It would be nice if you pointed out the problem you had, we all use freeswitch one way or another. Ot at least the type of attack and how did you "reinforced" it.
On Mon, Dec 12, 2016 at 3:18 AM Kamil Nigmatullin <kamil.nigmatullin@gmail.com> wrote:
I love freeswitch, but frankly I would not recomend to set it as SBC. I personally faced two attacks where FS was not good at. And we lost a lot of money. It works perfectly as NAT between internal and extenal networks, actually in everything but it is weak as a firewall. Stanislav knows that, he helped me to resolve the problem first time when it happend. I cannot go into details as this is open forum. You need to put either kamailio or opensips in front of FS.

2016-12-12 5:17 GMT+06:00 Stanislav Sinyagin <ssinyagin@gmail.com>:
I hope this will help you to wrap your brain around FS and let you start easily:
https://freeswitch.org/confluence/display/FREESWITCH/FreeSWITCH+PBX+Example

In general, your SIP profiles don't have to be "internal/external", and your dialplan contexts don't have to be "public" or anything else. In general, you can design the whole configuration to serve the exact purpose. For example, right now I'm setting up a configuration with "inbound" and "outbound" SIP profiles and correspondingly named dialplan contexts.

For an SBC, it's quite logical to name your profiles as "inside" and "outside", and remove all unneeded parts of the configuration, such as IVR menus. If you want your inside SIP clients to register on your box, you set up a directory and enforce authentication on the corresponding SIP profile.

Also in the example above, you can find a proposed design for multiple ITSPs and a simple selection rule based on the country code.

Also it's good to read the book first. You would spend about a day to grasp the basic concepts, and it will streamline your further work.







On Sat, Dec 10, 2016 at 2:38 PM, Valter Nogueira <valter@fastway.com.br> wrote:
Its a little hard to change the mind from asterisk to fs.

I will try it tomorrow when users are away and the mice can play.

Thanks

Em 10 de dez de 2016 11:11 AM, "David Villasmil" <david.villasmil.work@gmail.com> escreveu:
Hello,

You don't HAVE to, but it's good practice. 
Configure your provider anywhere you want, internal or external. The names are not relevant, really. They are just names indicating that the internal profile will authenticate registers/call (auth_calls parameter) whereas by default external doesn't, though you can auth via acl.xml.conf.
Once registered with your provider, you just send the call out with, i.e.: 

{origination_caller_id_number=INCOMING_CALLER_ID}sofia/gateway/your-provider/$1

hope this helps

David

On Sat, Dec 10, 2016 at 1:39 PM Valter Nogueira <valter@fastway.com.br> wrote:
Yes, I want to use FS as a registar.

I already have this working in an asterisk server and want to test FS as a replacement.

18 servers share a single sip provider and FS will act as a gateway.

I have seen example.com.xml which is a user and have a gateway inside its definition.

What I don't get is why it is in external profile.

By the way, if I won't register in a sip provider, should I declare it as a gateway?

Thanks

Em 9 de dez de 2016 20:47, "Vladyslav Zakhozhai" <v.zakhozhai@gmail.com> escreveu:
Hi Valter,

You are right that you need to use directory rather than sip_profiles. Gateways in sip profiles are gateways which freeswitch is registered against.

By the way do I correctly understand you that you want Asterisk servers to register against freeswitch, i.e. freeswitch is registrar? And also you always can see exact problem in freeswitch console and logs.


2016-12-09 20:01 GMT+02:00 Valter Nogueira <valter@fastway.com.br>:
I would like to set up FS to run as a small SBC.

Profile "internal" (nic em1) would be source for N asterisks that will register in FS. Some Asterisks should be trusted by IP (acl)

Profile "external" (nic em2) would connect in an SIP Provider.

So call coming from internal would routed to external gateway and vice-versa in dialplan.

To mimic external profile I added in internal

  <gateways>
    <X-PRE-PROCESS cmd="include" data="internal/*.xml"/>
  </gateways>

Asterisks are unable to register. I guess that the problem is internal gateway should be in directory instead of in sip_profile.

Thanks,

Valter

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
С уважением,
Владислав Захожай


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
ᐧ

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
Kamil Nigmatullin
Tel: 77272323748
mob: 7 (707) 2517003
Skype: kamil.nigmatullin
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org