gmane.network.siproxd

multiple wan proxying

Jean Cérien — 2013-05-16T14:31:16

Hello All !

I am trying to setup an asterisk server with multiple nated nic and
multiple dsl links (one nic = one dsl  link = one ip) in order to
allow clients to use indiferently a nic/public ip (to register and exchange
media)

I am thinking of using siproxd to achieve this. I'd like siproxd to listen
on a given interface (say eth1), possibly with a specific port if it helps,
and that it redirects all this traffic to asterisk on port 5060 / eth0 -
reciprocically, asterisk would reply on port /eth1 (or lo0) and siproxd
would push all this to the client via eth1 and its public adress

Is this feasible ?

note: I've installed siproxd 0.8.1 - but no default config file - does it
have to be created by hand ?

Thanks to all

J.
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Re: Configuration help needed for Cisco 7905

Thomas Ries — 2013-05-11T07:07:21

Jeremy,

Can you provide a more detailed (longer) debug log?
It should at *least* contain  a REGISTER sequence plus the INVITE until the
failure. Also please include the configuration file.

You may mail me the log directly if  you prefer to not post to the mailinglist.


Regards,
/Thomas

On 04/30/2013 04:49 PM, Jeremy Malcolm wrote:

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Re: Configuration help needed for Cisco 7905

Jeremy Malcolm — 2013-04-30T14:49:42


I had been, and now am not, and this change has produced some progress, though still no joy yet, I get a 408 Request Timeout.  When I do a test call from my handset to an echo test number, things now seem to be going wrong around here:

20:49:16 utils.c:386 fetching interface IP by INTERFACE [1]
20:49:16 utils.c:464 ifaddr lookup - from cache: eth0 -> 192.168.15.200 UP
20:49:16 utils.c:353 fetching outbound IP by HOSTNAME
20:49:16 utils.c:134 DNS lookup - from cache: 107.118.224.42 -> 107.118.224.42
20:49:16 sip_utils.c:1179 sip_find_direction: unable to determine direction of SIP packet
20:49:16 INFO:plugin_logcall.c:126 ACK Call: cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org -> 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org [Req: 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org]
20:49:16 proxy.c:242 request [ACK] from/to unregistered UA (RQ: cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org -> 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org)

--
Jeremy Malcolm PhD LLB (Hons) B Com
Internet and Open Source lawyer, consumer advocate and geek
host -t NAPTR 5.9.8.5.2.8.2.2.1.0.6.e164.org|awk -F! '{print $3}'




------------------------------------------------------------------------------
Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET
Get 100% visibility into your production application - at no cost.
Code-level diagnostics for performance bottlenecks with <2% overhead
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap1

Re: Configuration help needed for Cisco 7905

Thomas Ries — 2013-04-28T19:44:47

Are you running siproxd in a chroot jail?

in config file:

[..]
chrootjail = /var/lib/siproxd/ (or wherever the chroot jail is located)
[...]

If so, disable the use of chroot jail and try again.

The environment to resolve hostnames from within a chroot jail may underly
some constraints that you do not observe when you resolve a hostname just on
the commandline, like do you make use of the /etc/hosts file (and is the
correct file present in the chroot jail)?


/Thomas

On 04/20/2013 02:05 PM, Jeremy Malcolm wrote:

------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Re: Compilation issue - checking for osip_init in -losip2... no - *** ERROR: libosip2 is required!

Thomas Ries — 2013-04-28T19:39:46

You need all the header files (<xxx>.h) installed as well. Usually the go into
/usr/include or usr /local/include

osip2/*.h
osip2parser/*.h

The config.log may give more details on what the exapt problem is. Still my
bet is that the libosi2 libraries and header files are no properly installed
or installed at an unusual location and configure.sh can't find them.

