Security - How can I prevent these calls?
I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log: <configuration name="acl.conf" description="Network Lists"> <network-lists> <list name="lan" default="allow"> <node type="allow" cidr="192.168.0.0/24"/> <!--<node type="deny" cidr="192.168.42.42/32"/> --> </list> <list name="domains" default="deny"> <!-- domain= is special it scans the domain from the directory to build the ACL --> <node type="allow" domain="$${domain}"/> <node type="allow" cidr="192.168.0.0/24"/> <node type="allow" cidr="107.20.251.237/32" /> <node type="allow" cidr="107.20.176.37/32" /> <node type="allow" cidr="184.169.138.133/32" /> <node type="allow" cidr="54.215.5.82/32" /> </list> </network-lists> </configuration> 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_NEW 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0 64bit 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth. 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/10000000@192.168.0.10:5060) State NEW 2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/10000000@192.168.0.10:5060 Abandoned 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/ 10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/ 10000000@192.168.0.10:5060) Locked, Waiting on external entities 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/ 10000000@192.168.0.10:5060) Ended 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/ 10000000@192.168.0.10:5060 [CS_DESTROY] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/10000000@192.168.0.10:5060 Standard DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/ 7070@76.188.116.163] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already) 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 Overriding SIP cause 480 with 480 from the other leg 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/7070@76.188.116.163) Ended 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574 2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep 2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [ 7070@76.188.116.163] from 104.245.99.71 You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute and you must configure your device to use the proper domain in it's authentication credentials. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/7070@76.188.116.163 [351981a2-a412-49bb-a554-0df34a002f86] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 receiving invite from 104.245.99.71:6688 version: 1.7.0 64bit 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 entering state [received][100] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP: 351981a2-a412-49bb-a554-0df34a002f86 v=0 351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam 351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 t=0 0 351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000 351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15 351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690 351981a2-a412-49bb-a554-0df34a002f86 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163) State Change CS_NEW -> CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/7070@76.188.116.163) State NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 SOFIA INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 Standard INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163) State Change CS_INIT -> CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163) Callstate Change DOWN -> RINGING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 SOFIA ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 Standard ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->Calls to Plivo] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [Calls to Plivo] destination_number(004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->unloop] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->outside_call] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Absolute Condition [outside_call] 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Action set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)}) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->call_debug] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->public_extensions] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [public_extensions] destination_number(004721935380) =~ /^(10[01][0-9])$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->group_dial_standard] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [group_dial_standard] destination_number(004721935380) =~ /^2000$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->public_did] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [public_did] destination_number(004721935380) =~ /^(5551212)$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/7070@76.188.116.163) State Change CS_ROUTING -> CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 SOFIA EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 Standard EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/ 7070@76.188.116.163 set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 [outside_call]=[true] 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/ 7070@76.188.116.163 export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/7070@76.188.116.163 has executed the last dialplan instruction, hanging up. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change RINGING -> HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/7070@76.188.116.163) Ended 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 [CS_DESTROY] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep
Hi Samuel, Your problem has 2 solutions - easy one and not so easy: Easy way: If you are facing such issues this mean that you very new to VoIP and Freeswitch particularly and in my opinion it is worth to find professional who will configure and secure your PBX, otherwise you can end up loosing much more then 30$. Hard way: If you still think that you can handle it, then first and most simple way is to use iptables for blocking unwanted traffic. Below you can find my manual: http://blog.volunge.net/jekyll/update/2016/02/27/how-to-secure-freeswitch-wi... Additionally to this you can find Freeswitch official documentation regarding Firewall configuration: https://freeswitch.org/confluence/display/FREESWITCH/Firewall Keep in mind that proper FW configuration will not fix all your issues and you should understand how Freeswitch work and what each configuration file do to secure your installation properly. With kind regards, Jurijs 2016-03-14 19:15 GMT+02:00 Samuel Reamer <adam@steffannicarpet.com>:
I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log:
<configuration name="acl.conf" description="Network Lists"> <network-lists>
<list name="lan" default="allow"> <node type="allow" cidr="192.168.0.0/24"/> <!--<node type="deny" cidr="192.168.42.42/32"/> --> </list>
<list name="domains" default="deny"> <!-- domain= is special it scans the domain from the directory to build the ACL --> <node type="allow" domain="$${domain}"/> <node type="allow" cidr="192.168.0.0/24"/> <node type="allow" cidr="107.20.251.237/32" /> <node type="allow" cidr="107.20.176.37/32" /> <node type="allow" cidr="184.169.138.133/32" /> <node type="allow" cidr="54.215.5.82/32" /> </list>
</network-lists> </configuration>
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/ 10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_NEW 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0 64bit 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth. 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/10000000@192.168.0.10:5060) State NEW 2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/10000000@192.168.0.10:5060 Abandoned 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/ 10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/ 10000000@192.168.0.10:5060) Locked, Waiting on external entities 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/ 10000000@192.168.0.10:5060) Ended 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/ 10000000@192.168.0.10:5060 [CS_DESTROY] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/10000000@192.168.0.10:5060 Standard DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/ 7070@76.188.116.163] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already) 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 Overriding SIP cause 480 with 480 from the other leg 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/7070@76.188.116.163) Ended 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/ 7070@76.188.116.163 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574 2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep 2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [ 7070@76.188.116.163] from 104.245.99.71 You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute and you must configure your device to use the proper domain in it's authentication credentials. