[Freeswitch-users] SBC

Mon Dec 12 05:17:57 MSK 2016

I love freeswitch, but frankly I would not recomend to set it as SBC. I
personally faced two attacks where FS was not good at. And we lost a lot of
money. It works perfectly as NAT between internal and extenal networks,
actually in everything but it is weak as a firewall. Stanislav knows that,
he helped me to resolve the problem first time when it happend. I cannot go
into details as this is open forum. You need to put either kamailio or
opensips in front of FS.

2016-12-12 5:17 GMT+06:00 Stanislav Sinyagin <ssinyagin at gmail.com>:

> I hope this will help you to wrap your brain around FS and let you start
> easily:
> https://freeswitch.org/confluence/display/FREESWITCH/
> FreeSWITCH+PBX+Example
>
> In general, your SIP profiles don't have to be "internal/external", and
> your dialplan contexts don't have to be "public" or anything else. In
> general, you can design the whole configuration to serve the exact purpose.
> For example, right now I'm setting up a configuration with "inbound" and
> "outbound" SIP profiles and correspondingly named dialplan contexts.
>
> For an SBC, it's quite logical to name your profiles as "inside" and
> "outside", and remove all unneeded parts of the configuration, such as IVR
> menus. If you want your inside SIP clients to register on your box, you set
> up a directory and enforce authentication on the corresponding SIP profile.
>
> Also in the example above, you can find a proposed design for multiple
> ITSPs and a simple selection rule based on the country code.
>
> Also it's good to read the book first. You would spend about a day to
> grasp the basic concepts, and it will streamline your further work.
>
>
>
>
>
>
>
> On Sat, Dec 10, 2016 at 2:38 PM, Valter Nogueira <valter at fastway.com.br>
> wrote:
>
>> Its a little hard to change the mind from asterisk to fs.
>>
>> I will try it tomorrow when users are away and the mice can play.
>>
>> Thanks
>>
>> Em 10 de dez de 2016 11:11 AM, "David Villasmil" <
>> david.villasmil.work at gmail.com> escreveu:
>>
>>> Hello,
>>>
>>> You don't HAVE to, but it's good practice.
>>> Configure your provider anywhere you want, internal or external. The
>>> names are not relevant, really. They are just names indicating that the
>>> internal profile will authenticate registers/call (auth_calls parameter)
>>> whereas by default external doesn't, though you can auth via acl.xml.conf.
>>> Once registered with your provider, you just send the call out with,
>>> i.e.:
>>>
>>> {origination_caller_id_number=INCOMING_CALLER_ID}sofia/gatew
>>> ay/your-provider/$1
>>>
>>> hope this helps
>>>
>>> David
>>>
>>> On Sat, Dec 10, 2016 at 1:39 PM Valter Nogueira <valter at fastway.com.br>
>>> wrote:
>>>
>>>> Yes, I want to use FS as a registar.
>>>>
>>>> I already have this working in an asterisk server and want to test FS
>>>> as a replacement.
>>>>
>>>> 18 servers share a single sip provider and FS will act as a gateway.
>>>>
>>>> I have seen example.com.xml which is a user and have a gateway inside
>>>> its definition.
>>>>
>>>> What I don't get is why it is in external profile.
>>>>
>>>> By the way, if I won't register in a sip provider, should I declare it
>>>> as a gateway?
>>>>
>>>> Thanks
>>>>
>>>> Em 9 de dez de 2016 20:47, "Vladyslav Zakhozhai" <v.zakhozhai at gmail.com>
>>>> escreveu:
>>>>
>>>> Hi Valter,
>>>>
>>>> You are right that you need to use directory rather than sip_profiles.
>>>> Gateways in sip profiles are gateways which freeswitch is registered
>>>> against.
>>>>
>>>> By the way do I correctly understand you that you want Asterisk servers
>>>> to register against freeswitch, i.e. freeswitch is registrar? And also you
>>>> always can see exact problem in freeswitch console and logs.
>>>>
>>>>
>>>> 2016-12-09 20:01 GMT+02:00 Valter Nogueira <valter at fastway.com.br>:
>>>>
>>>> I would like to set up FS to run as a small SBC.
>>>>
>>>> Profile "internal" (nic em1) would be source for N asterisks that will
>>>> register in FS. Some Asterisks should be trusted by IP (acl)
>>>>
>>>> Profile "external" (nic em2) would connect in an SIP Provider.
>>>>
>>>> So call coming from internal would routed to external gateway and
>>>> vice-versa in dialplan.
>>>>
>>>> To mimic external profile I added in internal
>>>>
>>>>   <gateways>
>>>>     <X-PRE-PROCESS cmd="include" data="internal/*.xml"/>
>>>>   </gateways>
>>>>
>>>> Asterisks are unable to register. I guess that the problem is internal
>>>> gateway should be in directory instead of in sip_profile.
>>>>
>>>> Thanks,
>>>>
>>>> Valter
>>>>
>>>> ____________________________________________________________
>>>> _____________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free
>>>> switch-users
>>>> http://www.freeswitch.org
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> С уважением,
>>>> Владислав Захожай
>>>>
>>>>
>>>> ____________________________________________________________
>>>> _____________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free
>>>> switch-users
>>>> http://www.freeswitch.org
>>>>
>>>> ____________________________________________________________
>>>> _____________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/free
>>>> switch-users
>>>> http://www.freeswitch.org
>>>
>>> ᐧ
>>>
>>> ____________________________________________________________
>>> _____________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>

-- 
Kamil Nigmatullin
Tel: 77272323748
mob: 7 (707) 2517003
Skype: kamil.nigmatullin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20161212/44776a5e/attachment-0001.html 