On 04/17/2013 11:55 AM, Jack Howard wrote:

------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Re: Configuration help needed for Cisco 7905

Jeremy Malcolm — 2013-04-20T12:05:36


Yes, it helps, I find this in the log when my phone tries to register and dial 888123456:

11:09:05 utils.c:197 gethostbyname(my.sip.server.net) failed: h_errno=1 [Unknown host]
11:09:05 utils.c:255 DNS lookup - store into cache, entry 2)
11:09:05 utils.c:264 DNS lookup - errcnt=1
11:09:05 sock.c:434 send UDP packet to 192.168.15.122: 5060

So it's apparently failing to lookup the name of my SIP server.  But why?  I can look it up from the command line of the host running siproxd.  Also, later on, it can lookup its own external IP address correctly:

11:09:39 utils.c:353 fetching outbound IP by HOSTNAME
11:09:39 utils.c:215 DNS lookup - resolved: 107.118.224.42 -> 107.118.224.42
11:09:39 utils.c:255 DNS lookup - store into cache, entry 3)
11:09:39 sip_utils.c:1179 sip_find_direction: unable to determine direction of SIP packet
11:09:39 INFO:plugin_logcall.c:126 Outgoing Call: cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org -> 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org [Req: 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org]
11:09:39 proxy.c:242 request [INVITE] from/to unregistered UA (RQ: cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org -> 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org)
11:09:39 sock.c:434 send UDP packet to 192.168.15.122: 5060

Any ideas?  Thanks.



--
Jeremy Malcolm PhD LLB (Hons) B Com
Internet and Open Source lawyer, consumer advocate and geek
host -t NAPTR 5.9.8.5.2.8.2.2.1.0.6.e164.org|awk -F! '{print $3}'




------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter

Re: Compilation issue - checking for osip_init in -losip2... no - *** ERROR: libosip2 is required!

Jack Howard — 2013-04-17T09:55:34

Hi!

I don't have any libosip/include or ../lib directories.

To install libosip I did:

Download libosip2-4.0.0.tar.gz to /usr/local/src and unpacked it
into libosip2-4.0.0.  Change into the directory, make, make install.

That gave me the following files in /usr/local/lib

libosip2.a
libosip2.la
libosip2.so
libosip2.so.10
libosip2.so.10.0.0
libosipparser2.a
libosipparser2.la
libosipparser2.so
libosipparser2.so.10
libosipparser2.so.10.0.0

I've tried running configure with --with-libosip-prefix=/usr/local/lib and
with --with-libosip-prefix=/usr/local, but both fail.

Should I have something else as well?

 - J.

On 16 April 2013 22:09, Thomas Ries <tries-hi6Y0CQ0nG0< at >public.gmane.org> wrote:

Re: Compilation issue - checking for osip_init in -losip2... no - *** ERROR: libosip2 is required!

Thomas Ries — 2013-04-16T21:09:34

Where are you libosip2 libraries and header files installed?

 --with-libosip-prefix=<PREFIX>   does specify a prefix and configure expects
the libosip2 libraries within PPREFIX/include and PREFIX/lib.

If your installation directories of libosip2 are different you may try
  --with-extra-includes=DIR   adds non standard include paths
  --with-extra-libs=DIR       adds non standard library paths
instead.

Try
  --with-extra-includes=</path/to/libosip/include/>
  --with-extra-libs=</path/to/libosip/lib/>
(replace </path/to...> with the proper path.

Regards,
/Thomas


On 04/16/2013 01:00 PM, Jack Howard wrote:

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Compilation issue - checking for osip_init in -losip2... no - *** ERROR: libosip2 is required!

Jack Howard — 2013-04-16T11:00:12

Hi!

I'm trying to compile siproxd on a Fedora-based Linux system.

I've downloaded and compiled libosip2, but when I try and run the
./configure for siproxd, it errors:

# ./configure --with-libosip-prefix=/usr/local
...
...
checking for osip_init in -losip2... no
*** ERROR: libosip2 is required!   Maybe you need to use
--with-libosip-prefix ?

However, as far as I can see everything is where it should be.  I've tried
setting the prefix to /usr/local and /usr/local/lib, and my /etc/ld.so.conf
contains both paths too:

include ld.so.conf.d/*.conf
/usr/local/lib
/usr/lib/mysql
/usr/local/mysql-5.0.67-linux-i686/lib
/usr/local

An objdump appears to show the required item present:

# objdump -x /usr/local/lib/libosip2.so |grep osip_init
00008fa6 g     F .text  0000015a              osip_init

Have tried Googling, which lead me to the use of objdump, but no further.

All help appreciated.

Re: Configuration help needed for Cisco 7905

Thomas Ries — 2013-04-14T13:22:36

The siproxd debug log may reveal more details on why a 408 Request Timeout
response is returned..