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/7070@76.188.116.163 [351981a2-a412-49bb-a554-0df34a002f86] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 receiving invite from 104.245.99.71:6688 version: 1.7.0 64bit 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 entering state [received][100] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP: 351981a2-a412-49bb-a554-0df34a002f86 v=0 351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam 351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 t=0 0 351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000 351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15 351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690 351981a2-a412-49bb-a554-0df34a002f86 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163) State Change CS_NEW -> CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/7070@76.188.116.163) State NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 SOFIA INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 Standard INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163) State Change CS_INIT -> CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163) Callstate Change DOWN -> RINGING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 SOFIA ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 Standard ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->Calls to Plivo] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [Calls to Plivo] destination_number(004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->unloop] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->outside_call] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Absolute Condition [outside_call] 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Action set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)}) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->call_debug] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->public_extensions] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [public_extensions] destination_number(004721935380) =~ /^(10[01][0-9])$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->group_dial_standard] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [group_dial_standard] destination_number(004721935380) =~ /^2000$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->public_did] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [public_did] destination_number(004721935380) =~ /^(5551212)$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/7070@76.188.116.163) State Change CS_ROUTING -> CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 SOFIA EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 Standard EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/ 7070@76.188.116.163 set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 [outside_call]=[true] 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/ 7070@76.188.116.163 export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/7070@76.188.116.163 has executed the last dialplan instruction, hanging up. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change RINGING -> HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/7070@76.188.116.163) Ended 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/ 7070@76.188.116.163 [CS_DESTROY] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi there, I guess you're running fS without fail2ban. Welcome to our world. BEFORE you bother trying firewall rules manually (or employing a consultant), read up on the freeswitch web for fail2ban, and install f2b. See <https://freeswitch.org/confluence/display/FREESWITCH/Fail2Ban> Do it BEFORE you run freeSwitch "in anger". Then secure your profiles & dialplan. Then run freeSwitch. Then ask :). all the best Lawrence (who, like most of us, has had exactly this sort of problem) On 14 Mar 2016, at 20:38, Jurijs Ivolga <jurijs.ivolga@gmail.com> wrote:
Hi Samuel,
Your problem has 2 solutions - easy one and not so easy:
Easy way: If you are facing such issues this mean that you very new to VoIP and Freeswitch particularly and in my opinion it is worth to find professional who will configure and secure your PBX, otherwise you can end up loosing much more then 30$.
Hard way: If you still think that you can handle it, then first and most simple way is to use iptables for blocking unwanted traffic. Below you can find my manual: http://blog.volunge.net/jekyll/update/2016/02/27/how-to-secure-freeswitch-wi...
Additionally to this you can find Freeswitch official documentation regarding Firewall configuration: https://freeswitch.org/confluence/display/FREESWITCH/Firewall
Keep in mind that proper FW configuration will not fix all your issues and you should understand how Freeswitch work and what each configuration file do to secure your installation properly.
With kind regards,
Jurijs
2016-03-14 19:15 GMT+02:00 Samuel Reamer <adam@steffannicarpet.com>: I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log:
<configuration name="acl.conf" description="Network Lists"> <network-lists>
<list name="lan" default="allow"> <node type="allow" cidr="192.168.0.0/24"/> <!--<node type="deny" cidr="192.168.42.42/32"/> --> </list>
<list name="domains" default="deny"> <!-- domain= is special it scans the domain from the directory to build the ACL --> <node type="allow" domain="$${domain}"/> <node type="allow" cidr="192.168.0.0/24"/> <node type="allow" cidr="107.20.251.237/32" /> <node type="allow" cidr="107.20.176.37/32" /> <node type="allow" cidr="184.169.138.133/32" /> <node type="allow" cidr="54.215.5.82/32" /> </list>
</network-lists> </configuration>
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_NEW 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0 64bit 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth. 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/10000000@192.168.0.10:5060) State NEW 2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/10000000@192.168.0.10:5060 Abandoned 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Locked, Waiting on external entities 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Ended 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/10000000@192.168.0.10:5060 [CS_DESTROY] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/10000000@192.168.0.10:5060 Standard DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/7070@76.188.116.163] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already) 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 Overriding SIP cause 480 with 480 from the other leg 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/7070@76.188.116.163) Ended 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574 2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep 2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [7070@76.188.116.163] from 104.245.99.71 You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute and you must configure your device to use the proper domain in it's authentication credentials. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/7070@76.188.116.163 [351981a2-a412-49bb-a554-0df34a002f86] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 receiving invite from 104.245.99.71:6688 version: 1.7.0 64bit 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 entering state [received][100] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP: 351981a2-a412-49bb-a554-0df34a002f86 v=0 351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam 351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 t=0 0 351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000 351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15 351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690 351981a2-a412-49bb-a554-0df34a002f86 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163) State Change CS_NEW -> CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/7070@76.188.116.163) State NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 SOFIA INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 Standard INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163) State Change CS_INIT -> CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163) Callstate Change DOWN -> RINGING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 SOFIA ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 Standard ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->Calls to Plivo] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [Calls to Plivo] destination_number(004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->unloop] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->outside_call] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Absolute Condition [outside_call] 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Action set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)}) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->call_debug] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->public_extensions] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [public_extensions] destination_number(004721935380) =~ /^(10[01][0-9])$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->group_dial_standard] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [group_dial_standard] destination_number(004721935380) =~ /^2000$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->public_did] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [public_did] destination_number(004721935380) =~ /^(5551212)$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/7070@76.188.116.163) State Change CS_ROUTING -> CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 SOFIA EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 Standard EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 [outside_call]=[true] 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/7070@76.188.116.163 has executed the last dialplan instruction, hanging up. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change RINGING -> HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/7070@76.188.116.163) Ended 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 [CS_DESTROY] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Or simply run a prebuilt AMI image from aws. It comes with fail2ban, firewall, etc. https://aws.amazon.com/marketplace/pp/B015ZTS2XM https://aws.amazon.com/marketplace/pp/B0191S5CU4/ Jun On Mon, Mar 14, 2016 at 2:08 PM, Lawrence Conroy <lconroy@insensate.co.uk> wrote:
Hi there, I guess you're running fS without fail2ban. Welcome to our world. BEFORE you bother trying firewall rules manually (or employing a consultant), read up on the freeswitch web for fail2ban, and install f2b. See <https://freeswitch.org/confluence/display/FREESWITCH/Fail2Ban>
Do it BEFORE you run freeSwitch "in anger".
