[SR-Users] Fwd: Re: http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour

[johnc]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I've worked out what's going wrong and I fear there is a mistake in your
config at:

http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour

inter-domain calls are going in plain text over UDP. I can see the
invites at the reciving end doing a packet capture using tcpdump. My
firewall blocks these thus explaining why nothing was seen in the
kamailio log at that end.

tcpdump -vvv -i eth0 src 46.43.48.253 and udp and port 5060 >debug.txt

How do I make all inter-domain traffic only TLS?

I've ensured that there are just valid TLS SRV records at both ends:

host -t SRV _sips._tcp.unspeak.im
_sips._tcp.unspeak.im has SRV record 0 0 5061 unspeak.im.
host -t SRV _sips._tcp.atoll.dmcip.com
_sips._tcp.atoll.dmcip.com has SRV record 0 10 5061 atoll.dmcip.com.

Many thanks for all your help so far.

Regards,
John


- -------- Original Message --------
Subject:     Re: [SR-Users]
http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour
Date:     Tue, 21 May 2013 05:28:31 +0100
From:     johnc <johnc at aktivix.org>
Reply-To:     Kamailio (SER) - Users Mailing List
<sr-users at lists.sip-router.org>
To:     miconda at gmail.com, "Kamailio (SER) - Users Mailing List"
<sr-users at lists.sip-router.org>



- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Here is a The kamailio log from the sip proxy (atoll.dmcip.com) of the
caller. There is nothing in the called server's (unspeak.im) logs from
the call.

johnc at atoll.dmcip.com ----Call---> gnuday at unspeak.im

The call gets as far as "SIP 100 trying".


Both servers have only port 5061 TCP open on the firewall to only
allow TLS.

Any help would be greatly appreciated.

Many thanks.

Regards,
John
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=Zcfa
- -----END PGP SIGNATURE-----

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=XB4S
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20130521/50e51dec/attachment.html>