February 2021 - FreeSWITCH-users - FreeSWITCH Mailing Lists

Re: [Freeswitch-users] Multi-homed box - strange NAT question
by Brian West 02 Feb '21

02 Feb '21

see local-network-acl and make sure to set the ext-rtp-ip and ext-sip-ip to the prefix of autonat:x.x.x.x On Fri, Jan 29, 2021 at 1:06 PM Jim Miller <jmiller(a)wndswp.net> wrote: > Let me try this. > > I have a public network interface connected to the external profile with > ip 1.1.1.1/24 (e.g. of course) I have a private subnet attached to the > internal profile on 192.168.0.2/24. I've got polycoms registering to > 192.168.0.2 using TLS that show up as 192.168.0.1 given they are NAT'd > behind this firewall. It seems that if the devices try to register to .2 > via an ip on the same subnet that NAT detection is not happy. When the > clients come from something totally different it works. Any way to force > this to work? > > Jim > On 1/28/21 5:36 PM, Brian West wrote: > > Without a full understanding of your network topology it's difficult to > say. > > > On Thu, Jan 28, 2021 at 3:53 PM Jim Miller <jmiller(a)wndswp.net> wrote: > >> Brian >> >> Not sure I 100% follow. The clients are on the same /24 as the >> "internal" profile interface is on. The only thing is they are behind a >> NAT. >> >> What led me to this was I had a previous configuration whereby the >> internal and external profiles were on the same interface IP. When the >> clients connected to the internal profile via an totally different public >> IP, but also behind a NAT it worked (registrations showed fs_nat and a >> fs_path properly). However, for this configuration when I put the clients >> on a NAT that was on the same subnet as the internal and external shared IP >> it wouldn't work. I thought maybe this was an issue with the profiles >> sharing the same IP. Thus I split it to the configuration I documented >> below. It makes me think that the NAT issue is related to the fact that >> the profile IP is on the same subnet as the NAT. >> >> Jim >> On 1/28/21 10:51 AM, Brian West wrote: >> >> You will require one profile per nat interface, you can't cross profiles >> between transit providers without it. >> >> /b >> >> >> On Thu, Jan 28, 2021 at 7:25 AM Jim Miller <jmiller(a)wndswp.net> wrote: >> >>> Hi Folks >>> >>> I'm running FreeSWITCH Version 1.10.3-release~64bit (-release 64bit) on >>> a FreeBSD 12.1 box. >>> >>> The issue I'm having is related to NAT, I'm sure no one has ever seen a >>> post on this topic.... >>> >>> My configuration is a box that is multi homed with an Internet facing >>> interface and a private IP LAN interface. The clients (Polycoms) are on >>> the private LAN interface but behind a NAT (pfsense) on this subnet. If >>> I have the clients route directly to the FS box's private LAN without >>> NAT I can make this work but as soon as I NAT them (which I need to for >>> other reasons) I don't see the registrations show up with fs_path or the >>> other variables like I might expect. >>> >>> I've fiddled with the apply-nat-acl variable to no avail. >>> >>> Thoughts? >>> >>> Thanks >>> >>> Jim >>> >>> >>> _________________________________________________________________________ >>> >>> The FreeSWITCH project is sponsored by SignalWire https://signalwire.com >>> Enhance your FreeSWITCH install with disruptive priced SMS and PSTN >>> services. >>> Build your next product on our scalable cloud platform. >>> >>> Join our online community to chat in real time >>> https://signalwire.community >>> >>> Professional FreeSWITCH Services >>> sales(a)freeswitch.com >>> https://freeswitch.com >>> >>> Official FreeSWITCH Sites >>> https://freeswitch.com/oss >>> https://freeswitch.org/confluence >>> https://cluecon.com >>> >>> FreeSWITCH-users mailing list >>> FreeSWITCH-users(a)lists.freeswitch.org >>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users >>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users >>> https://freeswitch.com >> >> >> >> -- >> >> Brian West | Co-founder and Developer >> >> Need Commercial support? email sales(a)freeswitch.com >> >> FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 >> <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&e…> >> >> Email: brian(a)freeswitch.com >> >> Mobile: 918-424-9378 >> >> Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/> >> >> [image: https://www.facebook.com/signalwireinc?src=email] >> <https://www.facebook.com/freeswitch> [image: >> https://twitter.com/freeswitch] <https://twitter.com/freeswitch> >> >> > > -- > > Brian West | Co-founder and Developer > > Need Commercial support? email sales(a)freeswitch.com > > FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 > <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&e…> > > Email: brian(a)freeswitch.com > > Mobile: 918-424-9378 > > Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/> > > [image: https://www.facebook.com/signalwireinc?src=email] > <https://www.facebook.com/freeswitch> [image: > https://twitter.com/freeswitch] <https://twitter.com/freeswitch> > > -- Brian West | Co-founder and Developer Need Commercial support? email sales(a)freeswitch.com FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045 <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&e…> Email: brian(a)freeswitch.com Mobile: 918-424-9378 Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/> [image: https://www.facebook.com/signalwireinc?src=email] <https://www.facebook.com/freeswitch> [image: https://twitter.com/freeswitch] <https://twitter.com/freeswitch>

