<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Fellow SER users:<br>
<br>
We are having a security concern we wish to resolve with the use of SIP
Express Router. We are using SER with MySQL accounting. SER seems to
be allowing users to register that are not in our database "subscriber"
table, thus being able to make free calls. I know the nature of SIP is
to allow individualized and multiple location information, but we need
to restrict username locations allowed for all traffic and registration
to match the subscriber user name sent in the digest or at least have a
way to keep track of and match what is in the subscriber table to the
name the sip endpoint actually ends up having in the location table.
Is there any way in SER to enforce this? I have included below a stack
trace from ngrep:<br>
<br>
#######<br>
<b>U </b><ep ip>:6070 -> <ser ip>:5060<br>
<b>REGISTER sip:<ser ip>:5060 SIP/2.0..To:
"701"<sip:701@<ser ip>>..From: "701"<sip:701@<ser
ip>></b>;tag=701-<br>
b7f3f443-17850000..Via: SIP/2.0/UDP <ep
ip>:6070;branch=z9hG4bK-d87543-adb1fe1af94842582aad-1--d87543-..Call-ID:<br>
b308204854e8e9c3addb7ccc69b02093..CSeq: 62 REGISTER..Contact:
<<a class="moz-txt-link-abbreviated" href="mailto:sip:9fAPqhbHwhYSZCWcNQ_ho-H5U5x_j00gb43eT-i@200.68.87">sip:9fAPqhbHwhYSZCWcNQ_ho-H5U5x_j00gb43eT-i@200.68.87</a>.<br>
113:6070>..Expires: 600..Max-Forwards: 69..User-Agent:
SIP_ITG_1.2.24.81..Authorization: Digest <b>username="7775550305",<br>
realm="<ser ip>",</b>nonce="4416e7e3e61085947d202409c005ef548e629601",uri="sip:<ser
ip>:5060",response="6cfb992b<br>
8c1e67535056a3398405e58b"..Content-Length: 0....<br>
#<br>
<b>U</b> <ser ip>:5060 -> <ep ip>:6070<br>
<b>SIP/2.0 200 OK..To: "701"<sip:701@<ser ip>></b>;tag=9c0f9d162fad9f3d7c038abec5b4d8aa.e57b..From:
"701"<<a class="moz-txt-link-abbreviated" href="mailto:sip:701@200.68">sip:701@200.68</a><br>
.87.115>;tag=701-b7f3f443-17850000..Via: SIP/2.0/UDP <ep
ip>:6070;branch=z9hG4bK-d87543-adb1fe1af94842582aad-1--<br>
d87543-..Call-ID: b308204854e8e9c3addb7ccc69b02093..CSeq: 62
REGISTER..Contact: <sip:9fAPqhbHwhYSZCWcNQ_ho-H5U5x_j00gb<br>
43eT-i@<ep ip>:6070>;q=0.00;expires=300..Server: Sip EXpress
router (0.8.14 (i386/linux))..Content-Length: 0..Wa<br>
rning: 392 <ser ip>:5060 "Noisy feedback tells: pid=13148
req_src_ip=<ep ip> req_src_port=6070 in_uri=sip:<br>
<ser ip>:5060 out_uri=sip:<ser ip>:5060 via_cnt==1"....<br>
#######<br>
<br>
Each "U" represents a new UDP packet so there are two packets above. I
have changed the IPs for privacy reasons. From packet 1 we see that a
valid username is being used for the digest authentication:<br>
<b>username="7775550305",<br>
realm="<ser ip>",<br>
</b>But the SIP endpoint does not identify itself in a way that we can
bill it:<br>
<b>REGISTER sip:<ser ip>:5060 SIP/2.0..To:
"701"<sip:701@<ser ip>>..From: "701"<sip:701@<ser
ip>><br>
701</b> is not in our subscriber table!!! I have tried to find a way
to track in the SER database who <b>701</b> refers to for billing.
But I have not been able to until doing a raw packet capture to find
that this endpoint is authenticating with username <b>7775550305</b>.
