[Freeswitch-users] SBC

[David Villasmil]

It would be nice if you pointed out the problem you had, we all use
freeswitch one way or another. Ot at least the type of attack and how did
you "reinforced" it.
On Mon, Dec 12, 2016 at 3:18 AM Kamil Nigmatullin <
kamil.nigmatullin at gmail.com> wrote:

> I love freeswitch, but frankly I would not recomend to set it as SBC. I
> personally faced two attacks where FS was not good at. And we lost a lot of
> money. It works perfectly as NAT between internal and extenal networks,
> actually in everything but it is weak as a firewall. Stanislav knows that,
> he helped me to resolve the problem first time when it happend. I cannot go
> into details as this is open forum. You need to put either kamailio or
> opensips in front of FS.
>
> 2016-12-12 5:17 GMT+06:00 Stanislav Sinyagin <ssinyagin at gmail.com>:
>
> I hope this will help you to wrap your brain around FS and let you start
> easily:
> https://freeswitch.org/confluence/display/FREESWITCH/FreeSWITCH+PBX+Example
>
> In general, your SIP profiles don't have to be "internal/external", and
> your dialplan contexts don't have to be "public" or anything else. In
> general, you can design the whole configuration to serve the exact purpose.
> For example, right now I'm setting up a configuration with "inbound" and
> "outbound" SIP profiles and correspondingly named dialplan contexts.
>
> For an SBC, it's quite logical to name your profiles as "inside" and
> "outside", and remove all unneeded parts of the configuration, such as IVR
> menus. If you want your inside SIP clients to register on your box, you set
> up a directory and enforce authentication on the corresponding SIP profile.
>
> Also in the example above, you can find a proposed design for multiple
> ITSPs and a simple selection rule based on the country code.
>
> Also it's good to read the book first. You would spend about a day to
> grasp the basic concepts, and it will streamline your further work.
>
>
>
>
>
>
>
> On Sat, Dec 10, 2016 at 2:38 PM, Valter Nogueira <valter at fastway.com.br>
> wrote:
>
> Its a little hard to change the mind from asterisk to fs.
>
> I will try it tomorrow when users are away and the mice can play.
>
> Thanks
>
> Em 10 de dez de 2016 11:11 AM, "David Villasmil" <
> david.villasmil.work at gmail.com> escreveu:
>
> Hello,
>
> You don't HAVE to, but it's good practice.
> Configure your provider anywhere you want, internal or external. The names
> are not relevant, really. They are just names indicating that the internal
> profile will authenticate registers/call (auth_calls parameter) whereas by
> default external doesn't, though you can auth via acl.xml.conf.
> Once registered with your provider, you just send the call out with, i.e.:
>
>
> {origination_caller_id_number=INCOMING_CALLER_ID}sofia/gateway/your-provider/$1
>
> hope this helps
>
> David
>
> On Sat, Dec 10, 2016 at 1:39 PM Valter Nogueira <valter at fastway.com.br>
> wrote:
>
> Yes, I want to use FS as a registar.
>
> I already have this working in an asterisk server and want to test FS as a
> replacement.
>
> 18 servers share a single sip provider and FS will act as a gateway.
>
> I have seen example.com.xml which is a user and have a gateway inside its
> definition.
>
> What I don't get is why it is in external profile.
>
> By the way, if I won't register in a sip provider, should I declare it as
> a gateway?
>
> Thanks
>
> Em 9 de dez de 2016 20:47, "Vladyslav Zakhozhai" <v.zakhozhai at gmail.com>
> escreveu:
>
> Hi Valter,
>
> You are right that you need to use directory rather than sip_profiles.
> Gateways in sip profiles are gateways which freeswitch is registered
> against.
>
> By the way do I correctly understand you that you want Asterisk servers to
> register against freeswitch, i.e. freeswitch is registrar? And also you
> always can see exact problem in freeswitch console and logs.
>
>
> 2016-12-09 20:01 GMT+02:00 Valter Nogueira <valter at fastway.com.br>:
>
> I would like to set up FS to run as a small SBC.
>
> Profile "internal" (nic em1) would be source for N asterisks that will
> register in FS. Some Asterisks should be trusted by IP (acl)
>
> Profile "external" (nic em2) would connect in an SIP Provider.
>
> So call coming from internal would routed to external gateway and
> vice-versa in dialplan.
>
> To mimic external profile I added in internal
>
>   <gateways>
>     <X-PRE-PROCESS cmd="include" data="internal/*.xml"/>
>   </gateways>
>
> Asterisks are unable to register. I guess that the problem is internal
> gateway should be in directory instead of in sip_profile.
>
> Thanks,
>
> Valter
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
>
>
> --
> С уважением,
> Владислав Захожай
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
> ᐧ
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
>
>
> --
> Kamil Nigmatullin
> Tel: 77272323748
> mob: 7 (707) 2517003
> Skype: kamil.nigmatullin
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20161212/7b9fb274/attachment-0001.html