October 2013 - FreeSWITCH-users - FreeSWITCH Mailing Lists

Re: [Freeswitch-users] multiple sip profiles
by Andre Demattia 15 Oct '13

15 Oct '13

Thanks I'll try that out. I assume its internal profile only? Also -nonat is just an argument right when launching freeswitch.exe -----Original Message----- From: "Steven Ayre" <steveayre(a)gmail.com> Sent: ‎10/‎15/‎2013 6:29 AM To: "FreeSWITCH Users Help" <freeswitch-users(a)lists.freeswitch.org> Subject: Re: [Freeswitch-users] multiple sip profiles You duplicate the entire <profile> tag, usuallly found in /etc/freeswitch/sip_profiles A profile is binds to a single sip-ip and sip-port combination. You want to change the IP, port, or both on the new profile. rtp-ip *can* be the same, but is probably best matching the sip-ip (on a multihomed server you then know the media's taking the same working route that the signalling is). Also on a real server with a static IP should I also remove auto-nat? I don't use any nat stuff on a public IP. I have no ext-*-ip params set, which means they default to using the sip-ip and rtp-ip values. I also start freeswitch with the -nonat flag (in the init.d script) which lets it start up much faster as it doesn't bother autodetecting your non-existent NAT router. -Steve On 15 October 2013 00:40, Andre <andretodd(a)verizon.net> wrote: What values need to be changed to create multiple sip profiles? Let's say my box has 2 IP's and I want only some traffic on one IP. In Internal I see these fields, should I change these to my other IP? <param name="rtp-ip" value="$${local_ip_v4}"/> <param name="sip-ip" value="$${local_ip_v4}"/> <param name="ext-rtp-ip" value="auto-nat"/> <param name="ext-sip-ip" value="auto-nat"/> <param name="sip-port" value="5062"/> Also on a real server with a static IP should I also remove auto-nat? Thanks _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting(a)freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users(a)lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

2 1

Inspecting sessions from fs_cli
by Alex Lake 15 Oct '13

15 Oct '13

Is there a way I can look at all session variables of a live call from the fs_cli prompt? eg. "show session fb413c9a-c82b-4c4d-bb8c-5101aacb5ed5" cheers, Alex

5 9

multiple sip profiles
by Andre 15 Oct '13

15 Oct '13

What values need to be changed to create multiple sip profiles? Let's say my box has 2 IP's and I want only some traffic on one IP. In Internal I see these fields, should I change these to my other IP? <param name="rtp-ip" value="$${local_ip_v4}"/> <param name="sip-ip" value="$${local_ip_v4}"/> <param name="ext-rtp-ip" value="auto-nat"/> <param name="ext-sip-ip" value="auto-nat"/> <param name="sip-port" value="5062"/> Also on a real server with a static IP should I also remove auto-nat? Thanks

2 1

Re: [Freeswitch-users] Migrating from SQLite to MySQL
by Jeff Leung 15 Oct '13

15 Oct '13

You could dump the data from the sqlite database as a bunch of inserts and then import it to your favorite rdbms of your choice. Alex Lake <alex(a)digitalmail.com> wrote: Just wondered if there is an "easy" way to change my DB from the default sqlite to mysql without losing data (eg. voicemail settings)? _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting(a)freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users(a)lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

1 0

Migrating from SQLite to MySQL
by Alex Lake 15 Oct '13

15 Oct '13

Just wondered if there is an "easy" way to change my DB from the default sqlite to mysql without losing data (eg. voicemail settings)?

1 0

Re: [Freeswitch-users] What kind of attack is this?
by Jeff Leung 14 Oct '13

14 Oct '13

It's working as intended Mimiko <vbvbrj(a)gmail.com> wrote: On 14.10.2013 18:05, Ken Rice wrote: > You can drop any packet with friendly-scanner in > it with iptables as a way to defeat the attack also I use this command: iptables -I INPUT -j DROP -p udp –dport 5060 -m string –string “friendly-scanner” –algo bm and my iptables looks like this: Chain INPUT (policy DROP 27 packets, 8596 bytes) pkts bytes target prot opt in out source destination 2482 905K DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:5060 STRING match "friendly-scanner" ALGO name bm TO 65535 0 0 DROP all -- * * 50.7.251.123 0.0.0.0/0 0 0 DROP all -- * * 199.241.187.214 0.0.0.0/0 0 0 DROP all -- * * 85.25.199.142 0.0.0.0/0 0 0 DROP all -- * * 50.30.37.10 0.0.0.0/0 0 0 DROP all -- * * 62.75.212.215 0.0.0.0/0 But this does not help. -- Mimiko desu. _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting(a)freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users(a)lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