Then secure your profiles & dialplan.
Then run freeSwitch.
Then ask :).
all the best Lawrence (who, like most of us, has had exactly this sort of problem)
On 14 Mar 2016, at 20:38, Jurijs Ivolga <jurijs.ivolga@gmail.com> wrote:
Hi Samuel,
Your problem has 2 solutions - easy one and not so easy:
Easy way: If you are facing such issues this mean that you very new to VoIP and Freeswitch particularly and in my opinion it is worth to find professional who will configure and secure your PBX, otherwise you can end up loosing much more then 30$.
Hard way: If you still think that you can handle it, then first and most simple way is to use iptables for blocking unwanted traffic. Below you can find my manual:
http://blog.volunge.net/jekyll/update/2016/02/27/how-to-secure-freeswitch-wi...
Additionally to this you can find Freeswitch official documentation
regarding Firewall configuration:
https://freeswitch.org/confluence/display/FREESWITCH/Firewall
Keep in mind that proper FW configuration will not fix all your issues and you should understand how Freeswitch work and what each configuration file do to secure your installation properly.
With kind regards,
Jurijs
2016-03-14 19:15 GMT+02:00 Samuel Reamer <adam@steffannicarpet.com>: I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log:
<configuration name="acl.conf" description="Network Lists"> <network-lists>
<list name="lan" default="allow"> <node type="allow" cidr="192.168.0.0/24"/> <!--<node type="deny" cidr="192.168.42.42/32"/> --> </list>
<list name="domains" default="deny"> <!-- domain= is special it scans the domain from the directory to build the ACL --> <node type="allow" domain="$${domain}"/> <node type="allow" cidr="192.168.0.0/24"/> <node type="allow" cidr="107.20.251.237/32" /> <node type="allow" cidr="107.20.176.37/32" /> <node type="allow" cidr="184.169.138.133/32" /> <node type="allow" cidr="54.215.5.82/32" /> </list>
</network-lists> </configuration>
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/ 10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_NEW 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0 64bit 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth. 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/10000000@192.168.0.10:5060) State NEW 2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/ 10000000@192.168.0.10:5060 Abandoned 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/ 10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/ 10000000@192.168.0.10:5060) Locked, Waiting on external entities 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/ 10000000@192.168.0.10:5060) Ended 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/ 10000000@192.168.0.10:5060 [CS_DESTROY] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/10000000@192.168.0.10:5060 Standard DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/ 7070@76.188.116.163] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already) 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 Overriding SIP cause 480 with 480 from the other leg 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/7070@76.188.116.163) Ended 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/ 7070@76.188.116.163 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574 2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep 2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [ 7070@76.188.116.163] from 104.245.99.71 You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute and you must configure your device to use the proper domain in it's authentication credentials. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/7070@76.188.116.163 [351981a2-a412-49bb-a554-0df34a002f86] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 receiving invite from 104.245.99.71:6688 version: 1.7.0 64bit 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 entering state [received][100] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP: 351981a2-a412-49bb-a554-0df34a002f86 v=0 351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam 351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 t=0 0 351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000 351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15 351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690 351981a2-a412-49bb-a554-0df34a002f86 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163) State Change CS_NEW -> CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/7070@76.188.116.163) State NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 SOFIA INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 Standard INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163) State Change CS_INIT -> CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163) Callstate Change DOWN -> RINGING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 SOFIA ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 Standard ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->Calls to Plivo] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [Calls to Plivo] destination_number(004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->unloop] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->outside_call] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Absolute Condition [outside_call] 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Action set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)}) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->call_debug] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->public_extensions] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [public_extensions] destination_number(004721935380) =~ /^(10[01][0-9])$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->group_dial_standard] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [group_dial_standard] destination_number(004721935380) =~ /^2000$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->public_did] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [public_did] destination_number(004721935380) =~ /^(5551212)$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/7070@76.188.116.163) State Change CS_ROUTING -> CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 SOFIA EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 Standard EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/ 7070@76.188.116.163 set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 [outside_call]=[true] 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/ 7070@76.188.116.163 export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/7070@76.188.116.163 has executed the last dialplan instruction, hanging up. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change RINGING -> HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/7070@76.188.116.163) Ended 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/ 7070@76.188.116.163 [CS_DESTROY] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
But what does fail2ban have to do with security? If a stranger from the internet is able to make calls to PSTN through your PBX, you need to prevent such access in the first place. It's a matter of dialplan planning, and not the firewall or fail2ban. On 15 Mar 2016 00:20, "Jun Sun" <jsun@junsun.net> wrote:
Or simply run a prebuilt AMI image from aws. It comes with fail2ban, firewall, etc.
https://aws.amazon.com/marketplace/pp/B015ZTS2XM
https://aws.amazon.com/marketplace/pp/B0191S5CU4/
Jun
On Mon, Mar 14, 2016 at 2:08 PM, Lawrence Conroy <lconroy@insensate.co.uk> wrote:
Hi there, I guess you're running fS without fail2ban. Welcome to our world. BEFORE you bother trying firewall rules manually (or employing a consultant), read up on the freeswitch web for fail2ban, and install f2b. See <https://freeswitch.org/confluence/display/FREESWITCH/Fail2Ban>
Do it BEFORE you run freeSwitch "in anger".
Then secure your profiles & dialplan.
Then run freeSwitch.
