May 2018 - FreeSWITCH-users - FreeSWITCH Mailing Lists

Debian 9 and Freeswitch 1.8
by William Colls 11 Jul '18

11 Jul '18

Is there an expected date when Freeswitch 1.8/Debian 9 will become the preferred production configuration?

4 4

Setting Headers in mod_xml_curl and mod_curl
by Chhorm Chhatra 09 Jul '18

09 Jul '18

Thank you for making freeswitch awesome! Currently, i face an issue regarding setting headers in mod_xml_curl as per the security requirements to the remote server. I would like to know how to include custom headers in mod_xml_curl configuration. If you do not mind, please kindly let me know if there is any possibility to do so. Thank you so much. Best Regard, Chhatra Chhorm

3 3

Enterprise/Production Quality?
by Geoff Mina 20 Jun '18

20 Jun '18

Is anyone out there actually using FS successfully in an enterprise environment? We have deployed a handful of servers in an extremely simple configuration to allow standard SIP infrastructure to communicate with WebRTC clients. We run ~150 concurrent users per host and we can’t go a week without something in the core of Sofia failing. We have seen hung profiles that simply don’t respond to REGISTER requests (tried every suggested tweak to no avail) as well as seeing FS hang every call in a RINGING state without actually ringing the end client. These seem like pretty fundamental components we are struggling with. Our use case seems quite simple - yet the software (1.6.19) seems like it has never even seen a production deployment. Anyone out there have a drastically different experience?

10 14

Sending SIP Messages from LUA
by Ronnie Beck 19 Jun '18

19 Jun '18

Hi All, I am trying to write a LUA script which will slot into a chatplan whose goal is to simple take a simple text message (SIMPLE MESSAGE) and then distribute it to multiple recipients. I wrote a script which takes some arguments (sender, recipieant list and the body) then would generate new SIP Messages to be sent to each of the recipient. The code I use to generate the message (which is more or less the example given in mod_sms for sending an SMS, not exactly what I want to do): local event = freeswitch.Event("CUSTOM", "SMS::SEND_MESSAGE"); event:addHeader("proto", "global"); event:addHeader("dest_proto", "sip"); event:addHeader("from", source); event:addHeader("to", domain.."/"..recipient); event:addHeader("type", "text/plain"); event:addHeader("skip_global_process", "true"); event:addBody( body ); event:fire(); This gives the error: [WARNING] sofia_presence.c:221 Not sending to local box for XXXX(a)10.11.12.13 [ERR] sofia_presence.c:272 Chat proto [sip] from [<sip:YYYY@10.11.12.13>;tag=uUQudJKEl1SKjq8wdjqwi68768] to [XXXX(a)10.11.12.13] Some message text Nobody to send to: Profile internal But the message actually arrives successfully. This is fine but I would prefer not to have lots of error messages. So I tried to find a more correct way to do this. I tried the following (based on what I could find in freeswitch 1.6.20 source code): local event = freeswitch.Event("SWITCH_EVENT_SEND_MESSAGE"); event:addHeader("user", recipient ); event:addHeader("host", domain ); event:addHeader("profile", domain ); event:addHeader("subject", "SIMPLE MESSAGE"); event:addHeader("content-type", "text/plain"); event:addHeader("from", source); event:addBody( body ); event:fire(); But this gives the same error. How can I send a simple SIP Message with LUA to a locally registered user? Many thanks, Aaron

2 1

Re: [Freeswitch-users] Achieving TLS + SRTP for inbound calls
by David P 06 Jun '18

