gmane.network.siproxd

multiple wan proxying

Jean Cérien — 2013-05-16T14:31:16

Hello All !

I am trying to setup an asterisk server with multiple nated nic and
multiple dsl links (one nic = one dsl  link = one ip) in order to
allow clients to use indiferently a nic/public ip (to register and exchange
media)

I am thinking of using siproxd to achieve this. I'd like siproxd to listen
on a given interface (say eth1), possibly with a specific port if it helps,
and that it redirects all this traffic to asterisk on port 5060 / eth0 -
reciprocically, asterisk would reply on port /eth1 (or lo0) and siproxd
would push all this to the client via eth1 and its public adress

Is this feasible ?

note: I've installed siproxd 0.8.1 - but no default config file - does it
have to be created by hand ?

Thanks to all

J.
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security

Re: Configuration help needed for Cisco 7905

Thomas Ries — 2013-05-11T07:07:21

Jeremy,

Can you provide a more detailed (longer) debug log?
It should at *least* contain  a REGISTER sequence plus the INVITE until the
failure. Also please include the configuration file.

You may mail me the log directly if  you prefer to not post to the mailinglist.


Regards,
/Thomas

On 04/30/2013 04:49 PM, Jeremy Malcolm wrote:

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Re: Configuration help needed for Cisco 7905

Jeremy Malcolm — 2013-04-30T14:49:42


I had been, and now am not, and this change has produced some progress, though still no joy yet, I get a 408 Request Timeout.  When I do a test call from my handset to an echo test number, things now seem to be going wrong around here:

20:49:16 utils.c:386 fetching interface IP by INTERFACE [1]
20:49:16 utils.c:464 ifaddr lookup - from cache: eth0 -> 192.168.15.200 UP
20:49:16 utils.c:353 fetching outbound IP by HOSTNAME
20:49:16 utils.c:134 DNS lookup - from cache: 107.118.224.42 -> 107.118.224.42
20:49:16 sip_utils.c:1179 sip_find_direction: unable to determine direction of SIP packet
20:49:16 INFO:plugin_logcall.c:126 ACK Call: cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org -> 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org [Req: 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org]
20:49:16 proxy.c:242 request [ACK] from/to unregistered UA (RQ: cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org -> 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org)

--
Jeremy

Re: Configuration help needed for Cisco 7905

Thomas Ries — 2013-04-28T19:44:47

Are you running siproxd in a chroot jail?

in config file:

[..]
chrootjail = /var/lib/siproxd/ (or wherever the chroot jail is located)
[...]

If so, disable the use of chroot jail and try again.

The environment to resolve hostnames from within a chroot jail may underly
some constraints that you do not observe when you resolve a hostname just on
the commandline, like do you make use of the /etc/hosts file (and is the
correct file present in the chroot jail)?


/Thomas

On 04/20/2013 02:05 PM, Jeremy Malcolm wrote:

------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr_______________________________________________
Siproxd-users mailing list
Sipr

Re: Compilation issue - checking for osip_init in -losip2... no - *** ERROR: libosip2 is required!

Thomas Ries — 2013-04-28T19:39:46

You need all the header files (<xxx>.h) installed as well. Usually the go into
/usr/include or usr /local/include

osip2/*.h
osip2parser/*.h

The config.log may give more details on what the exapt problem is. Still my
bet is that the libosi2 libraries and header files are no properly installed
or installed at an unusual location and configure.sh can't find them.

On 04/17/2013 11:55 AM, Jack Howard wrote:

------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-

Re: Configuration help needed for Cisco 7905

Jeremy Malcolm — 2013-04-20T12:05:36


Yes, it helps, I find this in the log when my phone tries to register and dial 888123456:

11:09:05 utils.c:197 gethostbyname(my.sip.server.net) failed: h_errno=1 [Unknown host]
11:09:05 utils.c:255 DNS lookup - store into cache, entry 2)
11:09:05 utils.c:264 DNS lookup - errcnt=1
11:09:05 sock.c:434 send UDP packet to 192.168.15.122: 5060

So it's apparently failing to lookup the name of my SIP server.  But why?  I can look it up from the command line of the host running siproxd.  Also, later on, it can lookup its own external IP address correctly:

11:09:39 utils.c:353 fetching outbound IP by HOSTNAME
11:09:39 utils.c:215 DNS lookup - resolved: 107.118.224.42 -> 107.118.224.42
11:09:39 utils.c:255 DNS lookup - store into cache, entry 3)
11:09:39 sip_utils.c:1179 sip_find_direction: unable to determine direction of SIP packet
11:09:39 INFO:plugin_logcall.c:126 Outgoing Call: cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org -> 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org [Req: 8881234

Re: Compilation issue - checking for osip_init in -losip2... no - *** ERROR: libosip2 is required!