Then ask :).
all the best Lawrence (who, like most of us, has had exactly this sort of problem)
On 14 Mar 2016, at 20:38, Jurijs Ivolga <jurijs.ivolga@gmail.com> wrote:
Hi Samuel,
Your problem has 2 solutions - easy one and not so easy:
Easy way: If you are facing such issues this mean that you very new to VoIP and Freeswitch particularly and in my opinion it is worth to find professional who will configure and secure your PBX, otherwise you can end up loosing much more then 30$.
Hard way: If you still think that you can handle it, then first and most simple way is to use iptables for blocking unwanted traffic. Below you can find my manual:
http://blog.volunge.net/jekyll/update/2016/02/27/how-to-secure-freeswitch-wi...
Additionally to this you can find Freeswitch official documentation
regarding Firewall configuration:
https://freeswitch.org/confluence/display/FREESWITCH/Firewall
Keep in mind that proper FW configuration will not fix all your issues and you should understand how Freeswitch work and what each configuration file do to secure your installation properly.
With kind regards,
Jurijs
2016-03-14 19:15 GMT+02:00 Samuel Reamer <adam@steffannicarpet.com>: I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log:
<configuration name="acl.conf" description="Network Lists"> <network-lists>
<list name="lan" default="allow"> <node type="allow" cidr="192.168.0.0/24"/> <!--<node type="deny" cidr="192.168.42.42/32"/> --> </list>
<list name="domains" default="deny"> <!-- domain= is special it scans the domain from the directory to build the ACL --> <node type="allow" domain="$${domain}"/> <node type="allow" cidr="192.168.0.0/24"/> <node type="allow" cidr="107.20.251.237/32" /> <node type="allow" cidr="107.20.176.37/32" /> <node type="allow" cidr="184.169.138.133/32" /> <node type="allow" cidr="54.215.5.82/32" /> </list>
</network-lists> </configuration>
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/ 10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/ 10000000@192.168.0.10:5060) Running State Change CS_NEW 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0 64bit 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth. 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/ 10000000@192.168.0.10:5060) State NEW 2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/ 10000000@192.168.0.10:5060 Abandoned 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/ 10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/ 10000000@192.168.0.10:5060) Running State Change CS_HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/ 10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/ 10000000@192.168.0.10:5060) State HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/ 10000000@192.168.0.10:5060) State HANGUP going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/ 10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/ 10000000@192.168.0.10:5060) Running State Change CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/ 10000000@192.168.0.10:5060) State REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/ 10000000@192.168.0.10:5060) State REPORTING going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/ 10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/ 10000000@192.168.0.10:5060) Locked, Waiting on external entities 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/ 10000000@192.168.0.10:5060) Ended 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/ 10000000@192.168.0.10:5060 [CS_DESTROY] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/ 10000000@192.168.0.10:5060) Running State Change CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/ 10000000@192.168.0.10:5060) State DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/10000000@192.168.0.10:5060 Standard DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/ 10000000@192.168.0.10:5060) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/ 7070@76.188.116.163] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already) 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 Overriding SIP cause 480 with 480 from the other leg 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/ 7070@76.188.116.163) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/ 7070@76.188.116.163) Ended 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/ 7070@76.188.116.163 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574 2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep 2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [ 7070@76.188.116.163] from 104.245.99.71 You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute and you must configure your device to use the proper domain in it's authentication credentials. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/ 7070@76.188.116.163 [351981a2-a412-49bb-a554-0df34a002f86] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 receiving invite from 104.245.99.71:6688 version: 1.7.0 64bit 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 entering state [received][100] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP: 351981a2-a412-49bb-a554-0df34a002f86 v=0 351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam 351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 t=0 0 351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000 351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15 351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690 351981a2-a412-49bb-a554-0df34a002f86 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163) State Change CS_NEW -> CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/7070@76.188.116.163) State NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 SOFIA INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 Standard INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163) State Change CS_INIT -> CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163) Callstate Change DOWN -> RINGING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 SOFIA ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 Standard ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->Calls to Plivo] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [Calls to Plivo] destination_number (004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->unloop] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->outside_call] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Absolute Condition [outside_call] 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Action set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)}) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->call_debug] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->public_extensions] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [public_extensions] destination_number (004721935380) =~ /^(10[01][0-9])$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->group_dial_standard] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [group_dial_standard] destination_number (004721935380) =~ /^2000$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->public_did] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [public_did] destination_number (004721935380) =~ /^(5551212)$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/7070@76.188.116.163) State Change CS_ROUTING -> CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 SOFIA EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 Standard EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/ 7070@76.188.116.163 set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 [outside_call]=[true] 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/ 7070@76.188.116.163 export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/ 7070@76.188.116.163 has executed the last dialplan instruction, hanging up. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/ 7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change RINGING -> HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/ 7070@76.188.116.163) Locked, Waiting on external entities 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/ 7070@76.188.116.163) Ended 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/ 7070@76.188.116.163 [CS_DESTROY] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep
_________________________________________________________________________
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi again, true, but f2b sure does cut down on wasted traffic and vast numbers of log entries, even with a secured dialplan. That's why I said put in f2b, secure dialplan, and only then run fS "in anger". f2b simplifies/automates the firewall block/unblocking. That cuts traffic, and in so doing, it also slows down brute force attacks to the point where they're not really feasible unless you are a target for APT. So, I'd argue you need both (as suggested). all the best, Lawrence On 15 Mar 2016, at 00:35, Stanislav Sinyagin <ssinyagin@gmail.com> wrote:
But what does fail2ban have to do with security? If a stranger from the internet is able to make calls to PSTN through your PBX, you need to prevent such access in the first place. It's a matter of dialplan planning, and not the firewall or fail2ban.