06 Jun '18

While waiting for suggestions, I tried more things. In particular, I tested whether gentls_cert was present in our FS install (which is at /opt/freeswitch/ on ubuntu). It is present, but the CA root cert step writes to {prefix}/etc/freeswitch/tls/CA/ instead of {prefix}/conf/ssl/CA/. In particular, the root CA step generates: etc/freeswitch/tls/ cafile.pem etc/freeswitch/tls/CA/ cacert.pem cakey.pem config.tpl And the server cert step generates: etc/freeswitch/tls/ agent.pem etc/freeswitch/tls/CA/ cacert.srl Reviewing agent.pem shows it's fine: openssl x509 -noout -inform pem -text -in /opt/freeswitch/etc/freeswitch/tls/agent.pem But it's owned by user root group root, so: cd /opt/freeswitch/etc/freeswitch/tls/ chmod 640 agent.pem CA/cacert.pem chown root.freeswitch agent.pem CA/cacert.pem Then I edited /opt/freeswitch/etc/freeswitch/vars.xml to set internal_ssl_enable and external_ssl_enable to true. Then I restarted FS. I checked the CLI and it shows "WS SETUP FAILED" repeatedly. *Any suggestion?* Blazing ahead...then I exposed the public IP of the FS machine under a subdomain of the CA root cert's domain. (I used a wildcard subdomain for -org when generating both certs; maybe giving a wildcard this way is unnecessary or counterproductive.) Now, the part that puzzles me: I'm already using a "real CA" cert in order to serve my verto client files over https from my DNS name, so browsers won't show security warnings. But I bet I need to have the same CA root cert installed in FS as I use in the webserver, right? I saw the note that commercial certs should work, but *it's not clear what steps to follow to install one*. Cheers, David On Tue, May 22, 2018 at 9:50 PM, David P <davidswalkabout(a)gmail.com> wrote: > We use conferences to allow a verto user to call and connect with an > Asterisk channel. We would like to secure both signalling and media via TLS > + SRTP, and I've read https://freeswitch.org/ > confluence/display/FREESWITCH/SIP+TLS a few times to understand how to do > this. Note that that page has a broken link: https://wiki.freeswitch.org/ > wiki/Secure_RTP > > First, is it still true that FS doesn't offer prebuilt installs (for > Ubuntu) to support this kind of security? > > Assuming that it must be compiled, I began to follow > https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie with > the additional first step of: apt-get install libssl-dev > > I soon ran into "Unable to locate package freeswitch-video-deps-most". > > What should I try next? > > Cheers, > David >

2 2

How to get working leg timeout
by Sergey Safarov 04 Jun '18

04 Jun '18

Hello i want hangup call if caller not responded for 20 sec. When bleg send RINGING message then leg_timeout works as expected. But if bleg send SESSION_PROGGRESS message then leg_timeout help. Is exist other way to get this working?

6 8

Freeswitch records only 15 seconds of call.
by Ketan Kothari 04 Jun '18

04 Jun '18

Hi All, I'm getting issue on call recordings. Freeswitch can records maximum 15 seconds call but actual call was around 5 minutes. Any suggestion to overcome this issue ?

4 6

Gateway
by Hossein Gholizadeh 01 Jun '18

01 Jun '18

hi ... i have my gateway on 192.168.30.32 and a phone which connected to gateway 984432250161. I configured them like this : 1.created a xml file in \conf\sip_profiles\external with name cheap_tel.xml and the content is this : <include> <gateway name="provider"> <param name="proxy" value="192.168.30.32"/> <param name="register" value="false"/> <param name="caller-id-in-from" value="true"/>  <param name="username" value="not-used"/> <param name="password" value="not-used"/> </gateway> </include> 2.and in acl.conf added this node : <node type="allow" cidr="192.168.30.32/32"/> is my gateway config right ? because when i want to send a fax file by loopback with this command i have no error but fax is not saved in directory : Command ----> originate sofia/gateway/provider/984432250161 &txfax(C:/test.tiff) And also my dialplan configs for fax is this : <extension name="fax_detect"> <condition field="destination_number" expression="^984432250161$"> <action application="answer" /> <action application="set" data="transfer_ringback=${us-ring}" /> <action application="spandsp_start_fax_detect" data="transfer '9978 XML default' 10 ced"/> <action application="bridge" data="user/$1@${domain_name}" /> </condition> </extension> <extension name="fax_receive"> <condition field="destination_number" expression="^9978$"> <action application="answer" /> <action application="playback" data="silence_stream://2000"/> <action application="rxfax" data="$${base_dir}/faxes/${uuid}.tif"/> <action application="hangup"/> </condition> </extension> Can any one help me?