On 04/07/2013 09:54 AM, Jeremy Malcolm wrote:

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Configuration help needed for Cisco 7905

Jeremy Malcolm — 2013-04-07T07:54:09

My configuration is like this one:

http://siproxd.sourceforge.net/siproxd_guide/siproxd_guide_c7s3.html

However my phone is different; it's a Cisco 7905.  The relevant settings that the phone allows me to configure are these:

UID cisco
PWD mypassword
Proxy my.sip.server.net
SIPRegOn     1
SIPRegInterval 3600
StaticIP    192.168.15.122
OutBoundProxy 192.168.15.200 [my siproxd machine]
StaticRoute    192.168.15.1 [my dumb masquerading router, with siproxd set as the DMZ]

Here is my configuration for siproxd:

if_inbound  = eth0
if_outbound = eth0
host_outbound = name-that-resolves-to-my-external-ip.net

It doesn't work, here is what happens:

15:31:35 INFO:siproxd.c:233 siproxd-0.8.1-53 i486-pc-linux-gnu starting up
15:31:35 INFO:plugins.c:112 Plugin 'plugin_logcall' [Logs calls to syslog] loaded with success, exemask=0x40
07:31:35 INFO:rtpproxy_relay.c:121 Current thread stacksize is 8192 kB
07:31:35 INFO:sock.c:131 bound to port 5060
07:31:35 INFO:siproxd.c:344 siproxd-0.8.1-53 i486-pc-linux-gnu started
07:31:57 INFO:plugin_logcall.c:126 Outgoing Call: cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org -> 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org [Req: 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org]
07:31:57 INFO:plugin_logcall.c:126 ACK Call: cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org -> 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org [Req: 888123456-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org]

Also by using ngrep I see this:

interface: eth0 (192.168.15.0/255.255.255.0)
filter: (ip or ip6) and ( port 5060 )
#
U 192.168.15.122:5060 -> 192.168.15.200:5060
REGISTER sip:my.sip.server.net SIP/2.0.
Via: SIP/2.0/UDP 192.168.15.122:5060.
From: sip:cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org;tag=3840067541.
To: sip:cisco-pU0pTbRKGX/8hHCTgO0Q+0QJLXQMEiss< at >public.gmane.org
Call-ID: 4035595390-Q0ErXNX1RuZX9YJnOq3E6A< at >public.gmane.org
CSeq: 1 REGISTER.
Contact: Jeremy Malcolm <sip:cisco-Q0ErXNX1RuY/HaZta7ErgQ< at >public.gmane.org:5060;transport=udp>;expires=3600.
User-Agent: Cisco-CP7905/1.01-030807A.
Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER.
Content-Length: 0.
.

#
U 192.168.15.200:5060 -> 192.168.15.122:5060
SIP/2.0 408 Request Timeout.
Via: SIP/2.0/UDP 192.168.15.122:5060.
From: <sip:cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org>;tag=3840067541.
To: <sip:cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org>.
Call-ID: 4035595390-Q0ErXNX1RuZX9YJnOq3E6A< at >public.gmane.org
CSeq: 1 REGISTER.
Content-Length: 0.
.

#
U 192.168.15.122:5060 -> 192.168.15.200:5060
INVITE sip:88812346-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org;user=phone SIP/2.0.
Via: SIP/2.0/UDP 192.168.15.122:5060.
From: Jeremy Malcolm <sip:cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org>;tag=816758886.
To: <sip:88812346-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org;user=phone>.
Call-ID: 2441701698-Q0ErXNX1RuZX9YJnOq3E6A< at >public.gmane.org
CSeq: 1 INVITE.
Contact: Jeremy Malcolm <sip:cisco-Q0ErXNX1RuY/HaZta7ErgQ< at >public.gmane.org:5060;transport=udp>.
User-Agent: Cisco-CP7905/1.01-030807A.
Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER.
Expires: 300.
Content-Length: 262.
Content-Type: application/sdp.
.
v=0.
o=cisco 15826 15826 IN IP4 192.168.15.122.
s=Cisco 7905 SIP Call.
c=IN IP4 192.168.15.122.
t=0 0.
m=audio 16384 RTP/AVP 18 8 0 101.
a=rtpmap:18 G729/8000/1.
a=rtpmap:8 PCMA/8000/1.
a=rtpmap:0 PCMU/8000/1.
a=rtpmap:101 telephone-event/8000.
a=fmtp:101 0-15.