On 15 Mar 2016 00:20, "Jun Sun" <jsun@junsun.net> wrote: Or simply run a prebuilt AMI image from aws. It comes with fail2ban, firewall, etc.
https://aws.amazon.com/marketplace/pp/B015ZTS2XM
https://aws.amazon.com/marketplace/pp/B0191S5CU4/
Jun
On Mon, Mar 14, 2016 at 2:08 PM, Lawrence Conroy <lconroy@insensate.co.uk> wrote: Hi there, I guess you're running fS without fail2ban. Welcome to our world. BEFORE you bother trying firewall rules manually (or employing a consultant), read up on the freeswitch web for fail2ban, and install f2b. See <https://freeswitch.org/confluence/display/FREESWITCH/Fail2Ban>
Do it BEFORE you run freeSwitch "in anger".
Then secure your profiles & dialplan.
Then run freeSwitch.
Then ask :).
all the best Lawrence (who, like most of us, has had exactly this sort of problem)
On 14 Mar 2016, at 20:38, Jurijs Ivolga <jurijs.ivolga@gmail.com> wrote:
Hi Samuel,
Your problem has 2 solutions - easy one and not so easy:
Easy way: If you are facing such issues this mean that you very new to VoIP and Freeswitch particularly and in my opinion it is worth to find professional who will configure and secure your PBX, otherwise you can end up loosing much more then 30$.
Hard way: If you still think that you can handle it, then first and most simple way is to use iptables for blocking unwanted traffic. Below you can find my manual: http://blog.volunge.net/jekyll/update/2016/02/27/how-to-secure-freeswitch-wi...
Additionally to this you can find Freeswitch official documentation regarding Firewall configuration: https://freeswitch.org/confluence/display/FREESWITCH/Firewall
Keep in mind that proper FW configuration will not fix all your issues and you should understand how Freeswitch work and what each configuration file do to secure your installation properly.
With kind regards,
Jurijs
2016-03-14 19:15 GMT+02:00 Samuel Reamer <adam@steffannicarpet.com>: I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log:
<configuration name="acl.conf" description="Network Lists"> <network-lists>
<list name="lan" default="allow"> <node type="allow" cidr="192.168.0.0/24"/> <!--<node type="deny" cidr="192.168.42.42/32"/> --> </list>
<list name="domains" default="deny"> <!-- domain= is special it scans the domain from the directory to build the ACL --> <node type="allow" domain="$${domain}"/> <node type="allow" cidr="192.168.0.0/24"/> <node type="allow" cidr="107.20.251.237/32" /> <node type="allow" cidr="107.20.176.37/32" /> <node type="allow" cidr="184.169.138.133/32" /> <node type="allow" cidr="54.215.5.82/32" /> </list>
</network-lists> </configuration>
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_NEW 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0 64bit 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth. 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/10000000@192.168.0.10:5060) State NEW 2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/10000000@192.168.0.10:5060 Abandoned 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Locked, Waiting on external entities 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Ended 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/10000000@192.168.0.10:5060 [CS_DESTROY] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/10000000@192.168.0.10:5060 Standard DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/7070@76.188.116.163] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already) 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 Overriding SIP cause 480 with 480 from the other leg 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/7070@76.188.116.163) Ended 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574 2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep 2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [7070@76.188.116.163] from 104.245.99.71 You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute and you must configure your device to use the proper domain in it's authentication credentials. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/7070@76.188.116.163 [351981a2-a412-49bb-a554-0df34a002f86] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 receiving invite from 104.245.99.71:6688 version: 1.7.0 64bit 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 entering state [received][100] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP: 351981a2-a412-49bb-a554-0df34a002f86 v=0 351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam 351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 t=0 0 351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000 351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15 351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690 351981a2-a412-49bb-a554-0df34a002f86 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163) State Change CS_NEW -> CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/7070@76.188.116.163) State NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 SOFIA INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 Standard INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163) State Change CS_INIT -> CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163) Callstate Change DOWN -> RINGING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 SOFIA ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 Standard ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->Calls to Plivo] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [Calls to Plivo] destination_number(004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->unloop] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->outside_call] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Absolute Condition [outside_call] 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Action set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)}) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->call_debug] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->public_extensions] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [public_extensions] destination_number(004721935380) =~ /^(10[01][0-9])$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->group_dial_standard] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [group_dial_standard] destination_number(004721935380) =~ /^2000$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->public_did] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [public_did] destination_number(004721935380) =~ /^(5551212)$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/7070@76.188.116.163) State Change CS_ROUTING -> CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 SOFIA EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 Standard EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 [outside_call]=[true] 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/7070@76.188.116.163 has executed the last dialplan instruction, hanging up. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change RINGING -> HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/7070@76.188.116.163) Ended 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 [CS_DESTROY] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks all for the input, it's helped! I followed Jurijs' tutorial on setting up iptables and it seems to be working well; however, during my setup I noticed that incoming calls from the SIP provider were coming through the internal profile (port 5060, the same ports that were opened up in iptables). Is this right? The FreeSwitch documentation seems to indicate that these calls should go through the external profile. I added port 5080 to the iptables in the same fashion as above, and specified port 5080 in the SIP address called by the provider. It seems to be working, but I want to make sure that's the correct course of action. On Mon, Mar 14, 2016 at 9:16 PM Lawrence Conroy <lconroy@insensate.co.uk> wrote:
Hi again, true, but f2b sure does cut down on wasted traffic and vast numbers of log entries, even with a secured dialplan. That's why I said put in f2b, secure dialplan, and only then run fS "in anger". f2b simplifies/automates the firewall block/unblocking. That cuts traffic, and in so doing, it also slows down brute force attacks to the point where they're not really feasible unless you are a target for APT. So, I'd argue you need both (as suggested).
all the best, Lawrence
On 15 Mar 2016, at 00:35, Stanislav Sinyagin <ssinyagin@gmail.com> wrote:
But what does fail2ban have to do with security? If a stranger from the internet is able to make calls to PSTN through your PBX, you need to prevent such access in the first place. It's a matter of dialplan planning, and not the firewall or fail2ban.
