[SR-Users] rtpengine and security

2015-04-21 Thread GG GG
By port closed, I mean that ports are normally closed, but when rtpengine send the first rtp packets to the client, it opens a pinhole in the firewall, and the matching incoming packets from the client will make the connection established,related in iptables. I think symmetric nat permits that. Bu

Re: [SR-Users] Expect the kamailio's sip account is unregistered state when the client app is shutdown

2015-04-21 Thread xuefeng zhang
Hi all, I add the WITH_NAT and WITH_NATSIPPING and it works ok.The account will unregister after 3 minutes. Thank you very much. Xuefeng Zhang 2015-04-21 17:43 GMT+08:00 Daniel-Constantin Mierla : > Hello, > > On 21/04/15 07:07, Mickael Marrache wrote: > > Hi, > > IIR means If I Remember. >

Re: [SR-Users] rtpengine and security

2015-04-21 Thread Richard Fuchs
On 21/04/15 11:04 AM, GG GG wrote: > Hello, > > what do you think about opening all RTP ports for rtpengine on Internet, > is it a bad practice ? > > I wonder if it's possible to use rtpengine with all ports closed. Not sure what you mean with "ports closed." How would rtpengine, or any other RT

Re: [SR-Users] Unauthorized register with persistence PostgreSQL

2015-04-21 Thread Daniel-Constantin Mierla
Hello, if you keep getting 401/407 replies, then the password might be invalid. You can run kamailio with debug=3 and look in the syslog for the debug messages, you should see there more details about what happens and why the authentication fails Cheers, Daniel On 21/04/15 14:54, Gabrielle Eyma

[SR-Users] rtpengine and security

2015-04-21 Thread GG GG
Hello, what do you think about opening all RTP ports for rtpengine on Internet, is it a bad practice ? I wonder if it's possible to use rtpengine with all ports closed. Maybe someone could explain how rtpengine learn the source address when the SDP contains a local address. If your rtpengine se

Re: [SR-Users] UAC Module

2015-04-21 Thread Dragos Oancea
Hi Are you behind NAT ?Do you see the INVITE on the bad trunk reaching the routing script ? Dragos From: Ali Jibran To: sr-users@lists.sip-router.org Sent: Tuesday, April 21, 2015 3:19 PM Subject: [SR-Users] UAC Module Hi all. I am using UAC module to establish two trunks to my pro

[SR-Users] ACK and BYE routing - wrong interface problem and TCP/UDP conversion troubles

2015-04-21 Thread Dmitry Sytchev
Hi all! I'm still working on incorrect routing of ACKs/BYEs with certain conditions and asking for guru help. My network looks like this: 192.168.4.218 -> TCP -> NAT (1.2.2.94) -> (1.2.0.160) Kamailio (1.2.0.160) -> UDP-> backend servers (1.2.2.44). IP address 1.2.0.16 is a 1.2.0.160/32 on loo

[SR-Users] UAC Module

2015-04-21 Thread Ali Jibran
Hi all. I am using UAC module to establish two trunks to my provider. I can see that the trunks are registered successfully but the calls are coming only from the first one. The provider says server isn't responding on the second one. How is that possible when it says registered? Can somebody help

[SR-Users] Unauthorized register with persistence PostgreSQL

2015-04-21 Thread Gabrielle Eymard
Hello everyone, I’m currently running Kamailio 4.2.4 with PostrgreSQL 9.3 database, each one on CentOS 6.6 I have installed and configured Kamailio with PostgreSQL without any problem. But now, I don’t want my phones register be recorded on Kamailio (on cache) but immediately on the external da

Re: [SR-Users] registrar: add optional check for local path during lookup()

2015-04-21 Thread Charles Chance
Hi Volkan, It is in the master (development) branch, so will appear in the next major release (4.3). The code could not be backported to 4.2 because it was considered a new feature rather than a fix. Cheers, Charles P.S. please use mailing list in case the question is useful to others :-) On

Re: [SR-Users] Expect the kamailio's sip account is unregistered state when the client app is shutdown

2015-04-21 Thread Daniel-Constantin Mierla
Hello, On 21/04/15 07:07, Mickael Marrache wrote: > Hi, > > IIR means If I Remember. indeed, thanks for completing -- it was a result of incomplete typing as I wanted to use IIRC (if i remember correctly), which is more standard acronym out there. Xuefeng: sending keepalives is done via nathelper