#
U 192.168.15.200:5060 -> 192.168.15.122:5060
SIP/2.0 408 Request Timeout.
Via: SIP/2.0/UDP 192.168.15.122:5060.
From: Jeremy Malcolm <sip:cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org>;tag=816758886.
To: <sip:88812346-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org;user=phone>.
Call-ID: 2441701698-Q0ErXNX1RuZX9YJnOq3E6A< at >public.gmane.org
CSeq: 1 INVITE.
Content-Length: 0.
.

#
U 192.168.15.122:5060 -> 192.168.15.200:5060
ACK sip:88812346-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org;user=phone SIP/2.0.
Via: SIP/2.0/UDP 192.168.15.122:5060.
From: Jeremy Malcolm <sip:cisco-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org>;tag=816758886.
To: <sip:88812346-pU0pTbRKGX/8hHCTgO0Q+16hYfS7NtTn< at >public.gmane.org;user=phone>.
Call-ID: 2441701698-Q0ErXNX1RuZX9YJnOq3E6A< at >public.gmane.org
CSeq: 1 ACK.
User-Agent: Cisco-CP7905/1.01-030807A.
Content-Length: 0.

Interestingly there is no sign of "name-that-resolves-to-my-external-ip.net" above.  I have tried running a similar command on my.sip.server.net (because it's my own SIP server running yate), but it never sees anything.

Also interestingly, I have sip softphones on the same network which work fine, even without using siproxd as the proxy.  I guess they are a bit smarter about NAT, and can work fine even though my router does not have a sip ALG built-in.

Any help appreciated...

PS. Public IP addresses/domains have been changed for privacy/security reasons.

--
Jeremy Malcolm PhD LLB (Hons) B Com
Internet and Open Source lawyer, consumer advocate and geek
host -t NAPTR 5.9.8.5.2.8.2.2.1.0.6.e164.org|awk -F! '{print $3}'




------------------------------------------------------------------------------
Minimize network downtime and maximize team effectiveness.
Reduce network management and security costs.Learn how to hire 
the most talented Cisco Certified professionals. Visit the 
Employer Resources Portal
http://www.cisco.com/web/learning/employer_resources/index.html

Siproxd Pfsense help...

Yves Gancberg — 2012-12-21T11:03:22

Hello Siprox Gurus,

I have a little question for you:
I am trying to use siproxd on a Pfsense box, so that a SIP Server on the
LAN interface (LAN !) can act as a SIP server for phones on the WAN (so,
the other way around, as we normally do)...

The Sip server therefore has a private addresse (192.168.2.100).
I would like siproxd to act as an ALG (Application Layer Gateway), so that
it modifies the SIP packets (content of the application layer) in a way
that it matches the UDP packets (so that my packets are matching at the
layer 4 and 7)...

So far, I was unable to do so, I and I unable to find any log / debug
information... I am even not sure siproxd is simply 'running' on my
pfsense...

Who could give me a hand / redirect me to a decent 'howto' manual ?

Thanks in advance for your answer,

Yves.

Splitting of comma-separated headers

Henning Holtschneider — 2012-09-25T17:09:17

Hello,

I'm using siproxd 0.8.1 on Debian Squeeze. I have a problem with comma-separated header values being split into multiple headers. For example, the header

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO

becomes

Allow: INVITE
Allow: ACK
Allow: CANCEL
Allow: OPTIONS
Allow: BYE
Allow: REFER
Allow: SUBSCRIBE
Allow: NOTIFY
Allow: INFO

after going through siproxd. This behaviour is completely valid, but it results in significantly larger packets. Sometimes, the packet size is beyond the MTU on my internal network and the packets become fragmented. Is it possible to change the behaviour of siproxd so that headers with comma-separated values remain unchanged?