<br>
As the 2nd packet shows, the end point is allowed to register as <b>"701"</b>
even though it authenticated as <b>"7775550305"</b>. This makes
billing impossible as future INVITES, ACKs and BYEs all refer to <b>701</b>
but in no way reference <b>7775550305</b>.<br>
<br>
What we are looking for is a way to either force all registrations to
match digest username to requested location uri or some kind of a way
to track a uri that is different from the log in credentials so the
calls can be billed correctly. Please give any suggestions you may
have. We have allready tried several variations on the
mode=="REGISTER" parameter in the ser.cfg file with no success.<br>
<div class="moz-signature">
<title>Work Signature</title>
<p style="margin-bottom: 0in;"><b>Thanks,</b><br>
</p>
<p style="margin-bottom: 0in;"><b>C. Ed Felt Caflo
Network Engineer/Programmer</b><br>
<a href="http://www.caflo.com/"><img moz-do-not-send="true"
src="file:///home/ed/sigs/caflologolight.png" border="0"></a><br>
<font size="2">(801) 766-8433 (home)<br>
(801) 420-8879 (cell)<br>
74999 (h.323)<br>
74777 (sip)<br>
<a href="mailto://edeefelt@hotmail">edeefelt@hotmail.com</a><br>
<a href="mailto://efelt@caflobvi.com">efelt@caflobvi.com</a><br>
<b>chat: </b>edeefelt(aim), edeefelt (yahoo),
<a class="moz-txt-link-abbreviated" href="mailto:edeefelt@hotmail.com">edeefelt@hotmail.com</a> (msn), <a class="moz-txt-link-abbreviated" href="mailto:v_2chafe@hotmail.com">v_2chafe@hotmail.com</a> (msn)<br>
<a href="http://www.thefelts.net/">http://www.thefelts.net</a></font><br>
<br>
</p>
</div>
<br>
<br>
<a class="moz-txt-link-abbreviated" href="mailto:serusers-request@iptel.org">serusers-request@lists.iptel.org</a> wrote:
<blockquote cite="mid20060312110008.A56EB890A36@fox.iptel.org"
type="cite">
<pre wrap="">Send Serusers mailing list submissions to
<a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
To subscribe or unsubscribe via the World Wide Web, visit
<a class="moz-txt-link-freetext" href="http://lists.iptel.org/mailman/listinfo/serusers">http://lists.iptel.org/mailman/listinfo/serusers</a>
or, via email, send a message with subject or body 'help' to
<a class="moz-txt-link-abbreviated" href="mailto:serusers-request@iptel.org">serusers-request@lists.iptel.org</a>
You can reach the person managing the list at
<a class="moz-txt-link-abbreviated" href="mailto:serusers-owner@iptel.org">serusers-owner@lists.iptel.org</a>
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Serusers digest..."
Today's Topics:
1. Authentication Based On IP Addresses (Gokhan Uslu)
2. backup mysql server (Rosario Pingaro)
3. Setting radiusclient with SER (KaiFu Chan)
4. Uninstall SER? (KaiFu Chan)
5. Re: serrweb regex problem (Joao Pereira)
6. presence problem (<a class="moz-txt-link-abbreviated" href="mailto:queyeah@adinet.com.uy">queyeah@adinet.com.uy</a>)
7. Re: presence problem (Rodrigo Gonzalez)
8. Re: backup mysql server (Script Head)
9. Re: Uninstall SER? (Script Head)
10. Re: Uninstall SER? (Kapil Dhawan)
11. RE: Authentication Based On IP Addresses (Kapil Dhawan)
----------------------------------------------------------------------
Message: 1
Date: Sat, 11 Mar 2006 18:58:24 +0100
From: Gokhan Uslu <a class="moz-txt-link-rfc2396E" href="mailto:g.uslu@teles.com"><g.uslu@teles.com></a>
Subject: [Serusers] Authentication Based On IP Addresses
To: <a class="moz-txt-link-rfc2396E" href="mailto:'serusers@lists.iptel.org'">"'serusers@lists.iptel.org'"</a> <a class="moz-txt-link-rfc2396E" href="mailto:serusers@lists.iptel.org"><serusers@lists.iptel.org></a>
Message-ID:
<a class="moz-txt-link-rfc2396E" href="mailto:EFAF03912EF07741A95253BACC17513F5A1353@emex.berlin.teles.de"><EFAF03912EF07741A95253BACC17513F5A1353@emex.berlin.teles.de></a>
Content-Type: text/plain; charset="us-ascii"
Hi All...
I am using SER and FREERADIUS
I want to authenticate all the clients based on IP addresses. How to
proceed...? where to make the changes?
can any one give me the sample code function?...Thanks for any hint...