On 15 Mar 2016 00:20, "Jun Sun" <jsun@junsun.net> wrote: Or simply run a prebuilt AMI image from aws. It comes with fail2ban, firewall, etc.
https://aws.amazon.com/marketplace/pp/B015ZTS2XM
https://aws.amazon.com/marketplace/pp/B0191S5CU4/
Jun
On Mon, Mar 14, 2016 at 2:08 PM, Lawrence Conroy < lconroy@insensate.co.uk> wrote: Hi there, I guess you're running fS without fail2ban. Welcome to our world. BEFORE you bother trying firewall rules manually (or employing a consultant), read up on the freeswitch web for fail2ban, and install f2b. See <https://freeswitch.org/confluence/display/FREESWITCH/Fail2Ban>
Do it BEFORE you run freeSwitch "in anger".
Then secure your profiles & dialplan.
Then run freeSwitch.
Then ask :).
all the best Lawrence (who, like most of us, has had exactly this sort of problem)
On 14 Mar 2016, at 20:38, Jurijs Ivolga <jurijs.ivolga@gmail.com> wrote:
Hi Samuel,
Your problem has 2 solutions - easy one and not so easy:
Easy way: If you are facing such issues this mean that you very new to VoIP and Freeswitch particularly and in my opinion it is worth to find professional who will configure and secure your PBX, otherwise you can end up loosing much more then 30$.
Hard way: If you still think that you can handle it, then first and most simple way is to use iptables for blocking unwanted traffic. Below you can find my manual:
http://blog.volunge.net/jekyll/update/2016/02/27/how-to-secure-freeswitch-wi...
Additionally to this you can find Freeswitch official documentation
regarding Firewall configuration:
https://freeswitch.org/confluence/display/FREESWITCH/Firewall
Keep in mind that proper FW configuration will not fix all your issues and you should understand how Freeswitch work and what each configuration file do to secure your installation properly.
With kind regards,
Jurijs
2016-03-14 19:15 GMT+02:00 Samuel Reamer <adam@steffannicarpet.com>: I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log:
<configuration name="acl.conf" description="Network Lists"> <network-lists>
<list name="lan" default="allow"> <node type="allow" cidr="192.168.0.0/24"/> <!--<node type="deny" cidr="192.168.42.42/32"/> --> </list>
<list name="domains" default="deny"> <!-- domain= is special it scans the domain from the directory to build the ACL --> <node type="allow" domain="$${domain}"/> <node type="allow" cidr="192.168.0.0/24"/> <node type="allow" cidr="107.20.251.237/32" /> <node type="allow" cidr="107.20.176.37/32" /> <node type="allow" cidr="184.169.138.133/32" /> <node type="allow" cidr="54.215.5.82/32" /> </list>
</network-lists> </configuration>
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/ 10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/ 10000000@192.168.0.10:5060) Running State Change CS_NEW 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0 64bit 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth. 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/ 10000000@192.168.0.10:5060) State NEW 2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/ 10000000@192.168.0.10:5060 Abandoned 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/ 10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/ 10000000@192.168.0.10:5060) Running State Change CS_HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/ 10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/ 10000000@192.168.0.10:5060) State HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/ 10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/ 10000000@192.168.0.10:5060) State HANGUP going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/ 10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/ 10000000@192.168.0.10:5060) Running State Change CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/ 10000000@192.168.0.10:5060) State REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/ 10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/ 10000000@192.168.0.10:5060) State REPORTING going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/ 10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/ 10000000@192.168.0.10:5060) Locked, Waiting on external entities 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/ 10000000@192.168.0.10:5060) Ended 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/ 10000000@192.168.0.10:5060 [CS_DESTROY] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/ 10000000@192.168.0.10:5060) Running State Change CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/ 10000000@192.168.0.10:5060) State DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/ 10000000@192.168.0.10:5060 Standard DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/ 10000000@192.168.0.10:5060) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/ 7070@76.188.116.163] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already) 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/ 7070@76.188.116.163) State EXECUTE going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/ 7070@76.188.116.163) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/ 7070@76.188.116.163) State HANGUP 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 Overriding SIP cause 480 with 480 from the other leg 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/ 7070@76.188.116.163) State HANGUP going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/ 7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/ 7070@76.188.116.163) State REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/ 7070@76.188.116.163) State REPORTING going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/ 7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/ 7070@76.188.116.163) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/ 7070@76.188.116.163) Ended 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/ 7070@76.188.116.163 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/ 7070@76.188.116.163) Running State Change CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/ 7070@76.188.116.163) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574 2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/ 7070@76.188.116.163) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep 2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [ 7070@76.188.116.163] from 104.245.99.71 You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute and you must configure your device to use the proper domain in it's authentication credentials. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/ 7070@76.188.116.163 [351981a2-a412-49bb-a554-0df34a002f86] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 receiving invite from 104.245.99.71:6688 version: 1.7.0 64bit 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 entering state [received][100] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP: 351981a2-a412-49bb-a554-0df34a002f86 v=0 351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam 351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 t=0 0 351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000 351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15 351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690 351981a2-a412-49bb-a554-0df34a002f86 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163) State Change CS_NEW -> CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/ 7070@76.188.116.163) State NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/ 7070@76.188.116.163) State INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 SOFIA INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 Standard INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163) State Change CS_INIT -> CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/ 