[SR-Users] Security hygiene for Kamailio

2013-12-17 Thread davy
Hi all, we all enjoy our FAIL2BAN and snippets of our Kamailio config when we see it successfully fight off the "friendly-scanner", and multiple futile attempts to fool our systems. But it got me thinking… What is a sufficient level of security on our Kamailio machinery… ? Are we all just doin

Re: [SR-Users] ACC issue on 4.0 trunk when doing serial fork

2013-12-17 Thread Kelvin Chua
Yes, a local timeout. The call was sent to a bogus IP. i still feel this behaviour is wrong. $rd in acc should contain the failed gateway's ip and not the previous one. On Dec 17, 2013 4:43 PM, "Daniel-Constantin Mierla" wrote: > It is a local timeout, not a 408 received from callee, right? > >

Re: [SR-Users] memory

2013-12-17 Thread Keith
Hi, Yeah sorry, I had to restart it as it's a production box. I have the log file which I can show you? Cheers Keith ___ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cg

Re: [SR-Users] Memory

2013-12-17 Thread Daniel-Constantin Mierla
Hello, have you restarted Kamailio meanwhile? I mean, is not the same instance that printed the error message? The stats are needed when that message is printed. Cheers, Daniel On 17/12/13 09:52, Keith wrote: Hi, Here are the details: Version: 4.02 *kamcmd pkg.stats:* { entry:

Re: [SR-Users] Memory

2013-12-17 Thread Keith
Hi, Here are the details: Version: 4.02 *kamcmd pkg.stats:* { entry: 0 pid: 15738 rank: 0 used: 1521632 free: 2504528 real_used: 1689776 } { entry: 1 pid: 15745 rank: 1 used: 1530112 free: 2495248 r

Re: [SR-Users] ACC issue on 4.0 trunk when doing serial fork

2013-12-17 Thread Daniel-Constantin Mierla
It is a local timeout, not a 408 received from callee, right? Daniel On 17/12/13 05:16, Kelvin Chua wrote: it's for a 408 timeout logged into missed_calls Kelvin Chua On Mon, Dec 16, 2013 at 8:52 PM, Daniel-Constantin Mierla mailto:mico...@gmail.com>> wrote: Hello, is it for a 20

Re: [SR-Users] Calling end_media_session twice

2013-12-17 Thread Daniel-Constantin Mierla
On 16/12/13 16:51, Teddy Rabary wrote: [...] and then remove end_media_session at route[CANCEL] ? CANCEL is not a request within dialog and will not get in route[WITHINDLG]. Maybe you have an end of media session call in failure route. A CANCEL results in a 487 reply for INVITE. Cheers, D

Re: [SR-Users] ack not transfer kamailio-3.3.4

2013-12-17 Thread dolphin
Thank you for your reply, I will try about fix_nated_contact() problem 2013/12/13 Daniel-Constantin Mierla > Perhaps you do fix_nated_contact() in k1, which should not be done, > because k1 is not the first hop from ua2. > > Cheers, > Daniel > > > On 13/12/13 02:22, dolphin wrote: > > hello