Gokhan USLU
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/serusers/attachments/20060311/d48be979/attachment-0001.html
------------------------------
Message: 2
Date: Sat, 11 Mar 2006 13:00:53 -0500
From: "Rosario Pingaro" <a class="moz-txt-link-rfc2396E" href="mailto:rpingar@Italycom.it"><rpingar@Italycom.it></a>
Subject: [Serusers] backup mysql server
To: <a class="moz-txt-link-rfc2396E" href="mailto:serusers@lists.iptel.org"><serusers@lists.iptel.org></a>
Message-ID: <0a2a01c64535$bdd64fc0$06c8a8c0@computer2>
Content-Type: text/plain; charset="iso-8859-1"
is it possible to configure a second mysql server for backup?
if yes how?
Thanks
Rosario
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/serusers/attachments/20060311/c263ea40/attachment.html
------------------------------
Message: 3
Date: Sun, 12 Mar 2006 02:11:14 +0800
From: "KaiFu Chan" <a class="moz-txt-link-rfc2396E" href="mailto:s1160956@ss23.mcu.edu.tw"><s1160956@ss23.mcu.edu.tw></a>
Subject: [Serusers] Setting radiusclient with SER
To: <a class="moz-txt-link-rfc2396E" href="mailto:serusers@lists.iptel.org"><serusers@lists.iptel.org></a>
Message-ID: <003901c64537$2f658ce0$2501a8c0@NetworkAdministrator>
Content-Type: text/plain; charset="big5"
Hi all:
I want to create a billing system by using ser and radius. Is there any document about setting radiusclient with ser? The software are too old to used in document "SIP Express Router RADIUS HOWTO" in iptel.org. Now, I have already installed the radius server and ser & radiuseclient in two computers. The radius server seems to work well, but i am not sure wherter the radius server and radiusclient could be work besause of the difficult steps setting. If I could know more about the setup details that will be grate. Please give me a hand, thank you.
Sincerely,
Caxton
.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/serusers/attachments/20060312/d8016d34/attachment.htm
------------------------------
Message: 4
Date: Sun, 12 Mar 2006 02:12:44 +0800
From: "KaiFu Chan" <a class="moz-txt-link-rfc2396E" href="mailto:s1160956@ss23.mcu.edu.tw"><s1160956@ss23.mcu.edu.tw></a>
Subject: [Serusers] Uninstall SER?
To: <a class="moz-txt-link-rfc2396E" href="mailto:serusers@lists.iptel.org"><serusers@lists.iptel.org></a>
Message-ID: <004501c64537$677645c0$2501a8c0@NetworkAdministrator>
Content-Type: text/plain; charset="big5"
Hi all:
Do I need to uninstall SER if I want to update SER v0.9.4 to SER v0.9.6? How can I uninstall SER? The command "make uninstall" do not work. Thanks!
Sincerely
Caxton
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/serusers/attachments/20060312/65f702ed/attachment.html
------------------------------
Message: 5
Date: Sat, 11 Mar 2006 19:14:16 +0000
From: Joao Pereira <a class="moz-txt-link-rfc2396E" href="mailto:joao.pereira@fccn.pt"><joao.pereira@fccn.pt></a>
Subject: Re: [Serusers] serrweb regex problem
To: Karel Kozlik <a class="moz-txt-link-rfc2396E" href="mailto:karel@iptel.org"><karel@iptel.org></a>, <a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
Message-ID: <a class="moz-txt-link-rfc2396E" href="mailto:44132188.3060809@fccn.pt"><44132188.3060809@fccn.pt></a>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Ok, then what version of serweb is having less problems with PostgreSQL?
Or I can try changing this query:
select max(abs(username)) from aliases where domain='mydomain.pt' and
username REGEXP "^[0-9]+$"
to something more "postgre like".
But I cant find it in the code... where are the SQL querys in the serweb
code?
Thanks
Joao Pereira
Karel Kozlik wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi,
sorry, but support for postgres is only experimental and not working
well in last stable version of serweb.
Real support for postgres will be ready in next version.
regards Karel
Joao Pereira napsal(a):
</pre>
<blockquote type="cite">
<pre wrap="">Hello to all
I installed the last serweb, but I had one problem registering users.