2 4

Bookmark in Play recording using bind_digit_action on call
by Uday kumar 01 Jun '18

01 Jun '18

Hello All, When any call is coming server, I am just playing a .wav file. Recording file length is 120min. Using *bind_digit_action*, user able to pause, seek, speed volume up and down. But no have time to listen 120min recording at a time. So If user will press a key, example 9 then save that playing location with caller phone number. If same caller calling from same number then start playing file from same where bookmark key was pressed. Please advise. -- Thanks & Regard Uday. Mobile:- +91-9377579349

1 1

Re: [Freeswitch-users] Achieving TLS + SRTP for inbound calls
by David P 01 Jun '18

01 Jun '18

Thanks, Mike, I'll try another distro. About verto, which I already serve under an AWS free non-exportable cert, does it need the gentls-generated CA root cert somewhere? And do I need any more steps to secure the streamed media? On Thu, 24 May 2018, 9:05 am Michael Jerris, <mike(a)jerris.com> wrote: > Try something NOT ubuntu. Ubuntu disables some required stuff in their > openssl making it unusable for webrtc at least in some versions. > > > On May 24, 2018, at 1:27 AM, David P <davidswalkabout(a)gmail.com> wrote: > > While waiting for suggestions, I tried more things. In particular, I > tested whether gentls_cert was present in our FS install (which is at > /opt/freeswitch/ on ubuntu). > > It is present, but the CA root cert step writes to > {prefix}/etc/freeswitch/tls/CA/ instead of {prefix}/conf/ssl/CA/. In > particular, the root CA step generates: > > etc/freeswitch/tls/ > cafile.pem > > etc/freeswitch/tls/CA/ > cacert.pem > cakey.pem > config.tpl > > And the server cert step generates: > > etc/freeswitch/tls/ > agent.pem > > etc/freeswitch/tls/CA/ > cacert.srl > > Reviewing agent.pem shows it's fine: > openssl x509 -noout -inform pem -text -in > /opt/freeswitch/etc/freeswitch/tls/agent.pem > > But it's owned by user root group root, so: > cd /opt/freeswitch/etc/freeswitch/tls/ > chmod 640 agent.pem CA/cacert.pem > chown root.freeswitch agent.pem CA/cacert.pem > > Then I edited /opt/freeswitch/etc/freeswitch/vars.xml to set > internal_ssl_enable and external_ssl_enable to true. > > Then I restarted FS. I checked the CLI and it shows "WS SETUP FAILED" > repeatedly. *Any suggestion?* > > Blazing ahead...then I exposed the public IP of the FS machine under a > subdomain of the CA root cert's domain. (I used a wildcard subdomain for > -org when generating both certs; maybe giving a wildcard this way is > unnecessary or counterproductive.) > > Now, the part that puzzles me: I'm already using a "real CA" cert in order > to serve my verto client files over https from my DNS name, so browsers > won't show security warnings. But I bet I need to have the same CA root > cert installed in FS as I use in the webserver, right? I saw the note that > commercial certs should work, but *it's not clear what steps to follow to > install one*. > > Cheers, > David > > > On Tue, May 22, 2018 at 9:50 PM, David P <davidswalkabout(a)gmail.com> > wrote: > >> We use conferences to allow a verto user to call and connect with an >> Asterisk channel. We would like to secure both signalling and media via TLS >> + SRTP, and I've read >> https://freeswitch.org/confluence/display/FREESWITCH/SIP+TLS a few times >> to understand how to do this. Note that that page has a broken link: >> https://wiki.freeswitch.org/wiki/Secure_RTP >> >> First, is it still true that FS doesn't offer prebuilt installs (for >> Ubuntu) to support this kind of security? >> >> Assuming that it must be compiled, I began to follow >> https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie >> with the additional first step of: apt-get install libssl-dev >> >> I soon ran into "Unable to locate package freeswitch-video-deps-most". >> >> What should I try next? >> >> Cheers, >> David >> > > _________________________________________________________________________ > Professional FreeSWITCH Consulting Services: > consulting(a)freeswitch.org > http://www.freeswitchsolutions.com > > Official FreeSWITCH Sites > http://www.freeswitch.org > http://confluence.freeswitch.org > http://www.cluecon.com > > FreeSWITCH-users mailing list > FreeSWITCH-users(a)lists.freeswitch.org > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users > http://www.freeswitch.org

5 17