2 1

lua session question
by Ira Tessler 14 Oct '13

14 Oct '13

I have a lua script that I am creating a new session: legA = freeswitch.Session(dialA); Where dial is: {dtmf_type=none,originate_timeout=60,instant_ringback=true,origination_caller_id_name=xxxxxxxxxx,origination_caller_id_number=xxxxxxxxxx,followme_callid=e9886a3f-58c5-456a-949a-b5bd89b11b38}sofia/gateway/sr/xxxxxxxxxx|sofia/gateway/voipinnovations.com/xxxxxxxxxx When the session gets created, it is in the "default" context. How can I set the context for the channel to be created in? Ira Tessler Lead Software Engineer ConnectMe (732) 490-9007 x2 ira(a)connectmevoice.com

2 1

Re: [Freeswitch-users] What kind of attack is this?
by Jeff Leung 14 Oct '13

14 Oct '13

Also lately there has been scanners spoofing Cisco IOS devices. Stay safe people. Ken Rice <krice(a)freeswitch.org> wrote: Google around a little... You can drop any packet with friendly-scanner in it with iptables as a way to defeat the attack also On 10/14/13 9:57 AM, "Mimiko" <vbvbrj(a)gmail.com> wrote: > On 14.10.2013 17:54, Ken Rice wrote: >> This is sipvicious, its a brute force scanner... See >> http://wiki.freeswitch.org/wiki/Fail2ban on how to setup Fail2ban with >> FreeSWITCH to defeat this attack > > Ken thank you. I am planning to set up Fail2ban. But for now need to > drop any packet from offending IP. -- Ken http://www.FreeSWITCH.org http://www.ClueCon.com http://www.OSTAG.org irc.freenode.net #freeswitch _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting(a)freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users(a)lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