When the users receive the confirmation email, they have to go to the
confirmation link, and this confirmation link does this select in the DB:
select max(abs(username)) from aliases where domain='mydomain.pt' and
username REGEXP "[0-9]+$";
ERROR: syntax error at or near "REGEXP" at character 79
LINE 1: ...om aliases where domain='mydomain.pt' and username REGEXP
"[0...
^
(the ^ is under REGEXP)
I m using PostgreSQL 8.0.0, and I believe the problem is with the
postgres support of REGEXP...
I googled and googled and I didnt found a solution yet.
Did anyone had this problem too?
Thanks
Joao Pereira
_______________________________________________
Serusers mailing list
<a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
<a class="moz-txt-link-freetext" href="http://lists.iptel.org/mailman/listinfo/serusers">http://lists.iptel.org/mailman/listinfo/serusers</a>
</pre>
</blockquote>
</blockquote>
<pre wrap=""><!---->
------------------------------
Message: 6
Date: Sat, 11 Mar 2006 16:44:33 -0300 (UYT)
From: <a class="moz-txt-link-rfc2396E" href="mailto:queyeah@adinet.com.uy">"queyeah@adinet.com.uy"</a> <a class="moz-txt-link-rfc2396E" href="mailto:queyeah@adinet.com.uy"><queyeah@adinet.com.uy></a>
Subject: [Serusers] presence problem
To: <a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
Message-ID: <23490391.1142106273038.JavaMail.tomcat@fe-ps01>
Content-Type: text/plain;charset="ISO-8859-15"
I read the SER presence handbook as you told me, I follow the
instructions to install ser with presence modules but i receive some
erros and modules wasn't installed.
I go back to my old ser installation with pa module, configure some
lines in ser.gfc to handle subscribe but now I'm receiving an error to
SUSCRIBE and PUBLISH, it's like pa module can't process messages:
Status: 400 Bad Request (ethereal)
this is my ser.cfg:
# ----------- global configuration parameters ------------------------
#debug=3 # debug level (cmd line: -dddddddddd)
#fork=yes
#log_stderror=no # (cmd line: -E)
/* Uncomment these lines to enter debugging mode
fork=no
log_stderror=yes
*/
check_via=no # (cmd. line: -v)
dns=no # (cmd. line: -r)
rev_dns=no # (cmd. line: -R)
#port=5060
#children=4
fifo="/tmp/ser_fifo"
fifo_mode=666
# ------------------ module loading ----------------------------------
# Uncomment this if you want to use SQL database
loadmodule "/usr/lib/ser/modules/mysql.so"
loadmodule "/usr/lib/ser/modules/sl.so"
loadmodule "/usr/lib/ser/modules/tm.so"
loadmodule "/usr/lib/ser/modules/rr.so"
loadmodule "/usr/lib/ser/modules/maxfwd.so"
loadmodule "/usr/lib/ser/modules/usrloc.so"
loadmodule "/usr/lib/ser/modules/registrar.so"
loadmodule "/usr/lib/ser/modules/textops.so"
# Uncomment this if you want digest authentication
# mysql.so must be loaded !
loadmodule "/usr/lib/ser/modules/auth.so"
loadmodule "/usr/lib/ser/modules/auth_db.so"
#esta linea la agrego para cargar el modulo de presencia.