2 1

Re: [Freeswitch-users] Huge Jitter after "Incorrect Timestamp"
by Stephan Reich 02 Feb '21

02 Feb '21

Hello, we have problems with latency on some calls. In a pcap I see this entry. "Incorrect Timestamp" After this paket we get several seconds delay in the call. Are there parameters that fix this problem ? Stephan Reich Leiter Technik foncloud GmbH & Co KG Hahlweg 2a 36093 Künzell Tel: +49 661 968990 20 / Fax: +49 661 968990-99 Email: stephan.reich(a)foncloud.net Web: www.foncloud.net P.S.: Wussten Sie schon? Unter https://www.foncloud.net/wissen finden Sie zahlreiche Informationen und hilfreiche Artikel rund um unsere Produkte und Services. Registergericht: Amtsgericht Fulda, Persönlich haftende Gesellschafterin der foncloud GmbH&Co.KG: Global Brain Network GmbHGeschäftsführer der Global Brain Network GmbH: Peter Krug Sitz der Gesellschaft: Künzell. Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorised copying, disclosure or distribution of the material in this e-mail is strictly forbidden.

1 0

users registering from IP or FQDN
by Joli Martinez 01 Feb '21

01 Feb '21

Hello, I am running a small freeswitch system with several phones, users register with the IP of the freeswitch box. Since they are now working from home more, they need to be able to connect remotely. I have built a kamailio proxy and exposed it. I created an FQDN sip.mydomain.com and pointed it to the kamailio box. The registration comes in and kamailio sends it to freeswitch. I have added my doemain underneath the internal sip profile like this. I have also reloaded it. <domain name="all" alias="false" parse="false"/> <domain name="sip.mydomain.com" alias="true" parse="true"/> Registrations from the public internet still fail, but users registering with the IP work. What am I missing? 2021-01-19 12:19:37.480591 [WARNING] sofia_reg.c:1794 SIP auth challenge (REGISTER) on sofia profile 'internal' for [222(a)Sip.mydomain.com] from ip 1.1.1.1 2021-01-19 12:19:37.540512 [WARNING] sofia_reg.c:2930 Can't find user [ 222(a)Sip.mydomain.com] from 1.1.1.1 You must define a domain called 'Sip.mydomain.com' in your directory and add a user with the id="222" attribute and you must configure your device to use the proper domain in its authentication credentials. 2021-01-19 12:19:37.540512 [WARNING] sofia_reg.c:1739 SIP auth failure (REGISTER) on sofia profile 'internal' for [222(a)Sip.mydomain.com] from ip 1.1.1.1

