[Freeswitch-users] Strange Reg

Anthony Minessale anthmct at yahoo.com
Fri May 25 07:03:34 PDT 2007


you need to monitor both the sip and the rtp traffic.

Run freeswitch with TPORT_LOG=1 and also
run wireshark on the machine capturing udp traffic on the interface where
the sip calls will take place.


Also make sure the sofia.conf.xml profile is setup the same as the default
example in the source tree apart from the options necessary to enable
the directory auth.

Make sure the box freeswitch is on has no firewall enabled while you are
testing (we do not support getting things to work with a firewall that's your job)

Also make sure the nat router the ata is behind does not also have a firewall that is intentionally blocking RTP traffic (getting a trace from there with wireshark also would be helpful)






 
Anthony Minessale II

FreeSWITCH http://www.freeswitch.org/
ClueCon http://www.cluecon.com/

AIM: anthm
MSN:anthony_minessale at hotmail.com
JABBER:anthony.minessale at gmail.com
IRC: irc.freenode.net #freeswitch

FreeSWITCH Developer Conference
sip:888 at conference.freeswitch.org
iax:guest at conference.freeswitch.org/888
googletalk:conf+888 at conference.freeswitch.org
pstn:213-799-1400


----- Original Message ----
From: Dave <lists+freeswitch at bigfatdave.com>
To: freeswitch-users at lists.freeswitch.org
Sent: Friday, May 25, 2007 1:24:36 AM
Subject: Re: [Freeswitch-users] Strange Reg

Now that I've documented what works, let's move on to what doesn't :-)

I can't get outgoing calls to work at all (from the ATA out), and incoming
calls ring, but have no audio in either direction for about half a minute,
before just dying completely.

Before I go around posting tons of logs, can somebody just give me some
pointers about what to look for?

