-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi,
I've got my Kamailio script working, hurray! I had created SRV and NAPTR records for the proxies but was missing a critical line in the script: dns_try_naptr=yes This enables Kamailio to query the NAPTR and SRV records and then decide on the appropriate traffic to talk to the other proxy for non local calls. http://kamailio.net/dokuwiki/doku.php/core-cookbook:3.0.x#dns_try_naptr This was tough for a Kamailio noob like myself :-) I've put the whole thing on my wiki in case anybody else would like to build a federated SIP system. https://www.johncahill.net/wiki/index.php/Skype_like_conferencing_System Thanks again for the help Daniel. I will update your wiki also, (which I shamelessly ripped off), if you give me write access. Cheers, John On 21/05/13 13:15, johnc wrote: > > Hi, > > I've worked out what's going wrong and I fear there is a mistake in your config at: > > http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour > > inter-domain calls are going in plain text over UDP. I can see the invites at the reciving end doing a packet capture using tcpdump. My firewall blocks these thus explaining why nothing was seen in the kamailio log at that end. > > tcpdump -vvv -i eth0 src 46.43.48.253 and udp and port 5060 >debug.txt > > How do I make all inter-domain traffic only TLS? > > I've ensured that there are just valid TLS SRV records at both ends: > > host -t SRV _sips._tcp.unspeak.im > _sips._tcp.unspeak.im has SRV record 0 0 5061 unspeak.im. > host -t SRV _sips._tcp.atoll.dmcip.com > _sips._tcp.atoll.dmcip.com has SRV record 0 10 5061 atoll.dmcip.com. > > Many thanks for all your help so far. > > Regards, > John > > > -------- Original Message -------- > Subject: Re: [SR-Users] http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour > Date: Tue, 21 May 2013 05:28:31 +0100 > From: johnc <jo...@aktivix.org> > Reply-To: Kamailio (SER) - Users Mailing List <sr-users@lists.sip-router.org> > To: mico...@gmail.com, "Kamailio (SER) - Users Mailing List" <sr-users@lists.sip-router.org> > > > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi, > > Here is a The kamailio log from the sip proxy (atoll.dmcip.com) of the > caller. There is nothing in the called server's (unspeak.im) logs from > the call. > > jo...@atoll.dmcip.com ----Call---> gnu...@unspeak.im > > The call gets as far as "SIP 100 trying". > > > Both servers have only port 5061 TCP open on the firewall to only > allow TLS. > > Any help would be greatly appreciated. > > Many thanks. > > Regards, > John > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.12 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > iQIcBAEBAgAGBQJRmvfnAAoJELy1jPQ1KER7O8EP/RfxYhBP4zhP6ioZq/piMIQX > 6zCEX+dC087MHtST3lOqx1oQf5ERHbR8vRpbuZyoflnKHspAijwEvuQwWuPfGXlR > RQlMowAMcKuEZ6RL4FS+Tm2VlFz+HFxH4KxJgOi721DGdzUrT4eKUf4hD3vsRlj/ > QY7fLWiNj5TgHFu4yRu/OSVQ5DYr+PFrV8T7GtwgbCCq2Wzu1TdtuLTKJeUlHQJ/ > v9uQxLJyFTUsjGWdWj1ynEBJ1CoYMwWj85eorjsylW/PQ49SJupNd1w4CkagCpAO > 78h+qgcm2znxJajiA/sqD+31qzGCx2muSEVfFApg5JsLanr62xQuhAGYxLhDMR6u > yda9ItUlFWrzrAy+TGf9NZyBN2l+pjAU2O4jWuEJRZ0znf9AshwS/zvRdbkGecqa > E26eMSnfWks+JvE5YjIShyaKxXEcrNYm9RdrUQbKqzHwM0zS+/V42iZp9pZA73+T > pWdwWasi0P5H1bBhLkdIO6mxidsahMbkUjeOeAzP7JVKszvjWow4ks/Pd/b+Rk6m > /3A2bAyGn3SkPo4PveXBDGGdqA5sEMivm4WOBAGkXN2dIDtXCZ2bVGv7ucsm8qzC > gAJ80cdiH2n3x8WFp9xlRBmcqG89b8JUW8I2KDjSCkEnltUByA7MC3YXQ+MdrlrI > lBnxCsMyckAXGJnZniD+ > =Zcfa > -----END PGP SIGNATURE----- > > > > > _______________________________________________ > SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list > sr-users@lists.sip-router.org > http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBAgAGBQJRm8EmAAoJELy1jPQ1KER7IzAP+gMoS2KCMngGPqJdOOSgwVaN MkXNfl0AvaueQAPS3UbWRdRRxdae4NrLLcZo130wSDhiHFgQR+/i828gw325l0yC +NqAPwNR8VkHByrB8dbOJ6dx91bi/YGuUBI9KWITofAYMtwBBZEu9Svnzi/yxCsa TMTdk98ZrDy5TrBLFBcbW8721jqVFlXLmFKSfN8NUfztT57Vt70pk7LKry/MNNWO cEva2AuQHfZF8UoI6pdIsoxoz5KjLvu2ij9fxG1QQQsGseU8X8xB9U1YM7y+qIPO 4ym9TJkaEVU7QOdZcocXBP4Jx94Ft4Va2hIKyovlxOdYZv9tIVpnthMGiP3S+Ryl +iN0Sp+oWC9LItJUX9Bduhv8Ral//UzfwLFepbeFiW09x5wv/q307Hk3akYKwfgs qDmIFtG5aZLED7WsPu8TuY+1VhPqwFa1jEuriJeh833W59nEFHrJ04S9+QEjvRWR A4xNzk8z0w6qP57gWRCsw9QvVyw2xEY/xlocoHIrNLJvJSgXhA5JvxPargPNoEoJ bGvxYSrqUAv3CONaUtrOgwzaGGKebJHTWRfIeK8Iq6+8uRvPLdXhrAuZ67maexpZ Wm4nIohQhECNIlzPowKJM3ALv+/3N53HaTImX5Wrf4CCIHHLt7t1sbzkvML1o1Wn 8p0H75miO+m/F/3XL+ot =V7yj -----END PGP SIGNATURE-----
_______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