loadmodule "/usr/lib/ser/modules/pa.so"
# ----------------- setting module-specific parameters ---------------
# -- usrloc params --
#modparam("usrloc", "db_mode", 0)
modparam("usrloc", "db_mode", 2)
modparam("usrloc", "db_url", "mysql://ser:heslo@localhost/ser" )
# Uncomment this if you want to use SQL database
# for persistent storage and comment the previous line
modparam("usrloc", "db_mode", 2)
# -- auth params --
# Uncomment if you are using auth module
#
modparam("auth_db", "calculate_ha1", yes)
#
# If you set "calculate_ha1" parameter to yes (which true in this
config),
# uncomment also the following parameter)
#
modparam("auth_db", "password_column", "password")
# -- rr params --
# add value to ;lr param to make some broken UAs happy
modparam("rr", "enable_full_lr", 1)
# -- pa params --
modparam("pa","default_expires", 3600)
modparam("pa","use_db",1)
modparam("pa","db_url","mysql://ser:heslo@localhost/ser")
# ------------------------- request routing logic -------------------
# main routing logic
route{
# initial sanity checks -- messages with
# max_forwards==0, or excessively long requests
if (!mf_process_maxfwd_header("10")) {
sl_send_reply("483","Too Many Hops");
break;
};
if (msg:len >= 2048 ) {
sl_send_reply("513", "Message too big");
break;
};
# we record-route all messages -- to make sure that
# subsequent messages will go through our proxy; that's
# particularly good if upstream and downstream entities
# use different transport protocol
if (!method=="REGISTER") record_route();
# subsequent messages withing a dialog should take the
# path determined by record-routing
if (loose_route()) {
# mark routing logic in request
append_hf("P-hint: rr-enforced\r\n");
route(1);
break;
};
if (!uri==myself) {
# mark routing logic in request
append_hf("P-hint: outbound\r\n");
route(1);
break;
};
# if the request is for other domain use UsrLoc
# (in case, it does not work, use the following command
# with proper names and addresses in it)
if (uri==myself) {
if (method=="REGISTER") {
# Uncomment this if you want to use digest
authentication
if (!www_authorize("p2t.com", "subscriber")) {
www_challenge("p2t.com", "0");
break;
};
save("location");
break;
};
if (method=="SUBSCRIBE" || method=="PUBLISH") {
if (t_newtran()) {
handle_subscription("registrar");
break;
};
};
lookup("aliases");
if (!uri==myself) {
append_hf("P-hint: outbound alias\r\n");
route(1);
break;
};
# native SIP destinations are handled using our USRLOC DB
if (!lookup("location")) {
sl_send_reply("404", "Not Found");
break;
};
};
append_hf("P-hint: usrloc applied\r\n");
route(1);
}
route[1]
{
# send it out now; use stateful forwarding as it works reliably
# even for UDP2TCP
if (!t_relay()) {
sl_reply_error();
};
}
Do you have any idea of what's happening???
Thanks again...
Gustavo.
------------------------------
Message: 7
Date: Sat, 11 Mar 2006 17:57:47 -0300
From: Rodrigo Gonzalez <a class="moz-txt-link-rfc2396E" href="mailto:rjgonzale@gmail.com"><rjgonzale@gmail.com></a>
Subject: Re: [Serusers] presence problem
To: <a class="moz-txt-link-rfc2396E" href="mailto:queyeah@adinet.com.uy">"queyeah@adinet.com.uy"</a> <a class="moz-txt-link-rfc2396E" href="mailto:queyeah@adinet.com.uy"><queyeah@adinet.com.uy></a>
Cc: <a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
Message-ID: <a class="moz-txt-link-rfc2396E" href="mailto:441339CB.9000203@gmail.com"><441339CB.9000203@gmail.com></a>
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
2 things....
if (method=="SUBSCRIBE" || method=="PUBLISH") {
if (t_newtran()) {
handle_subscription("registrar");
break;
};
};
handle_subscription is for SUBSCRIBE and handle_publish is for PUBLISH, so you need 2 if, one for SUBSCRIBE method and one for PUBLISH one.
Second, after fixing this, if you have any problems, please send the msgs to see the problem
<a class="moz-txt-link-abbreviated" href="mailto:queyeah@adinet.com.uy">queyeah@adinet.com.uy</a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">I read the SER presence handbook as you told me, I follow the
instructions to install ser with presence modules but i receive some
erros and modules wasn't installed.
I go back to my old ser installation with pa module, configure some
lines in ser.gfc to handle subscribe but now I'm receiving an error to
SUSCRIBE and PUBLISH, it's like pa module can't process messages:
Status: 400 Bad Request (ethereal)
this is my ser.cfg:
# ----------- global configuration parameters ------------------------
#debug=3 # debug level (cmd line: -dddddddddd)
#fork=yes
#log_stderror=no # (cmd line: -E)
/* Uncomment these lines to enter debugging mode
fork=no
log_stderror=yes
*/
check_via=no # (cmd. line: -v)
dns=no # (cmd. line: -r)
rev_dns=no # (cmd. line: -R)
#port=5060
#children=4
fifo="/tmp/ser_fifo"
fifo_mode=666
# ------------------ module loading ----------------------------------
# Uncomment this if you want to use SQL database
loadmodule "/usr/lib/ser/modules/mysql.so"
loadmodule "/usr/lib/ser/modules/sl.so"
loadmodule "/usr/lib/ser/modules/tm.so"
loadmodule "/usr/lib/ser/modules/rr.so"
loadmodule "/usr/lib/ser/modules/maxfwd.so"
loadmodule "/usr/lib/ser/modules/usrloc.so"
loadmodule "/usr/lib/ser/modules/registrar.so"
loadmodule "/usr/lib/ser/modules/textops.so"
# Uncomment this if you want digest authentication
# mysql.so must be loaded !
loadmodule "/usr/lib/ser/modules/auth.so"
loadmodule "/usr/lib/ser/modules/auth_db.so"
#esta linea la agrego para cargar el modulo de presencia.
