[Serusers] Call accounting with NAT problem
Shaharyar Awan
shaharyarawan at yahoo.com
Tue Aug 10 14:00:59 CEST 2004
The problem that I am facing is about accounting
missed calls. When I try to turn the
missed calls module On by putting in the following
chunk of code the missed
calls are reported, but the Nating module somehow gets
disabled and the RTP
tries to go through directly. The scenario can be
realized as
Phone 1 <----------(SER)------------>Phone 2
Private IP Global IP Private IP
Now as we can see the ser is on global IP and the
phones are local.
When there is no missed calls chunk of code in SER.cfg
then SER works fine
and phone1 first sends RTP to global IP SER and it
forwards it to the
other phone 2 . But when I insert the code then SER
tries to make them
direct and this is not possible as both phones are
behind different
NATs. My ser.cfg file is given below ...I have
seaparated that piece of
code by marking aswell as u can see below .. Can
someone please tell me
what's wrong ???
I am using SER development version downloaded from
CVS.
#
# simple quick-start config script
#
# ----------- global configuration parameters
------------------------
debug=9 # debug level (cmd line: -dddddddddd)
fork=yes
log_stderror=yes
#listen=202.83.___.___
#alias=202.83.___.___
check_via=no # (cmd. line: -v)
dns=no # (cmd. line: -r)
rev_dns=no # (cmd. line: -R)
port=5060
children=4
fifo="/tmp/ser_fifo"
# ------------------ module loading
----------------------------------
# Uncomment this if you want to use SQL database
loadmodule "/usr/local/lib/ser/modules/mysql.so"
loadmodule "/usr/local/lib/ser/modules/sl.so"
loadmodule "/usr/local/lib/ser/modules/tm.so"
#change
loadmodule "/usr/local/lib/ser/modules/acc.so"
loadmodule "/usr/local/lib/ser/modules/rr.so"
loadmodule "/usr/local/lib/ser/modules/maxfwd.so"
loadmodule "/usr/local/lib/ser/modules/usrloc.so"
loadmodule "/usr/local/lib/ser/modules/registrar.so"
loadmodule "/usr/local/lib/ser/modules/textops.so"
loadmodule "/usr/local/lib/ser/modules/nathelper.so"
# Uncomment this if you want digest authentication
# mysql.so must be loaded !
loadmodule "/usr/local/lib/ser/modules/auth.so"
loadmodule "/usr/local/lib/ser/modules/auth_db.so"
#loadmodule "/usr/local/lib/ser/modules/group.so"
# ----------------- setting module-specific parameters
---------------
# -- usrloc params --
#modparam("usrloc", "db_mode", 0)
modparam("auth_db", "db_url",
"mysql://ser:heslo@localhost/ser")
modparam("usrloc", "db_url",
"mysql://ser:heslo@localhost/ser")
#change
modparam("acc", "db_url",
"mysql://ser:heslo@localhost/ser")
#change
modparam("acc","log_level",1)
modparam("acc","log_flag",1)
modparam("acc","db_flag",2)
modparam("acc","log_missed_flag",3)
modparam("acc","db_missed_flag",3)
# Uncomment this if you want to use SQL database
# for persistent storage and comment the previous line
modparam("usrloc", "db_mode", 2)
# -- auth params --
# Uncomment if you are using auth module
#
modparam("auth_db", "calculate_ha1", yes)
#
# If you set "calculate_ha1" parameter to yes (which
true in this
config),
# uncomment also the following parameter)
#
modparam("auth_db", "password_column", "password")
# -- rr params --
# add value to ;lr param to make some broken UAs happy
# modparam("rr", "enable_full_lr", 1)
# ------------------------- request routing logic
-------------------
# We will you flag 6 to mark NATed contacts
modparam("registrar", "nat_flag", 6)
# Enable NAT pinging
modparam("nathelper", "natping_interval", 10)
# Ping only contacts that are known to be
# behind NAT
modparam("nathelper", "ping_nated_only", 1)
# main routing logic
route{
# initial sanity checks -- messages with
# max_forwards==0, or excessively long requests
if (!mf_process_maxfwd_header("10")) {
#change
log("LOG: Too many hops\n");
sl_send_reply("483","Too Many Hops");
break;
};
if (msg:len >= max_len ) {
sl_send_reply("513", "Message too big");
break;
};
# special handling for NATed clients; first, nat test
is
# executed: it looks for via!=received and RFC1918
addresses
# in Contact (may fail if line-folding used); also,
# the received test should, if complete, should check
all
# vias for presence of received
if (nat_uac_test("2")) {
# allow RR-ed requests, as these may indicate that
# a NAT-enabled proxy takes care of it; unless it
is
# a REGISTER
if (method == "REGISTER" || !