Jack Howard — 2013-04-17T09:55:34

Hi!

I don't have any libosip/include or ../lib directories.

To install libosip I did:

Download libosip2-4.0.0.tar.gz to /usr/local/src and unpacked it
into libosip2-4.0.0.  Change into the directory, make, make install.

That gave me the following files in /usr/local/lib

libosip2.a
libosip2.la
libosip2.so
libosip2.so.10
libosip2.so.10.0.0
libosipparser2.a
libosipparser2.la
libosipparser2.so
libosipparser2.so.10
libosipparser2.so.10.0.0

I've tried running configure with --with-libosip-prefix=/usr/local/lib and
with --with-libosip-prefix=/usr/local, but both fail.

Should I have something else as well?

 - J.

On 16 April 2013 22:09, Thomas Ries <tries-hi6Y0CQ0nG0< at >public.gmane.org> wrote:

Re: Compilation issue - checking for osip_init in -losip2... no - *** ERROR: libosip2 is required!

Thomas Ries — 2013-04-16T21:09:34

Where are you libosip2 libraries and header files installed?

 --with-libosip-prefix=<PREFIX>   does specify a prefix and configure expects
the libosip2 libraries within PPREFIX/include and PREFIX/lib.

If your installation directories of libosip2 are different you may try
  --with-extra-includes=DIR   adds non standard include paths
  --with-extra-libs=DIR       adds non standard library paths
instead.

Try
  --with-extra-includes=</path/to/libosip/include/>
  --with-extra-libs=</path/to/libosip/lib/>
(replace </path/to...> with the proper path.

Regards,
/Thomas


On 04/16/2013 01:00 PM, Jack Howard wrote:

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdot

Compilation issue - checking for osip_init in -losip2... no - *** ERROR: libosip2 is required!

Jack Howard — 2013-04-16T11:00:12

Hi!

I'm trying to compile siproxd on a Fedora-based Linux system.

I've downloaded and compiled libosip2, but when I try and run the
./configure for siproxd, it errors:

# ./configure --with-libosip-prefix=/usr/local
...
...
checking for osip_init in -losip2... no
*** ERROR: libosip2 is required!   Maybe you need to use
--with-libosip-prefix ?

However, as far as I can see everything is where it should be.  I've tried
setting the prefix to /usr/local and /usr/local/lib, and my /etc/ld.so.conf
contains both paths too:

include ld.so.conf.d/*.conf
/usr/local/lib
/usr/lib/mysql
/usr/local/mysql-5.0.67-linux-i686/lib
/usr/local

An objdump appears to show the required item present:

# objdump -x /usr/local/lib/libosip2.so |grep osip_init
00008fa6 g     F .text  0000015a              osip_init

Have tried Googling, which lead me to the use of objdump, but no further.

All help appreciated.

Re: Configuration help needed for Cisco 7905

Thomas Ries — 2013-04-14T13:22:36

The siproxd debug log may reveal more details on why a 408 Request Timeout
response is returned..

On 04/07/2013 09:54 AM, Jeremy Malcolm wrote:

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Configuration help needed for Cisco 7905

Jeremy Malcolm — 2013-04-07T07:54:09

My configuration is like this one:

http://siproxd.sourceforge.net/siproxd_guide/siproxd_guide_c7s3.html

However my phone is different; it's a Cisco 7905.  The relevant settings that the phone allows me to configure are these:

UID cisco
PWD mypassword
Proxy my.sip.server.net
SIPRegOn     1
SIPRegInterval 3600
StaticIP    192.168.15.122
OutBoundProxy 192.168.15.200 [my siproxd machine]
StaticRoute    192.168.15.1 [my dumb masquerading router, with siproxd set as the DMZ]

Here is my configuration for siproxd:

if_inbound  = eth0
if_outbound = eth0
host_outbound = name-that-resolves-to-my-external-ip.net

It doesn't work, here is what happens:

15:31:35 INFO:siproxd.c:233 siproxd-0.8.1-53 i486-pc-linux-gnu starting up
15:31:35 INFO:plugins.c:112 Plugin 'plugin_logcall' [Logs calls to syslog] loaded with success, exemask=0x40
07:31:35 INFO:rtpproxy_relay.c:121 Current thread stacksize is 8192 kB
07:31:35 INFO:sock.c:131 bound to port 5060
07:31:35 INFO:siproxd.c:344 siproxd-0.8.1-53 i486-pc-linux-gnu sta

Siproxd Pfsense help...