loadmodule "/usr/lib/ser/modules/pa.so"
# ----------------- setting module-specific parameters ---------------
# -- usrloc params --
#modparam("usrloc", "db_mode", 0)
modparam("usrloc", "db_mode", 2)
modparam("usrloc", "db_url", "mysql://ser:heslo@localhost/ser" )
# Uncomment this if you want to use SQL database
# for persistent storage and comment the previous line
modparam("usrloc", "db_mode", 2)
# -- auth params --
# Uncomment if you are using auth module
#
modparam("auth_db", "calculate_ha1", yes)
#
# If you set "calculate_ha1" parameter to yes (which true in this
config),
# uncomment also the following parameter)
#
modparam("auth_db", "password_column", "password")
# -- rr params --
# add value to ;lr param to make some broken UAs happy
modparam("rr", "enable_full_lr", 1)
# -- pa params --
modparam("pa","default_expires", 3600)
modparam("pa","use_db",1)
modparam("pa","db_url","mysql://ser:heslo@localhost/ser")
# ------------------------- request routing logic -------------------
# main routing logic
route{
# initial sanity checks -- messages with
# max_forwards==0, or excessively long requests
if (!mf_process_maxfwd_header("10")) {
sl_send_reply("483","Too Many Hops");
break;
};
if (msg:len >= 2048 ) {
sl_send_reply("513", "Message too big");
break;
};
# we record-route all messages -- to make sure that
# subsequent messages will go through our proxy; that's
# particularly good if upstream and downstream entities
# use different transport protocol
if (!method=="REGISTER") record_route();
# subsequent messages withing a dialog should take the
# path determined by record-routing
if (loose_route()) {
# mark routing logic in request
append_hf("P-hint: rr-enforced\r\n");
route(1);
break;
};
if (!uri==myself) {
# mark routing logic in request
append_hf("P-hint: outbound\r\n");
route(1);
break;
};
# if the request is for other domain use UsrLoc
# (in case, it does not work, use the following command
# with proper names and addresses in it)
if (uri==myself) {
if (method=="REGISTER") {
# Uncomment this if you want to use digest
authentication
if (!www_authorize("p2t.com", "subscriber")) {
www_challenge("p2t.com", "0");
break;
};
save("location");
break;
};
if (method=="SUBSCRIBE" || method=="PUBLISH") {
if (t_newtran()) {
handle_subscription("registrar");
break;
};
};
lookup("aliases");
if (!uri==myself) {
append_hf("P-hint: outbound alias\r\n");
route(1);
break;
};
# native SIP destinations are handled using our USRLOC DB
if (!lookup("location")) {
sl_send_reply("404", "Not Found");
break;
};
};
append_hf("P-hint: usrloc applied\r\n");
route(1);
}
route[1]
{
# send it out now; use stateful forwarding as it works reliably
# even for UDP2TCP
if (!t_relay()) {
sl_reply_error();
};
}
Do you have any idea of what's happening???
Thanks again...
Gustavo.
_______________________________________________
Serusers mailing list
<a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
<a class="moz-txt-link-freetext" href="http://lists.iptel.org/mailman/listinfo/serusers">http://lists.iptel.org/mailman/listinfo/serusers</a>
</pre>
</blockquote>
<pre wrap=""><!---->
------------------------------
Message: 8
Date: Sat, 11 Mar 2006 16:15:46 -0500
From: "Script Head" <a class="moz-txt-link-rfc2396E" href="mailto:scripthead@gmail.com"><scripthead@gmail.com></a>
Subject: Re: [Serusers] backup mysql server
To: <a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
Message-ID:
<a class="moz-txt-link-rfc2396E" href="mailto:451eb55c0603111315n4f702d3dhc127074d6dacdf47@mail.gmail.com"><451eb55c0603111315n4f702d3dhc127074d6dacdf47@mail.gmail.com></a>
Content-Type: text/plain; charset="iso-8859-1"
You could use something like sqlrelay (<a class="moz-txt-link-freetext" href="http://sqlrelay.sourceforge.net/">http://sqlrelay.sourceforge.net/</a>) or
pgpool (for PostgreSQL) to implement failover. Both of those applications
provide failover features.