1 0

Re: [Freeswitch-users] What kind of attack is this?
by Jeff Leung 14 Oct '13

14 Oct '13

You can also use iptables to drop udp packets with the string friendly-scanner destined to port 5060 Ken Rice <krice(a)freeswitch.org> wrote: This is sipvicious, its a brute force scanner... See http://wiki.freeswitch.org/wiki/Fail2ban on how to setup Fail2ban with FreeSWITCH to defeat this attack On 10/14/13 9:28 AM, "Mimiko" <vbvbrj(a)gmail.com> wrote: > Hello. > > recently I see ddos on one interface and FS module callcenter is working > irregularly. tcpdump shows this: > > 17:17:42.410306 IP (tos 0x0, ttl 48, id 0, offset 0, flags [DF], proto > UDP (17), length 364) > 50.30.37.10.5064 > A.B.C.D.5060: [udp sum ok] UDP, length 336 > E..l..@.0...2.% > MY.".....XW.REGISTER sip:A.B.C.D SIP/2.0 > Via: SIP/2.0/UDP 62.75.212.215:5064;branch=z9hG4bK-3646224729;rport > Content-Length: 0 > From: "6796" <sip:6796@A.B.C.D> > Accept: application/sdp > User-Agent: friendly-scanner > To: "6796" <sip:6796@A.B.C.D> > Contact: sip:123@1.1.1.1 > CSeq: 1 REGISTER > Call-ID: 360911671 > Max-Forwards: 70 > > > 17:17:42.415504 IP (tos 0x0, ttl 48, id 0, offset 0, flags [DF], proto > UDP (17), length 365) > 50.30.37.10.5064 > A.B.C.D.5060: [udp sum ok] UDP, length 337 > E..m..@.0...2.% > MY.".....Y,.REGISTER sip:A.B.C.D SIP/2.0 > Via: SIP/2.0/UDP 62.75.212.215:5064;branch=z9hG4bK-1538287390;rport > Content-Length: 0 > From: "6796" <sip:6796@A.B.C.D> > Accept: application/sdp > User-Agent: friendly-scanner > To: "6796" <sip:6796@A.B.C.D> > Contact: sip:123@1.1.1.1 > CSeq: 1 REGISTER > Call-ID: 3912185912 > Max-Forwards: 70 > > > 17:17:42.420997 IP (tos 0x0, ttl 48, id 0, offset 0, flags [DF], proto > UDP (17), length 365) > 50.30.37.10.5064 > A.B.C.D.5060: [udp sum ok] UDP, length 337 > E..m..@.0...2.% > MY.".....Y7.REGISTER sip:A.B.C.D SIP/2.0 > Via: SIP/2.0/UDP 62.75.212.215:5064;branch=z9hG4bK-3729326239;rport > Content-Length: 0 > From: "6796" <sip:6796@A.B.C.D> > Accept: application/sdp > User-Agent: friendly-scanner > To: "6796" <sip:6796@A.B.C.D> > Contact: sip:123@1.1.1.1 > CSeq: 1 REGISTER > Call-ID: 2188845586 > Max-Forwards: 70 > > > 17:17:42.425886 IP (tos 0x0, ttl 48, id 0, offset 0, flags [DF], proto > UDP (17), length 365) > 50.30.37.10.5064 > A.B.C.D.5060: [udp sum ok] UDP, length 337 > E..m..@.0...2.% > MY.".....Y3.REGISTER sip:A.B.C.D SIP/2.0 > Via: SIP/2.0/UDP 62.75.212.215:5064;branch=z9hG4bK-2208974380;rport > Content-Length: 0 > From: "6796" <sip:6796@A.B.C.D> > Accept: application/sdp > User-Agent: friendly-scanner > To: "6796" <sip:6796@A.B.C.D> > Contact: sip:123@1.1.1.1 > CSeq: 1 REGISTER > Call-ID: 4149361432 > Max-Forwards: 70 > > > 17:17:42.431126 IP (tos 0x0, ttl 48, id 0, offset 0, flags [DF], proto > UDP (17), length 364) > 50.30.37.10.5064 > A.B.C.D.5060: [udp sum ok] UDP, length 336 > E..l..@.0...2.% > MY.".....X..REGISTER sip:A.B.C.D SIP/2.0 > Via: SIP/2.0/UDP 62.75.212.215:5064;branch=z9hG4bK-725880732;rport > Content-Length: 0 > From: "6796" <sip:6796@A.B.C.D> > Accept: application/sdp > User-Agent: friendly-scanner > To: "6796" <sip:6796@A.B.C.D> > Contact: sip:123@1.1.1.1 > CSeq: 1 REGISTER > Call-ID: 1466795680 > Max-Forwards: 70 > > > 17:17:42.436476 IP (tos 0x0, ttl 48, id 0, offset 0, flags [DF], proto > UDP (17), length 365) > 50.30.37.10.5064 > A.B.C.D.5060: [udp sum ok] UDP, length 337 > E..m..@.0...2.% > MY.".....Y6.REGISTER sip:A.B.C.D SIP/2.0 > Via: SIP/2.0/UDP 62.75.212.215:5064;branch=z9hG4bK-3259665948;rport > Content-Length: 0 > From: "6796" <sip:6796@A.B.C.D> > Accept: application/sdp > User-Agent: friendly-scanner > To: "6796" <sip:6796@A.B.C.D> > Contact: sip:123@1.1.1.1 > CSeq: 1 REGISTER > Call-ID: 3328716097 > Max-Forwards: 70 > > > 17:17:42.441541 IP (tos 0x0, ttl 48, id 0, offset 0, flags [DF], proto > UDP (17), length 364) > 50.30.37.10.5064 > A.B.C.D.5060: [udp sum ok] UDP, length 336 > E..l..@.0...2.% > MY.".....XT.REGISTER sip:A.B.C.D SIP/2.0 > Via: SIP/2.0/UDP 62.75.212.215:5064;branch=z9hG4bK-2487219966;rport > Content-Length: 0 > From: "6796" <sip:6796@A.B.C.D> > Accept: application/sdp > User-Agent: friendly-scanner > To: "6796" <sip:6796@A.B.C.D> > Contact: sip:123@1.1.1.1 > CSeq: 1 REGISTER > Call-ID: 684380132 > Max-Forwards: 70 > > > In iptables I have this: > 1637 597K DROP all -- * * 50.30.37.10 > 0.0.0.0/0 > 0 0 DROP all -- * * 62.75.212.215 > 0.0.0.0/0 > > So packets form that IP are not dropped. How is that? Does FS has a bag? -- Ken http://www.FreeSWITCH.org http://www.ClueCon.com http://www.OSTAG.org irc.freenode.net #freeswitch _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting(a)freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users(a)lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

1 0

Configuration with dynamic public IP
by Martin Čmelík 14 Oct '13

14 Oct '13

Hi all, I have very easy (easy for you :]) question. Let me describe in short the setup. FreeSWITCH installed on local network computer. No extra functions are required, I will just install FS, create users in directory and then need capability to make call with users inside same internal network, as well as with clients on Internet which will be logged/registered on same PBX. External IP is changing in time, but my router have UPnP capability and I also redirect all incoming traffic to this PBX. Users place calls from mobile clients (Linphone). I have two issues: 1] Internally everything works fine (from internal to internal). I have problem with clients registered from Internet, who cant call anyone else (mailbox, IVR, echo test, ... is OK). Error message in FS states USER_NOT_REGISTERED and "Client busy" on side of caller. I try couple of things/setup in vars.xml but still nothing helped me (external_rtp_ip, external_sip_ip). Does anyone have working example? 2] Which is in relation with problem "1". External IP of my router is changing with almost every restart of my router. Is there some recommendation how FS can check, from time to time, current IP and change setup accordingly? I can also write script which will check current IP, rewrite config and restart FS if needed, but if something already exist, why reinvent the wheel :] If this is described already (I was unsuccessful on google), please just send me a link. Thank you very much! — Martin Čmelík

1 0