Yves Gancberg — 2012-12-21T11:03:22

Hello Siprox Gurus,

I have a little question for you:
I am trying to use siproxd on a Pfsense box, so that a SIP Server on the
LAN interface (LAN !) can act as a SIP server for phones on the WAN (so,
the other way around, as we normally do)...

The Sip server therefore has a private addresse (192.168.2.100).
I would like siproxd to act as an ALG (Application Layer Gateway), so that
it modifies the SIP packets (content of the application layer) in a way
that it matches the UDP packets (so that my packets are matching at the
layer 4 and 7)...

So far, I was unable to do so, I and I unable to find any log / debug
information... I am even not sure siproxd is simply 'running' on my
pfsense...

Who could give me a hand / redirect me to a decent 'howto' manual ?

Thanks in advance for your answer,

Yves.

Splitting of comma-separated headers

Henning Holtschneider — 2012-09-25T17:09:17

Hello,

I'm using siproxd 0.8.1 on Debian Squeeze. I have a problem with comma-separated header values being split into multiple headers. For example, the header

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO

becomes

Allow: INVITE
Allow: ACK
Allow: CANCEL
Allow: OPTIONS
Allow: BYE
Allow: REFER
Allow: SUBSCRIBE
Allow: NOTIFY
Allow: INFO

after going through siproxd. This behaviour is completely valid, but it results in significantly larger packets. Sometimes, the packet size is beyond the MTU on my internal network and the packets become fragmented. Is it possible to change the behaviour of siproxd so that headers with comma-separated values remain unchanged?

Regards,
Henning Holtschneider
--
LocaNet oHG - http://www.loca.net
Baroper Straße 239 b, D-44227 Dortmund
tel +49 231 91596-25, fax +49 231 91596-55
sip 25-ieLyKvB8qs4Xhy9q4Lf3Ug< at >public.gmane.org

Registergericht Amtsgericht Dortmund HRA 14208
Geschäftsführer Sven Haufe, Henning Holtschneider

---------------------------

Using siproxd to open a local sip server

Maximilian Ruta — 2012-09-05T19:19:40

Hi,

i want to use siproxd to open my Asterisk server to the public. The Asterisk server is behind a NAT and i cannot forward ports to it. But the Asterisk server is in an VPN together with an server that has an public ip address.

So this is how i want my setup to be:



 Asterisk  
  as SIP    --- OpenVPN --- Proxy Server
 registrar                       |
                             Internet
                                 |
                             SIP Clients

Is this posible with siproxd? I try to setup it with this configuration:

[root< at >jupiter ~]# ifconfig 
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500  metric 1
        inet 94.249.134.17  netmask 255.255.255.0  broadcast 94.249.134.255
        inet6 fe80::4042:8dff:feb0:2f42  prefixlen 64  scopeid 0x20<link>
        ether 42:42:8d:b0:2f:42  txqueuelen 1000  (Ethernet)
        RX packets 26757603  bytes 3029780057 (2.8 GiB)
        RX errors 0  dropped 32  overruns 0  frame 0
        TX packets 18925600  bytes 47581287242 (44.3 GiB

Re: Config Help

Reza Ambler — 2012-04-03T17:01:46

Would it be possible to force all registeration packets regardless of a
FQDN to a SIP server? One our multi-tenant switch we don't utilize FQDN
names for the authentication realm. /etc/hosts is a good work around for
this in the mean time.

Reza Ambler                             
Systems Engineer

(O) 858.357.8770
(F) 858.357.8694
(E) reza.ambler-toVFHSUBBiNBDgjK7y7TUQ< at >public.gmane.org
(W) www.vintalk.com

 

Vintalk
9707 Waples Street, Suite 201         
San Diego, CA 92121 

-----Original Message-----
From: Thomas Ries [mailto:tries-hi6Y0CQ0nG0< at >public.gmane.org] 
Sent: Wednesday, March 21, 2012 12:22 AM
To: Siproxd-users
Subject: Re: [Siproxd-users] Config Help

Hi Reza,

The debug Log says the following during REGISTER:
[...]
00:07:52 utils.c:193 gethostbyname(Vintalk) failed: h_errno=1 [Unknown
host]
00:07:52 utils.c:251 DNS lookup - store into cache, entry 2)
00:07:52 utils.c:260 DNS lookup - errcnt=1
00:07:52 sock.c:194 send UDP packet to 10.10.10.197: 33385
[...]