On 3/11/06, Rosario Pingaro <a class="moz-txt-link-rfc2396E" href="mailto:rpingar@italycom.it"><rpingar@italycom.it></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">is it possible to configure a second mysql server for backup?
if yes how?
Thanks
Rosario
_______________________________________________
Serusers mailing list
<a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
<a class="moz-txt-link-freetext" href="http://lists.iptel.org/mailman/listinfo/serusers">http://lists.iptel.org/mailman/listinfo/serusers</a>
</pre>
</blockquote>
<pre wrap=""><!---->-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/serusers/attachments/20060311/5cb7a23e/attachment.htm
------------------------------
Message: 9
Date: Sat, 11 Mar 2006 16:50:26 -0500
From: "Script Head" <a class="moz-txt-link-rfc2396E" href="mailto:scripthead@gmail.com"><scripthead@gmail.com></a>
Subject: Re: [Serusers] Uninstall SER?
To: <a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
Message-ID:
<a class="moz-txt-link-rfc2396E" href="mailto:451eb55c0603111350g264aa21bu62048f47cfb69b2c@mail.gmail.com"><451eb55c0603111350g264aa21bu62048f47cfb69b2c@mail.gmail.com></a>
Content-Type: text/plain; charset="iso-8859-1"
Running on make install should overwrite the binaries so essentially you do
not need to uninstall anything.
If you want to, you can track down the binaries and remove them by hand.
On 3/11/06, KaiFu Chan <a class="moz-txt-link-rfc2396E" href="mailto:s1160956@ss23.mcu.edu.tw"><s1160956@ss23.mcu.edu.tw></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi all:
Do I need to uninstall SER if I want to update SER v0.9.4 to SER
v0.9.6? How can I uninstall SER? The command "make uninstall" do not work.
Thanks!
Sincerely
Caxton
_______________________________________________
Serusers mailing list
<a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
<a class="moz-txt-link-freetext" href="http://lists.iptel.org/mailman/listinfo/serusers">http://lists.iptel.org/mailman/listinfo/serusers</a>
</pre>
</blockquote>
<pre wrap=""><!---->-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/serusers/attachments/20060311/330d12bf/attachment.html
------------------------------
Message: 10
Date: Sun, 12 Mar 2006 05:26:22 +0000
From: "Kapil Dhawan" <a class="moz-txt-link-rfc2396E" href="mailto:sersavvy@hotmail.com"><sersavvy@hotmail.com></a>
Subject: Re: [Serusers] Uninstall SER?
To: <a class="moz-txt-link-abbreviated" href="mailto:scripthead@gmail.com">scripthead@gmail.com</a>
Cc: <a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
Message-ID: <a class="moz-txt-link-rfc2396E" href="mailto:BAY21-F204D80C49B36173FF7F67EC0E30@phx.gbl"><BAY21-F204D80C49B36173FF7F67EC0E30@phx.gbl></a>
Content-Type: text/plain; format=flowed
No need to uninstall but if you still want
</pre>
<blockquote type="cite">
<pre wrap="">From: "Script Head" <a class="moz-txt-link-rfc2396E" href="mailto:scripthead@gmail.com"><scripthead@gmail.com></a>
To: <a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
Subject: Re: [Serusers] Uninstall SER?
Date: Sat, 11 Mar 2006 16:50:26 -0500
Running on make install should overwrite the binaries so essentially you do
not need to uninstall anything.
If you want to, you can track down the binaries and remove them by hand.
On 3/11/06, KaiFu Chan <a class="moz-txt-link-rfc2396E" href="mailto:s1160956@ss23.mcu.edu.tw"><s1160956@ss23.mcu.edu.tw></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi all:
Do I need to uninstall SER if I want to update SER v0.9.4 to SER
v0.9.6? How can I uninstall SER? The command "make uninstall" do not
</pre>
</blockquote>
<pre wrap="">work.