Thank you,
 - Dave


On Mon, May 21, 2007 at 05:17:30PM -0700, Anthony Minessale wrote:
> You need to make sure you setup the user directory correctly.
> 
> http://wiki.freeswitch.org/wiki/FreeSwitch_XML_User_Directory_Guide
> 
> 
> My earlier email provided a precise example and warnings about making sure the tags etc match up.
> 
> When you setup the <domain> tag in the directory 
> you must make sure there is a domain tag that has the same name as the host portion of the to: header in the register.
> 
> Using forensics from your traces here is the exact domain tag to use
> in directory.xml with 1 caveat:
> 
> -----------------------------------------------------------------------
> **replace the string 1234 with the password you specified in the ata**
> -----------------------------------------------------------------------
> 
> *NOTE*
> normally $${domain} would be ok here as the name 
> assuming that the domain variable is set in freeswitch.xml 
> but I put the exact domain name to avoid confusion.
> 
> *ALSO NOTE*
> You can comment the password param if you want it to
> accept any password for this user.
> 
> <domain name="freeswitch1.asnetinc.net">
>   <user id="homebase">
>     <params>
>       <param name="password" value="1234"/>
>     </params>
>     <variables>
>       <variable name="force-contact" value="nat-connectile-dysfunction"/>
>     </variables>
>   </user>
> </domain> 
> 
> I ask that if you get this working you please document this on our wiki in exchange for this exhaustive description of what you need to do.
> 
>  
> Anthony Minessale II
> 
> FreeSWITCH http://www.freeswitch.org/
> ClueCon http://www.cluecon.com/
> 
> AIM: anthm
> MSN:anthony_minessale at hotmail.com
> JABBER:anthony.minessale at gmail.com
> IRC: irc.freenode.net #freeswitch
> 
> FreeSWITCH Developer Conference
> sip:888 at conference.freeswitch.org
> iax:guest at conference.freeswitch.org/888
> googletalk:conf+888 at conference.freeswitch.org
> pstn:213-799-1400
> 
> 
> ----- Original Message ----
> From: Dave <lists+freeswitch at bigfatdave.com>
> To: freeswitch-users at lists.freeswitch.org
> Sent: Monday, May 21, 2007 6:49:00 PM
> Subject: Re: [Freeswitch-users] Strange Reg
> 
> Okay, I tried:
> 
> recv 434 bytes from udp/[67.80.171.57]:48406 at 23:41:21.754015:
>    ------------------------------------------------------------------------
>    REGISTER sip:freeswitch1.asnetinc.net SIP/2.0
>    From: <sip:homebase at freeswitch1.asnetinc.net>;tag=a010033-13c4-108-40e02-46ec
>    To: <sip:homebase at freeswitch1.asnetinc.net>
>    Call-ID: a010033-13c4-108-40dfd-133e
>    CSeq: 1 REGISTER
>    Via: SIP/2.0/UDP 10.0.0.221:48406;branch=z9hG4bK-108-40e02-4ab5
>    Max-Forwards: 70
>    Supported: replaces
>    User-Agent: FXSO_GW
>    Contact: <sip:homebase at 10.0.0.221:48406>;q=0.5
>    Expires: 60
>    Content-Length: 0
> 
>    ------------------------------------------------------------------------
> 2007-05-21 23:41:21 [DEBUG] sofia_reg.c:387 sofia_reg_handle_register() Requesti
> ng Registration from: [homebase at freeswitch1.asnetinc.net]
> 
> ...and it responds with:
> 
> send 640 bytes to udp/[67.80.171.57]:48406 at 23:41:21.840657:
>    ------------------------------------------------------------------------
>    SIP/2.0 401 Unauthorized
>    Via: SIP/2.0/UDP 10.0.0.221:48406;branch=z9hG4bK-108-40e02-4ab5;received=67.8
> 0.171.57
>    From: <sip:homebase at freeswitch1.asnetinc.net>;tag=a010033-13c4-108-40e02-46ec
>    To: <sip:homebase at freeswitch1.asnetinc.net>;tag=e1arjB5HrFcHF
>    Call-ID: a010033-13c4-108-40dfd-133e
>    CSeq: 1 REGISTER
>    User-Agent: FreeSWITCH(mod_sofia)
>    Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, MESSAGE, SUBSCRIBE, NOTIFY,
> REFER, UPDATE, REGISTER, INFO
>    Supported: 100rel, precondition
>    WWW-Authenticate: Digest realm="freeswitch1.asnetinc.net", nonce="119b66e2-04
> 43-49a9-980f-d5b150274ff6", algorithm=MD5, qop="auth"
>    Content-Length: 0
> 
>    ------------------------------------------------------------------------
> 
> Any ideas as to what's wrong here?
> 
> Thanks,
>  - Dave
> 
> 
> On Mon, May 21, 2007 at 12:17:12PM -0700, Anthony Minessale wrote:
> > ok how about this:
> > 
> > try rev 5207 and do everything I described before only in the 
> > force-contact set it to nat-connectile-dysfunction
> > 