Your Phone tries to reghister at hos

Transparent proxy of multiple clients

Shannon Ward — 2012-03-27T15:04:25

I'm currently testing Siproxd as a transparent proxy of multiple clients.
All outbound calls are working great.
Inbound calls intermittently have one way voice.
If you hang up and then call right back it will work fine.

Does Siproxd support transparent proxing of multiple clients or are 
there known issues
with multiple clients?

siproxd-0.8.1-53 x86_64-redhat-linux-gnu
The clients are Mobile Broadband Routers running Astrisk.

More detail can be given if needed.

Thanks
Shannon




------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure

Re: Config Help

Thomas Ries — 2012-03-21T07:22:13

Hi Reza,

The debug Log says the following during REGISTER:
[...]
00:07:52 utils.c:193 gethostbyname(Vintalk) failed: h_errno=1 [Unknown host]
00:07:52 utils.c:251 DNS lookup - store into cache, entry 2)
00:07:52 utils.c:260 DNS lookup - errcnt=1
00:07:52 sock.c:194 send UDP packet to 10.10.10.197: 33385
[...]

Your Phone tries to reghister at host "Vintalk" (no qualified domain
name, just "Vintalk"). This name cannot be resolved to an IP address by
siproxd, thus the REGISTER cannot be forwarded to the REGISTRAR.

Fix your DNS setup (or add the Vintalk host to your /etc/hosts) and it
should work better.

I addition, please fix your configuration:
[...]
#    If siproxd is not running on the host doing the masquerading
#    but on a host within the private network segment, "in front" of
#    the masquerading router: define if_inbound and if_outbound to
#    point to the same interface (the inbound interface). In *addition*
#    define 'host_outbound' to hold your external (public) IP address
#    or a hostname

Config Help

Reza Ambler — 2012-03-21T00:12:15

Hello everyone,

I'm trying to use siproxd to test proxying some phones back to our
switch and have siproxd handle the media relay. I have my example
configuration file here,
http://sandbox.vintalk.com/~reza/work/0XDEADBEEF/siproxd.conf but it
doesn't appear to be relaying the SIP registration to my other
softswitch. I was wondering if someone could help out here, I think it's
something minor I'm missing. This is my first go at using siproxd.

 

Debug Log File :
http://sandbox.vintalk.com/~reza/work/0XDEADBEEF/debug.log 

Thanks,

 

Reza Ambler                             
Systems Engineer

(O) 858.357.8770
(F) 858.357.8694
(E) reza.ambler-toVFHSUBBiNBDgjK7y7TUQ< at >public.gmane.org <mailto:reza.ambler-toVFHSUBBiNBDgjK7y7TUQ< at >public.gmane.org> 
(W) www.vintalk.com <http://www.vintalk.com> 

 

Vintalk
9707 Waples Street, Suite 201         
San Diego, CA 92121 

 

------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Cli

Re: Bug#657070: embedded library ltdl

Chí-Thanh Christopher Nguyễn — 2012-01-23T22:15:51

Mark Purcell schrieb:

Try this workaround from Gentoo:

http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/net-misc/siproxd/files/siproxd-libtool-2.4.patch?view=markup


Best regards,
Chí-Thanh Christopher Nguyễn

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
Siproxd-users mailing list
Siproxd-users< at >lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Bug#657070: embedded library ltdl

Mark Purcell — 2012-01-23T21:21:31

Package: siproxd
Version: 1:0.8.1-1
Severity: important
Tags: security upstream help

siproxd currently ships an embedded copy of the ltdl library.

The original version of ltdl shipped was vunerable to 
'CVE-2009-3736 local privlege esclation'

siproxd upstream (Thomas) have now upgraded the embedded copy of ltdl
as a result siproxd is no longer vunerable to CVE-2009-3736.

The current version of siproxd in Debian Fixed in version siproxd/1:0.8.1-1.

However this Debian version is still using the embedded ltdl library, rather
than the preferred system provided ltdl library.

Whilst siproxd does detect if a system ltdl library is available it does
fail to build from source (FTBFS) with the error:

plugins.c:65: undefined reference to 'lt__PROGRAM__LTX_preloaded_symbols'

which has also been reported here:
http://blog.gmane.org/gmane.network.siproxd/month=20110201

Assistance to fix this issue in the Debian package would be appreciated.

Mark

Re: Siproxd doesnt' listen on Ipv6

Thomas Ries — 2011-12-22T19:27:39

Siproxd does not support IPv6.
As with IPv6 no NAT is supposed to be used anymore, there will be no
need to masquerade IPv6 VoIP devices.

Antonio Carlos Salzvedel Furtado Junior wrote:

------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create 
new or port existing apps to sell to consumers worldwide. Explore the 
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users