4 4

Scanners and botnet vulnerability
by Marc Bernard 01 Feb '21

01 Feb '21

Hello All, Is anyone else noticing that there is more and more scanners attempting brute force with no reply to auth request resulting in logging a lot of abandoned calls ? Scenario: - A scanner send an INVITE|REGISTER with no credentials - Freeswitch responds with authentication request and a challenge is send to logs; " 2021-01-25 12:27:39.306075 [WARNING] sofia_reg.c:1792 SIP auth challenge (REGISTER) on sofia profile 'public' for [1730(a)1.2.3.4] from ip 5.6.7.8" - Scanner does not respond - After a while, Freeswitch logs the following: 2ae23e93-c929-4089-a594-8e7af633ca88 2021-01-25 12:28:37.506078 [WARNING] switch_core_state_machine.c:687 2ae23e93-c929-4089-a594-8e7af633ca88 sofia/public/1730(a)1.2.3.4 Abandoned -- In our case, we made fail2ban more sensitive to auth failures logs which does not get triggered because of the scanner not even trying to send credentials. Wouldn't it make more sense for this log to include the IP of sip client that abandoned the call (5.6.7.8) instead of only the IP of the sip profile (1.2.3.4) ? This would allow us to have Fail2ban block this scenario more aggressively. Thoughts ?

6 10

Freeswitch call recording
by Rasheed Kalapurackal 01 Feb '21

01 Feb '21

Dear All , i am a newbie just started trying and learning Freeswitch platform. Until now my area of focus was call recording for various telephony platforms like Avaya, cisco , and many more.. i would like to know if there is any API available in Freeswitch platform for recording call by a third party application , by streaming the voice as a duplicate RTP stream to the IP of Call Recording application . what I understood that there is Call Recording API like session recordFile available in the ESL for recording the calls in the system itself. But i couldnt find an option to record from a 3rd party application by getting the duplicate RTP stream. please let me know if any information is available on this query. Thanks and regards Abdul Rasheed

2 2

Wrong Caller ID on Semi-Attended Transfer
by Joshua Rupp 01 Feb '21

01 Feb '21

Hello, We've a problem with the caller id in one transfer scenario: In our Example Party A calls Party B, Party B answers the call and transfers it to Party C. We're talking about the Caller ID in the phone of Party C now. If B is doing an attended or unattended transfer, the caller id ist updating correctly as you would expect it. But there's a third scenario, which is very common for users of older PBX systems: A so called "semi-attended transfer". This means, that Party B is initiating A attended transfer via BLF Key, but hangs up, before Party C has answered the call. In this case, the Caller ID should update to Party A, as soon as B hangs up his phone. But this is not happening: The Caller ID remains on Party B until C answers the call. Only then the caller id is updated. Why is the caller id not updated after B hangs up and before C answers the call? Is there any possibility to change this behaiviour? Thanks for your help Joshua

2 1

Feeeswitch HA with Keepalived database conflict
by edson＠inoutglobal.xyz 01 Feb '21

01 Feb '21

Dears, I am configring FReeswitch HA with Keepalived approach just like this https://freeswitch.org/confluence/display/FREESWITCH/HA+keepalived Freeswitch database is shared with Postgresql-BDR replication. When executing fsctl crash on node 1, node 2 tries to recover call from its recovery table, but it somehow tries to insert it again causing following conclict. How to avoid this behaviour? >ERROR: duplicate key value violates unique constraint "recovery_pkey" < 2021-01-31 12:48:09.394 -03 >DETAIL: Key (uuid)=(66727254-af9d-47ef-ad9f-6f6bbb794eb6) already exists. < 2021-01-31 12:48:09.394 -03 >STATEMENT: insert into recovery (runtime_uuid, technology, profile_name, hostname, uuid, metadata) values ('4a864869-fe7f-4470-9992-20b91d09040f','sofia','internal','freeswitch-bndes ','66727254-af9d-47ef-ad9f-6f6bbb794eb6','<cdr core-uuid="4a864869-fe7f-4470-9992-20b91d09040f" switchname="freeswitch-bndes"> Regards

1 0