> > <variable name="force-contact" value="nat-connectile-dysfunction"/>
> > 
> > This will rewrite the host and ip of the contact to use the 
> > ip and port the req was received from.  To benefit  from this feature, you will probably need to set the ata to constantly register to maintain this dynamic reverse mapping created by the nat routers.  Most of them will destroy any mappings with inactivity after a certain period of time so you must make your reg freq more often that that time period whatever it may be.
> > 
> > 
> >  
> > Anthony Minessale II
> > 
> > FreeSWITCH http://www.freeswitch.org/
> > ClueCon http://www.cluecon.com/
> > 
> > AIM: anthm
> > MSN:anthony_minessale at hotmail.com
> > JABBER:anthony.minessale at gmail.com
> > IRC: irc.freenode.net #freeswitch
> > 
> > FreeSWITCH Developer Conference
> > sip:888 at conference.freeswitch.org
> > iax:guest at conference.freeswitch.org/888
> > googletalk:conf+888 at conference.freeswitch.org
> > pstn:213-799-1400
> > 
> > 
> > ----- Original Message ----
> > From: Dave <lists+freeswitch at bigfatdave.com>
> > To: freeswitch-users at lists.freeswitch.org
> > Sent: Monday, May 21, 2007 11:24:55 AM
> > Subject: Re: [Freeswitch-users] Strange Reg
> > 
> > Hi Anthony,
> > 
> > I assume that means we can change the topolgy to something like this:
> > ATA<->NAT<->Internet<->FS1
> > 
> > Basically, what we're doing here is telling FS1 how to find ATA.
> > There are only two problems:
> > 1) NAT is on DHCP.  (I assume this can be worked around by using DynDNS
> > instead of an IP.)
> > 2) As I discovered while looking for the mystery 10.0.0.221 IP, NAT is
> > actually two NATs, one behind the other, and I only have access to one
> > of them.
> > 
> > While you're at it, why don't you just make an option (<variable
> > name='my-ata-sucks' value='true'/>) to totally break RFCs and mimic
> > Asterisk's treatment? :-)
> > 
> > Thanks a bunch for all your help,
> >  - Dave
> > 
> > 
> > On Mon, May 21, 2007 at 07:25:01AM -0700, Anthony Minessale wrote:
> > > Hi,
> > > 
> > > You sound like a good candidate for my new experimental force contact feature.
> > > 
> > > For this to work you need to use the directory for auth instead of the blind reg mode.
> > > 
> > > *) Edit sofia.conf.xml and comment the blind reg option.
> > > *) Edit directory.xml and add a <user> tag to the <domain name="$${domain}">
> > >    section making sure $${domain} is also the name of the domain portion of 
> > >    the sip's client registration.
> > > 
> > > edit the file to look something like this and put in a absolute contact to use when this user registers regardless of what he advertises.  This means that if you are using nat you should setup a permenant port forwarding for whatver uri you mention.
> > > 
> > > e.g.
> > > 
> > > Assuming your public ip is 66.2.2.2 and your phone is 10.0.0.2
> > > 
> > > add a rule to always port forward udp port 5555 of 66.2.2.2 to 10.0.0.2 5060
> > > then edit the following so the contact uri is user at 66.2.2.2:5555
> > > 
> > > Whenever the phone registers with this user the specified contact will be added to the database instead of the real one this should make it possible for your phone to receive sip traffic even if it does not support STUN.
> > > 
> > > <domain name="$${domain}">
> > >   <user id="myuser">
> > >     <params>
> > >       <param name="password" value="mypass"/>
> > >     </params>
> > >     <variables>
> > >       <variable name="force-contact" value="[TESTING] sip:myuser at 66.2.2.2:5555"/>
> > >     </variables>
> > >   </user>
> > > </domain> 
> > >  
> > > Anthony Minessale II
> > > 
> > > FreeSWITCH http://www.freeswitch.org/
> > > ClueCon http://www.cluecon.com/
> > > 
> > > AIM: anthm
> > > MSN:anthony_minessale at hotmail.com
> > > JABBER:anthony.minessale at gmail.com
> > > IRC: irc.freenode.net #freeswitch
> > > 
> > > FreeSWITCH Developer Conference
> > > sip:888 at conference.freeswitch.org
> > > iax:guest at conference.freeswitch.org/888
> > > googletalk:conf+888 at conference.freeswitch.org
> > > pstn:213-799-1400
> > > 
> > > 
> > > ----- Original Message ----
> > > From: Dave <lists+freeswitch at bigfatdave.com>
> > > To: FSwtch Usrs <freeswitch-users at lists.freeswitch.org>
> > > Sent: Monday, May 21, 2007 2:20:53 AM
> > > Subject: [Freeswitch-users] Strange Reg
> > > 
> > > Hi guys,
> > > 