search("^Record-Route:")) {
log("LOG: Someone trying to register from
private IP,
rewriting\n");
# This will work only for user agents that
support symmetric
# communication. We tested quite many of them
and majority is
# smart smart enough to be symmetric. In some
phones, like
# it takes a configuration option. With Cisco
7960, it is
# called NAT_Enable=Yes, with kphone it is
called
# "symmetric media" and "symmetric signaling".
(The latter
# not part of public released yet.)
fix_nated_contact(); # Rewrite contact with
source IP of
signalling
if (method == "INVITE") {
fix_nated_sdp("1"); # Add
direction=active to SDP
};
force_rport(); # Add rport parameter to
topmost Via
setflag(6); # Mark as NATed
};
};
#change
if(loose_route()) {
t_relay();
break;
};
setflag(1);
setflag(2);
# we record-route all messages -- to make sure that
# subsequent messages will go through our proxy;
that's
# particularly good if upstream and downstream
entities
# use different transport protocol
if (!method=="REGISTER") record_route();
#change
if (method == "INVITE") record_route();
# subsequent messages withing a dialog should take
the
# path determined by record-routing
if (loose_route()) {
# mark routing logic in request
append_hf("P-hint: rr-enforced\r\n");
route(1);
break;
};
if (!uri==myself) {
# mark routing logic in request
append_hf("P-hint: outbound\r\n");
route(1);
break;
};
# if the request is for other domain use UsrLoc
# (in case, it does not work, use the following
command
# with proper names and addresses in it)
if (uri==myself) {
if (method=="REGISTER") {
# Uncomment this if you want to use digest
authentication
if (!www_authorize("203.82.___.___", "subscriber"))
{
www_challenge("203.82.___.___", "0");
break;
};
save("location");
break;
};
########################################################################################
#used for missed calls
if(!lookup("location")) {
if( (method=="INVITE" ||
method=="ACK") && t_newtran()
) {
t_reply("404","Not Found");
#acc_request("404 Not Found");
log("entered if loop 1 \n " );
break;
};
sl_send_reply("404","Not Found");
break;
}
else {
setflag(3);
log("entered if loop 2 \n");
t_relay();
break;
};
##########################################################################################
if (uri=~"^sip:([0789]|33).*@")
{
forward(203.82.___.___,5070);
break;
}
else {
lookup("aliases");
if (!uri==myself) {
append_hf("P-hint: outbound alias\r\n");
route(1);
break;
};
# native SIP destinations are handled using our
USRLOC DB
if (!lookup("location")) {
sl_send_reply("404", "Not Found");
break;
};
};
};
append_hf("P-hint: usrloc applied\r\n");
route(1);
}
#
# Forcing media relay if necessary
#
route[1] {
# if (uri=~"[@:](192\.168\.|10\.|172\.16)" &&
!search("^Route:")){
# sl_send_reply("479", "We don't forward to
private IP
addresses");
# break;
# };
if (isflagset(6)) {
force_rtp_proxy();
t_on_reply("1");
append_hf("P-Behind-NAT: Yes\r\n");
};
if (!t_relay()) {
sl_reply_error();
break;
};
}
onreply_route[1] {
if (status =~ "(183)|2[0-9][0-9]") {
fix_nated_contact();
force_rtp_proxy();
};
}
#route[1]
#{
# # send it out now; use stateful forwarding as it
works reliably
# # even for UDP2TCP
# if (!t_relay()) {
# sl_reply_error();
# };
#}
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail
More information about the sr-users
mailing list