Regards,
Henning Holtschneider
--
LocaNet oHG - http://www.loca.net
Baroper Straße 239 b, D-44227 Dortmund
tel +49 231 91596-25, fax +49 231 91596-55
sip 25-ieLyKvB8qs4Xhy9q4Lf3Ug< at >public.gmane.org

Registergericht Amtsgericht Dortmund HRA 14208
Geschäftsführer Sven Haufe, Henning Holtschneider

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Using siproxd to open a local sip server

Maximilian Ruta — 2012-09-05T19:19:40

Hi,

i want to use siproxd to open my Asterisk server to the public. The Asterisk server is behind a NAT and i cannot forward ports to it. But the Asterisk server is in an VPN together with an server that has an public ip address.

So this is how i want my setup to be:



 Asterisk  
  as SIP    --- OpenVPN --- Proxy Server
 registrar                       |
                             Internet
                                 |
                             SIP Clients

Is this posible with siproxd? I try to setup it with this configuration:

[root< at >jupiter ~]# ifconfig 
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500  metric 1
        inet 94.249.134.17  netmask 255.255.255.0  broadcast 94.249.134.255
        inet6 fe80::4042:8dff:feb0:2f42  prefixlen 64  scopeid 0x20<link>
        ether 42:42:8d:b0:2f:42  txqueuelen 1000  (Ethernet)
        RX packets 26757603  bytes 3029780057 (2.8 GiB)
        RX errors 0  dropped 32  overruns 0  frame 0
        TX packets 18925600  bytes 47581287242 (44.3 GiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 16436  metric 1
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 0  (Local Loopback)
        RX packets 1234740  bytes 186405699 (177.7 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 1234740  bytes 186405699 (177.7 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

tap0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500  metric 1
        inet 10.8.0.1  netmask 255.255.0.0  broadcast 10.8.255.255
        inet6 fe80::9810:f8ff:fe3c:67c6  prefixlen 64  scopeid 0x20<link>
        ether 9a:10:f8:3c:67:c6  txqueuelen 100  (Ethernet)
        RX packets 800165  bytes 165082677 (157.4 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 930041  bytes 150851885 (143.8 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

[root< at >jupiter ~]# cat /etc/siproxd.conf
if_inbound  = eth0
if_outbound = tap0
host_outbound = 10.8.100.1
sip_listen_port = 5060
daemonize = 0
silence_log = 1
registration_file = /var/lib/siproxd/siproxd_registrations
autosave_registrations = 300
pid_file = /var/run/siproxd/siproxd.pid
rtp_proxy_enable = 1
rtp_port_low  = 7070
rtp_port_high = 7089
rtp_timeout = 300
rtp_dscp = 46
sip_dscp = 0
rtp_input_dejitter  = 0
rtp_output_dejitter = 0
tcp_timeout = 600
tcp_connect_timeout = 500
tcp_keepalive = 20
debug_level =      0x00000000
debug_port = 0
ua_string = Siproxd-UA
plugindir=/usr/lib/siproxd/
load_plugin=plugin_logcall.la
load_plugin=plugin_fix_bogus_via.la

The output is in the attachment try1.log.

I tryed it also with this configuration:

[root< at >jupiter ~]# cat /etc/siproxd.conf
if_inbound  = eth0
if_outbound = tap0
sip_listen_port = 5060
daemonize = 0
silence_log = 1
registration_file = /var/lib/siproxd/siproxd_registrations
autosave_registrations = 300
pid_file = /var/run/siproxd/siproxd.pid
rtp_proxy_enable = 1
rtp_port_low  = 7070
rtp_port_high = 7089
rtp_timeout = 300
rtp_dscp = 46
sip_dscp = 0
rtp_input_dejitter  = 0
rtp_output_dejitter = 0
tcp_timeout = 600
tcp_connect_timeout = 500
tcp_keepalive = 20
debug_level =      0x00000000
debug_port = 0
ua_string = Siproxd-UA
plugindir=/usr/lib/siproxd/
load_plugin=plugin_logcall.la
load_plugin=plugin_fix_bogus_via.la

The output is in the attachment try2.log.

Thanks

Maximilian Ruta------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Re: Config Help

Reza Ambler — 2012-04-03T17:01:46

Would it be possible to force all registeration packets regardless of a
FQDN to a SIP server? One our multi-tenant switch we don't utilize FQDN
names for the authentication realm. /etc/hosts is a good work around for
this in the mean time.

