of the Route header it will probably break something regarding the SIP protocol. Kamailio should not crash if it encounters a invalid header. Can you open a bug report with more information about this in our issue tracker on github? Then this crash could be just fixed. Best regards, Henning -- Henning Westerholt - https://skalatan.de/blog/ Kamailio services - https://skalatan.de/services Kamailio security assessment - https://skalatan.de/de/assessment _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Reply

Marcos Pytel

13 Feb 13 Feb

6:02 a.m.

Hi Henning! When I receive a bad route, Kamailio doesn't stop working. But, the bad route generate problems with the call. The call does not hangup and the customer can't make other call because the previus call is still active. Please, see the attached log! Thank you! Marcos. -----Mensaje original----- De: Henning Westerholt <hw(a)kamailio.org> Enviado el: miércoles 13 de febrero del 2019 05:20 Para: sr-users(a)lists.kamailio.org CC: Marcos Pytel <marcos.pytel(a)cotesma.com.ar> Asunto: Re: [SR-Users] Masking Contact Header Am Mittwoch, 13. Februar 2019, 00:05:46 CET schrieb Marcos Pytel:

Im have an endpoint device that have a problem with long routers headers. I dont know why cut the route when send packet to the server and kamailio crash because cant parse the route. If i active topoh, the router header is encrypted but is bigest than the original. If i active the topos the kamailio crashed for another reason (I need try with

the lastest version).

There is another way to send routes with less info? Or other config to fix it? [..]

Hello Marcos, you can certainly use the textops module to remove headers, but in the case of the Route header it will probably break something regarding the SIP protocol. Kamailio should not crash if it encounters a invalid header. Can you open a bug report with more information about this in our issue tracker on github? Then this crash could be just fixed. Best regards, Henning -- Henning Westerholt - https://skalatan.de/blog/ Kamailio services - https://skalatan.de/services Kamailio security assessment - https://skalatan.de/de/assessment

Reply

2146

days inactive

2162

days old

sr-users@lists.kamailio.org

Manage subscription

9 comments

6 participants

tags (0)

participants (6)

Alex Balashov
Duarte Rocha
Henning Westerholt
Marcos Pytel
Nicolas Breuer
YASIN CANER