7070@76.188.116.163) State INIT going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163) Callstate Change DOWN -> RINGING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/ 7070@76.188.116.163) State ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 SOFIA ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 Standard ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->Calls to Plivo] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [Calls to Plivo] destination_number(004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->unloop] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->outside_call] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Absolute Condition [outside_call] 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Action set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)}) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->call_debug] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->public_extensions] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [public_extensions] destination_number(004721935380) =~ /^(10[01][0-9])$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->group_dial_standard] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [group_dial_standard] destination_number(004721935380) =~ /^2000$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->public_did] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [public_did] destination_number(004721935380) =~ /^(5551212)$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/ 7070@76.188.116.163) State Change CS_ROUTING -> CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/ 7070@76.188.116.163) State ROUTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/ 7070@76.188.116.163) State EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 SOFIA EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 Standard EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/ 7070@76.188.116.163 set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 [outside_call]=[true] 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/ 7070@76.188.116.163 export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/ 7070@76.188.116.163 has executed the last dialplan instruction, hanging up. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/ 7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/ 7070@76.188.116.163) State EXECUTE going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/ 7070@76.188.116.163) Callstate Change RINGING -> HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/ 7070@76.188.116.163) State HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/ 7070@76.188.116.163) State HANGUP going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/ 7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/ 7070@76.188.116.163) State REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/ 7070@76.188.116.163) State REPORTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/ 7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/ 7070@76.188.116.163) Locked, Waiting on external entities 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/ 7070@76.188.116.163) Ended 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/ 7070@76.188.116.163 [CS_DESTROY] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/ 7070@76.188.116.163) Running State Change CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/ 7070@76.188.116.163) State DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/ 7070@76.188.116.163) State DESTROY going to sleep
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi Samuel, As far as I understood, you are asking: Do I need to use external or internal profile for external gateway? Short answer is external, as is stated in Freeswitch documentation. In reality it is not so obvious. For example I had worked with some providers which do not support other port then 5060 and in this case you will need to change external profile to port 5060 and internal to something else(both profiles can't use same port) or use internal profile for that provider if your SIP phones can't use other port then 5060 for some reason. So short answer is that you should use external profile for SIP gateways, but sometimes you might need or you can use internal profile. With kind regards, On Fri, Mar 18, 2016 at 7:35 PM, Samuel Reamer <adam@steffannicarpet.com> wrote:
Thanks all for the input, it's helped!
I followed Jurijs' tutorial on setting up iptables and it seems to be working well; however, during my setup I noticed that incoming calls from the SIP provider were coming through the internal profile (port 5060, the same ports that were opened up in iptables). Is this right?
The FreeSwitch documentation seems to indicate that these calls should go through the external profile. I added port 5080 to the iptables in the same fashion as above, and specified port 5080 in the SIP address called by the provider. It seems to be working, but I want to make sure that's the correct course of action.
On Mon, Mar 14, 2016 at 9:16 PM Lawrence Conroy <lconroy@insensate.co.uk> wrote:
Hi again, true, but f2b sure does cut down on wasted traffic and vast numbers of log entries, even with a secured dialplan. That's why I said put in f2b, secure dialplan, and only then run fS "in anger". f2b simplifies/automates the firewall block/unblocking. That cuts traffic, and in so doing, it also slows down brute force attacks to the point where they're not really feasible unless you are a target for APT. So, I'd argue you need both (as suggested).
all the best, Lawrence
On 15 Mar 2016, at 00:35, Stanislav Sinyagin <ssinyagin@gmail.com> wrote:
But what does fail2ban have to do with security? If a stranger from the internet is able to make calls to PSTN through your PBX, you need to prevent such access in the first place. It's a matter of dialplan planning, and not the firewall or fail2ban.
On 15 Mar 2016 00:20, "Jun Sun" <jsun@junsun.net> wrote: Or simply run a prebuilt AMI image from aws. It comes with fail2ban, firewall, etc.
https://aws.amazon.com/marketplace/pp/B015ZTS2XM
https://aws.amazon.com/marketplace/pp/B0191S5CU4/
Jun
On Mon, Mar 14, 2016 at 2:08 PM, Lawrence Conroy < lconroy@insensate.co.uk> wrote: Hi there, I guess you're running fS without fail2ban. Welcome to our world. BEFORE you bother trying firewall rules manually (or employing a consultant), read up on the freeswitch web for fail2ban, and install f2b. See <https://freeswitch.org/confluence/display/FREESWITCH/Fail2Ban>
Do it BEFORE you run freeSwitch "in anger".
Then secure your profiles & dialplan.
Then run freeSwitch.
Then ask :).
all the best Lawrence (who, like most of us, has had exactly this sort of problem)
On 14 Mar 2016, at 20:38, Jurijs Ivolga <jurijs.ivolga@gmail.com> wrote:
Hi Samuel,
Your problem has 2 solutions - easy one and not so easy:
Easy way: If you are facing such issues this mean that you very new to VoIP and Freeswitch particularly and in my opinion it is worth to find professional who will configure and secure your PBX, otherwise you can end up loosing much more then 30$.
Hard way: If you still think that you can handle it, then first and most simple way is to use iptables for blocking unwanted traffic. Below you can find my manual:
http://blog.volunge.net/jekyll/update/2016/02/27/how-to-secure-freeswitch-wi...
Additionally to this you can find Freeswitch official documentation
regarding Firewall configuration:
https://freeswitch.org/confluence/display/FREESWITCH/Firewall
Keep in mind that proper FW configuration will not fix all your issues and you should understand how Freeswitch work and what each configuration file do to secure your installation properly.