Reza Ambler                             
Systems Engineer

(O) 858.357.8770
(F) 858.357.8694
(E) reza.ambler-toVFHSUBBiNBDgjK7y7TUQ< at >public.gmane.org
(W) www.vintalk.com

 

Vintalk
9707 Waples Street, Suite 201         
San Diego, CA 92121 

-----Original Message-----
From: Thomas Ries [mailto:tries-hi6Y0CQ0nG0< at >public.gmane.org] 
Sent: Wednesday, March 21, 2012 12:22 AM
To: Siproxd-users
Subject: Re: [Siproxd-users] Config Help

Hi Reza,

The debug Log says the following during REGISTER:
[...]
00:07:52 utils.c:193 gethostbyname(Vintalk) failed: h_errno=1 [Unknown
host]
00:07:52 utils.c:251 DNS lookup - store into cache, entry 2)
00:07:52 utils.c:260 DNS lookup - errcnt=1
00:07:52 sock.c:194 send UDP packet to 10.10.10.197: 33385
[...]

Your Phone tries to reghister at host "Vintalk" (no qualified domain
name, just "Vintalk"). This name cannot be resolved to an IP address by
siproxd, thus the REGISTER cannot be forwarded to the REGISTRAR.

Fix your DNS setup (or add the Vintalk host to your /etc/hosts) and it
should work better.

I addition, please fix your configuration:
[...]
#    If siproxd is not running on the host doing the masquerading
#    but on a host within the private network segment, "in front" of
#    the masquerading router: define if_inbound and if_outbound to
#    point to the same interface (the inbound interface). In *addition*
#    define 'host_outbound' to hold your external (public) IP address
#    or a hostname that resolves to that address (use a dyndns address
for
#    example).
#
if_inbound  = eth0
if_outbound = eth0
# uncomment the following line ONLY IF YOU KNOW WHAT YOU ARE DOING!
# READ THE FAQ FIRST!
#host_outbound =  64.94.105.151
[...]

As the comment explains, if you set if_inbound and if_outbound to the
same IP interface, you must also set host_putbound to point to the
public IP address.

You also shoulbe be aware that siproxd has been made for NAT traversal
of SIP & RTP, so your REGISTRAR *cannot* be located in the same IP
subnet as your local UAs (phones).

The other thing that confuses me is that the log says, the IP address of
the received REGISTER request is 67.52.x.x (a public IP) which makes me
heavily believe that to try to do something that siproxd was not
designed for.
Please re-read the documentation and the different usage scenarios that
siproxd has been designed for.

Regards,
/Thomas

Reza Ambler wrote:
it's
http://sandbox.vintalk.com/~reza/work/0XDEADBEEF/debug.log
------------------------------------------------------------------------
------------------------------------------------------------------------
------
------------------------------------------------------------------------



------------------------------------------------------------------------------
Better than sec? Nothing is better than sec when it comes to
monitoring Big Data applications. Try Boundary one-second 
resolution app monitoring today. Free.
http://p.sf.net/sfu/Boundary-dev2dev

Transparent proxy of multiple clients

Shannon Ward — 2012-03-27T15:04:25

I'm currently testing Siproxd as a transparent proxy of multiple clients.
All outbound calls are working great.
Inbound calls intermittently have one way voice.
If you hang up and then call right back it will work fine.

Does Siproxd support transparent proxing of multiple clients or are 
there known issues
with multiple clients?

siproxd-0.8.1-53 x86_64-redhat-linux-gnu
The clients are Mobile Broadband Routers running Astrisk.

More detail can be given if needed.

Thanks
Shannon




------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure

Re: Config Help

Thomas Ries — 2012-03-21T07:22:13

Hi Reza,

The debug Log says the following during REGISTER:
[...]
00:07:52 utils.c:193 gethostbyname(Vintalk) failed: h_errno=1 [Unknown host]
00:07:52 utils.c:251 DNS lookup - store into cache, entry 2)
00:07:52 utils.c:260 DNS lookup - errcnt=1
00:07:52 sock.c:194 send UDP packet to 10.10.10.197: 33385
[...]

Your Phone tries to reghister at host "Vintalk" (no qualified domain
name, just "Vintalk"). This name cannot be resolved to an IP address by
siproxd, thus the REGISTER cannot be forwarded to the REGISTRAR.

Fix your DNS setup (or add the Vintalk host to your /etc/hosts) and it
should work better.