> > > I've got a rather interesting situation, here.  I've got an ATA
> > > registering to a FreeSWITCH(TM) (FS2), both behind NAT.  So far, so good.
> > > Now, the FreeSWITCH(TM) registers to another FreeSWITCH(TM) outside the
> > > NAT (FS2), and that's where the problems start.  Here's the configuration:
> > > 
> > > ATA<->FS2<->NAT<->Internet<->FS1
> > > 
> > > ATA: 10.1.0.51 (behind NAT)
> > > FS2: 10.1.0.30 (behind NAT)
> > > FS1: freeswitch1.asnetinc.net (64.118.94.19)
> > > 
> > > Now, here's where it gets very interesting.  This is what FS1 gets when
> > > FS2 registers:
> > > > From:    [R352928 at freeswitch1.asnetinc.net]
> > > > Contact: ["user" <sip:R352928 at 10.0.0.221:39260>]
> > > > Expires: [3600]
> > > > nta_agent: tport: Bad message
> > > 
> > > Now, where on Earth did 10.0.0.221 come from???  (I've actually hardcoded
> > > both external_rtp_ip and server_name to the public IP of the NAT in the
> > > FS2 config, but for some strange reason, FS2 apparently claims to be at
> > > 10.0.0.221, which isn't even its local IP.)
> > > 
> > > As if that's not interesting enough, I get this from FS1, too, when it
> > > tries to connect to another SIP server on the public Internet:
> > > > outbound(0xb4e1e1a0): detected NAT: freeswitch1.asnetinc.net != 64.118.94.19
> > > 
> > > Now, since a forward DNS resolution claims that the inequality is false, I
> > > assume it attempted a reverse DNS lookup, which would fail (since my ISP
> > > takes forever to update PTR records).
> > > 
> > > As usual, any hints, tips, tricks, ideas, suggestions, flames, questions,
> > > or (ideally) answers are greatly appreciated :-)
> > > 
> > > Thank you,
> > >  - Dave
> > > 
> > > _______________________________________________
> > > Freeswitch-users mailing list
> > > Freeswitch-users at lists.freeswitch.org
> > > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> > > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> > > http://www.freeswitch.org
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > > 
> > >        
> > > ____________________________________________________________________________________Be a better Heartthrob. Get better relationship answers from someone who knows. Yahoo! Answers - Check it out. 
> > > http://answers.yahoo.com/dir/?link=list&sid=396545433
> > > _______________________________________________
> > > Freeswitch-users mailing list
> > > Freeswitch-users at lists.freeswitch.org
> > > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> > > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> > > http://www.freeswitch.org
> > 
> > 
> > _______________________________________________
> > Freeswitch-users mailing list
> > Freeswitch-users at lists.freeswitch.org
> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> > http://www.freeswitch.org
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> >  
> > ____________________________________________________________________________________
> > Need Mail bonding?
> > Go to the Yahoo! Mail Q&A for great tips from Yahoo! Answers users.
> > http://answers.yahoo.com/dir/?link=list&sid=396546091
> > _______________________________________________
> > Freeswitch-users mailing list
> > Freeswitch-users at lists.freeswitch.org
> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> > http://www.freeswitch.org
> 
> 
> _______________________________________________
> Freeswitch-users mailing list
> Freeswitch-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
> 
> 
> 
> 
> 
> 
> 
>  
> ____________________________________________________________________________________
> No need to miss a message. Get email on-the-go 
> with Yahoo! Mail for Mobile. Get started.
> http://mobile.yahoo.com/mail 
> _______________________________________________
> Freeswitch-users mailing list
> Freeswitch-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org


_______________________________________________
Freeswitch-users mailing list
Freeswitch-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org







       
____________________________________________________________________________________Need a vacation? Get great deals
to amazing places on Yahoo! Travel.
http://travel.yahoo.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20070525/f25571ff/attachment-0002.html 


More information about the FreeSWITCH-users mailing list