With kind regards,
Jurijs
2016-03-14 19:15 GMT+02:00 Samuel Reamer <adam@steffannicarpet.com>: I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log:
<configuration name="acl.conf" description="Network Lists"> <network-lists>
<list name="lan" default="allow"> <node type="allow" cidr="192.168.0.0/24"/> <!--<node type="deny" cidr="192.168.42.42/32"/> --> </list>
<list name="domains" default="deny"> <!-- domain= is special it scans the domain from the directory to build the ACL --> <node type="allow" domain="$${domain}"/> <node type="allow" cidr="192.168.0.0/24"/> <node type="allow" cidr="107.20.251.237/32" /> <node type="allow" cidr="107.20.176.37/32" /> <node type="allow" cidr="184.169.138.133/32" /> <node type="allow" cidr="54.215.5.82/32" /> </list>
</network-lists> </configuration>
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/ 10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/ 10000000@192.168.0.10:5060) Running State Change CS_NEW 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0 64bit 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth. 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/ 10000000@192.168.0.10:5060) State NEW 2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/ 10000000@192.168.0.10:5060 Abandoned 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/ 10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/ 10000000@192.168.0.10:5060) Running State Change CS_HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/ 10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/ 10000000@192.168.0.10:5060) State HANGUP 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/ 10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/ 10000000@192.168.0.10:5060) State HANGUP going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/ 10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/ 10000000@192.168.0.10:5060) Running State Change CS_REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/ 10000000@192.168.0.10:5060) State REPORTING 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/ 10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/ 10000000@192.168.0.10:5060) State REPORTING going to sleep 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/ 10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/ 10000000@192.168.0.10:5060) Locked, Waiting on external entities 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/ 10000000@192.168.0.10:5060) Ended 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/ 10000000@192.168.0.10:5060 [CS_DESTROY] 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/ 10000000@192.168.0.10:5060) Running State Change CS_DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/ 10000000@192.168.0.10:5060) State DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/ 10000000@192.168.0.10:5060 Standard DESTROY 3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/ 10000000@192.168.0.10:5060) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/ 7070@76.188.116.163] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already) 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/ 7070@76.188.116.163) State EXECUTE going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/ 7070@76.188.116.163) Callstate Change EARLY -> HANGUP 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/ 7070@76.188.116.163) State HANGUP 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 Overriding SIP cause 480 with 480 from the other leg 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/ 7070@76.188.116.163) State HANGUP going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/ 7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/ 7070@76.188.116.163) State REPORTING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/ 7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/ 7070@76.188.116.163) State REPORTING going to sleep 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/ 7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/ 7070@76.188.116.163) Locked, Waiting on external entities 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/ 7070@76.188.116.163) Ended 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/ 7070@76.188.116.163 [CS_DESTROY] 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/ 7070@76.188.116.163) Running State Change CS_DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/ 7070@76.188.116.163) State DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574 2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/ 7070@76.188.116.163 Standard DESTROY 773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/ 7070@76.188.116.163) State DESTROY going to sleep 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY 2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep 2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [7070@76.188.116.163] from 104.245.99.71 You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute and you must configure your device to use the proper domain in it's authentication credentials. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/ 7070@76.188.116.163 [351981a2-a412-49bb-a554-0df34a002f86] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 receiving invite from 104.245.99.71:6688 version: 1.7.0 64bit 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 entering state [received][100] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP: 351981a2-a412-49bb-a554-0df34a002f86 v=0 351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam 351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71 351981a2-a412-49bb-a554-0df34a002f86 t=0 0 351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000 351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000 351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15 351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690 351981a2-a412-49bb-a554-0df34a002f86 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163) State Change CS_NEW -> CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/ 7070@76.188.116.163) State NEW 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/ 7070@76.188.116.163) State INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 SOFIA INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 Standard INIT 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/ 7070@76.188.116.163) State Change CS_INIT -> CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/ 7070@76.188.116.163) State INIT going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163) Callstate Change DOWN -> RINGING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/ 7070@76.188.116.163) State ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 SOFIA ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/ 7070@76.188.116.163 Standard ROUTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->Calls to Plivo] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [Calls to Plivo] destination_number(004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->unloop] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->outside_call] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Absolute Condition [outside_call] 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Action set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)}) 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->call_debug] continue=true 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->public_extensions] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [public_extensions] destination_number(004721935380) =~ /^(10[01][0-9])$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->group_dial_standard] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [group_dial_standard] destination_number(004721935380) =~ /^2000$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 parsing [public->public_did] continue=false 351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/ 7070@76.188.116.163 Regex (FAIL) [public_did] destination_number(004721935380) =~ /^(5551212)$/ break=on-false 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/ 7070@76.188.116.163) State Change CS_ROUTING -> CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/ 7070@76.188.116.163) State ROUTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/ 7070@76.188.116.163) State EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 SOFIA EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/ 7070@76.188.116.163 Standard EXECUTE 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/ 7070@76.188.116.163 set(outside_call=true) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 [outside_call]=[true] 351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/ 7070@76.188.116.163 export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400) 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/ 7070@76.188.116.163 has executed the last dialplan instruction, hanging up. 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/ 7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/ 7070@76.188.116.163) State EXECUTE going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/ 7070@76.188.116.163) Callstate Change RINGING -> HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/ 7070@76.188.116.163) State HANGUP 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/ 7070@76.188.116.163) State HANGUP going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/ 7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/ 7070@76.188.116.163) Running State Change CS_REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/ 7070@76.188.116.163) State REPORTING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/ 7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/ 7070@76.188.116.163) State REPORTING going to sleep 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/ 7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/ 7070@76.188.116.163) Locked, Waiting on external entities 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/ 7070@76.188.116.163) Ended 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/ 7070@76.188.116.163 [CS_DESTROY] 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/ 7070@76.188.116.163) Running State Change CS_DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/ 7070@76.188.116.163) State DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/ 7070@76.188.116.163 Standard DESTROY 351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/ 7070@76.188.116.163) State DESTROY going to sleep
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (5)
-
Jun Sun
-
Jurijs Ivolga
-
Lawrence Conroy
-
Samuel Reamer
-
Stanislav Sinyagin