I addition, please fix your configuration:
[...]
#    If siproxd is not running on the host doing the masquerading
#    but on a host within the private network segment, "in front" of
#    the masquerading router: define if_inbound and if_outbound to
#    point to the same interface (the inbound interface). In *addition*
#    define 'host_outbound' to hold your external (public) IP address
#    or a hostname that resolves to that address (use a dyndns address for
#    example).
#
if_inbound  = eth0
if_outbound = eth0
# uncomment the following line ONLY IF YOU KNOW WHAT YOU ARE DOING!
# READ THE FAQ FIRST!
#host_outbound =  64.94.105.151
[...]

As the comment explains, if you set if_inbound and if_outbound to the
same IP interface, you must also set host_putbound to point to the
public IP address.

You also shoulbe be aware that siproxd has been made for NAT traversal
of SIP & RTP, so your REGISTRAR *cannot* be located in the same IP
subnet as your local UAs (phones).

The other thing that confuses me is that the log says, the IP address of
the received REGISTER request is 67.52.x.x (a public IP) which makes me
heavily believe that to try to do something that siproxd was not
designed for.
Please re-read the documentation and the different usage scenarios that
siproxd has been designed for.

Regards,
/Thomas

Reza Ambler wrote:


------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Config Help

Reza Ambler — 2012-03-21T00:12:15

Hello everyone,

I'm trying to use siproxd to test proxying some phones back to our
switch and have siproxd handle the media relay. I have my example
configuration file here,
http://sandbox.vintalk.com/~reza/work/0XDEADBEEF/siproxd.conf but it
doesn't appear to be relaying the SIP registration to my other
softswitch. I was wondering if someone could help out here, I think it's
something minor I'm missing. This is my first go at using siproxd.

 

Debug Log File :
http://sandbox.vintalk.com/~reza/work/0XDEADBEEF/debug.log 

Thanks,

 

Reza Ambler                             
Systems Engineer

(O) 858.357.8770
(F) 858.357.8694
(E) reza.ambler-toVFHSUBBiNBDgjK7y7TUQ< at >public.gmane.org <mailto:reza.ambler-toVFHSUBBiNBDgjK7y7TUQ< at >public.gmane.org> 
(W) www.vintalk.com <http://www.vintalk.com> 

 

Vintalk
9707 Waples Street, Suite 201         
San Diego, CA 92121 

 

------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Re: Bug#657070: embedded library ltdl

Chí-Thanh Christopher Nguyễn — 2012-01-23T22:15:51

Mark Purcell schrieb:

Try this workaround from Gentoo:

http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/net-misc/siproxd/files/siproxd-libtool-2.4.patch?view=markup


Best regards,
Chí-Thanh Christopher Nguyễn

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
Siproxd-users mailing list
Siproxd-users< at >lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/siproxd-users

Bug#657070: embedded library ltdl

Mark Purcell — 2012-01-23T21:21:31

Package: siproxd
Version: 1:0.8.1-1
Severity: important
Tags: security upstream help

siproxd currently ships an embedded copy of the ltdl library.

The original version of ltdl shipped was vunerable to 
'CVE-2009-3736 local privlege esclation'

siproxd upstream (Thomas) have now upgraded the embedded copy of ltdl
as a result siproxd is no longer vunerable to CVE-2009-3736.

The current version of siproxd in Debian Fixed in version siproxd/1:0.8.1-1.

However this Debian version is still using the embedded ltdl library, rather
than the preferred system provided ltdl library.

Whilst siproxd does detect if a system ltdl library is available it does
fail to build from source (FTBFS) with the error:

plugins.c:65: undefined reference to 'lt__PROGRAM__LTX_preloaded_symbols'

which has also been reported here:
http://blog.gmane.org/gmane.network.siproxd/month=20110201

Assistance to fix this issue in the Debian package would be appreciated.

Mark

Re: Siproxd doesnt' listen on Ipv6

Thomas Ries — 2011-12-22T19:27:39

Siproxd does not support IPv6.
As with IPv6 no NAT is supposed to be used anymore, there will be no
need to masquerade IPv6 VoIP devices.

Antonio Carlos Salzvedel Furtado Junior wrote:

------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create 
new or port existing apps to sell to consumers worldwide. Explore the 
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev_______________________________________________
Siproxd-users mailing list
Siproxd-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/siproxd-users