27 Feb
2014
27 Feb
'14
12:06 p.m.
Hi,
customers PBX----trunk-----kamailio------------freeswitch-------------carrier
We already add Trusted IP’s via SIREMIS 4.0
is it possible with Kamailio to have customers calls come in on a trusted IP and when they
send calls we add a header with a [client id] which we can remove on the next ip switch
upstream
So example
Call comes in from customer with IP:
their trusted IP source xx.xx.xx.xx
add header with their client ID
route to PSTN
Then my upstream switch will process the customers call and remove the header before
sending to our voip carrier. Basically my ip switch will evaluate the client id header for
billing, process and strip the header back out.
Thanks
Tony
28 Feb
28 Feb
4:29 a.m.
On Thursday 27 February 2014 18:06:13 Tony Turner wrote:
is it possible with Kamailio to have customers calls
come in on a trusted
IP and when they send calls we add a header with a [client id] which we
can remove on the next ip switch upstream
So example
Call comes in from customer with IP:
their trusted IP source xx.xx.xx.xx
add header with their client ID
Offcourse this is possible. I do something similar to indicat to upstream sip
servers the call is accounted for.
I store trusted IPs in the address table and check for INVITES from those IPs.
If one matches I make a lookup in the usr_preferences table to figure out what
client it is for:
route[AUTHENTICATE]
{
if(!is_method("REGISTER") && allow_address("3",
"$si", "$sp") &&
$proto=="tcp")
{
if(!avp_db_query("select username from usr_preferences where
attribute='ip_authentication' and (value='$si:$sp' or value like
'$si:%')
order by length(value) limit 1"))
{
sl_send_reply("403", "Not Allowed");
exit;
}
$avp(au)=$avp(i:1);
}
else
{
#normal authentication
...
append_hf() to append a header. Be sure to remove the header from all incoming
requests first (remove_hf()).
BTW this is insecure for udp traffic. If someone is able to spoof source
adresses this might be abused, hence the tcp only condition.
--
POCOS B.V. - Croy 9c - 5653 LC Eindhoven
Telefoon: 040 293 8661 - Fax: 040 293 8658
http://www.pocos.nl/ - http://www.sipo.nl/
K.v.K. Eindhoven 17097024
6:16 a.m.
Hi Daniel,
Perfect thanks
regards
Tony
-----Original Message-----
From: Daniel Tryba
Sent: Friday, February 28, 2014 9:29 AM
To: sr-users(a)lists.sip-router.org
Subject: Re: [SR-Users] Add Header
On Thursday 27 February 2014 18:06:13 Tony Turner wrote:
is it possible with Kamailio to have customers calls
come in on a trusted
IP and when they send calls we add a header with a [client id] which we
can remove on the next ip switch upstream
So example
Call comes in from customer with IP:
their trusted IP source xx.xx.xx.xx
add header with their client ID
Offcourse this is possible. I do something similar to indicat to upstream
sip
servers the call is accounted for.
I store trusted IPs in the address table and check for INVITES from those
IPs.
If one matches I make a lookup in the usr_preferences table to figure out
what
client it is for:
route[AUTHENTICATE]
{
if(!is_method("REGISTER") && allow_address("3",
"$si", "$sp") &&
$proto=="tcp")
{
if(!avp_db_query("select username from usr_preferences where
attribute='ip_authentication' and (value='$si:$sp' or value like
'$si:%')
order by length(value) limit 1"))
{
sl_send_reply("403", "Not Allowed");
exit;
}
$avp(au)=$avp(i:1);
}
else
{
#normal authentication
...
append_hf() to append a header. Be sure to remove the header from all
incoming
requests first (remove_hf()).
BTW this is insecure for udp traffic. If someone is able to spoof source
adresses this might be abused, hence the tcp only condition.
--
POCOS B.V. - Croy 9c - 5653 LC Eindhoven
Telefoon: 040 293 8661 - Fax: 040 293 8658
http://www.pocos.nl/ - http://www.sipo.nl/
K.v.K. Eindhoven 17097024
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users(a)lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
3954
days inactive
3955
days old
2 comments
2 participants
participants (2)
-
Daniel Tryba -
Tony Turner