</pre>
<blockquote type="cite">
<pre wrap="">Thanks!
Sincerely
Caxton
_______________________________________________
Serusers mailing list
<a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
<a class="moz-txt-link-freetext" href="http://lists.iptel.org/mailman/listinfo/serusers">http://lists.iptel.org/mailman/listinfo/serusers</a>
</pre>
</blockquote>
</blockquote>
<pre wrap=""><!---->
</pre>
<blockquote type="cite">
<pre wrap="">_______________________________________________
Serusers mailing list
<a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
<a class="moz-txt-link-freetext" href="http://lists.iptel.org/mailman/listinfo/serusers">http://lists.iptel.org/mailman/listinfo/serusers</a>
</pre>
</blockquote>
<pre wrap=""><!---->
_________________________________________________________________
One and only Ash. Find out all about her. Only on MSN Search
<a class="moz-txt-link-freetext" href="http://server1.msn.co.in/profile/aishwarya.asp">http://server1.msn.co.in/profile/aishwarya.asp</a>
------------------------------
Message: 11
Date: Sun, 12 Mar 2006 05:42:27 +0000
From: "Kapil Dhawan" <a class="moz-txt-link-rfc2396E" href="mailto:sersavvy@hotmail.com"><sersavvy@hotmail.com></a>
Subject: RE: [Serusers] Authentication Based On IP Addresses
To: <a class="moz-txt-link-abbreviated" href="mailto:g.uslu@teles.com">g.uslu@teles.com</a>
Cc: <a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
Message-ID: <a class="moz-txt-link-rfc2396E" href="mailto:BAY21-F60438C328B846DFB4B719C0E30@phx.gbl"><BAY21-F60438C328B846DFB4B719C0E30@phx.gbl></a>
Content-Type: text/plain; format=flowed
in ser.cfg
if (loose_route()) {
# mark routing logic in request
append_hf("P-hint: rr-enforced\r\n");
route(1);
break;
};
if(method=="INVITE"){
if (src_ip==x1.y1.z1.w1){
if (uri=~"^sip:001*@*"){
rewritehost("x.y.z.w");
t_relay_to_udp("x.y.z.w","5060");
break;
};
};
};
This states that if Call is coming from x1.y1.z1.w1 and 00 as prefix then
forward it to your Provider.
</pre>
<blockquote type="cite">
<pre wrap="">From: Gokhan Uslu <a class="moz-txt-link-rfc2396E" href="mailto:g.uslu@teles.com"><g.uslu@teles.com></a>
To: <a class="moz-txt-link-rfc2396E" href="mailto:'serusers@lists.iptel.org'">"'serusers@lists.iptel.org'"</a> <a class="moz-txt-link-rfc2396E" href="mailto:serusers@lists.iptel.org"><serusers@lists.iptel.org></a>
Subject: [Serusers] Authentication Based On IP Addresses
Date: Sat, 11 Mar 2006 18:58:24 +0100
Hi All...
I am using SER and FREERADIUS
I want to authenticate all the clients based on IP addresses. How to
proceed...? where to make the changes?
can any one give me the sample code function?...Thanks for any hint...
Gokhan USLU
</pre>
</blockquote>
<pre wrap=""><!---->
</pre>
<blockquote type="cite">
<pre wrap="">_______________________________________________
Serusers mailing list
<a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
<a class="moz-txt-link-freetext" href="http://lists.iptel.org/mailman/listinfo/serusers">http://lists.iptel.org/mailman/listinfo/serusers</a>
</pre>
</blockquote>
<pre wrap=""><!---->
_________________________________________________________________
NRIs: Still paying for money transfers? Now send Money2India for FREE!
<a class="moz-txt-link-freetext" href="http://ads.mediaturf.net/event.ng/Type=click&FlightID=20273&AdID=65990&TargetID=11172&Targets=11172&Values=202,414,1093,1264,3122&Redirect=http:%2F%2Fwww.icicinri.net%2Fmoney2india%2F%3Fm2i%3DBAC-MSN%26att%3DMSNTLM2I70CHAR%26rfr%3DMSNTLM2I70CHAR">http://ads.mediaturf.net/event.ng/Type=click&FlightID=20273&AdID=65990&TargetID=11172&Targets=11172&Values=202,414,1093,1264,3122&Redirect=http:%2F%2Fwww.icicinri.net%2Fmoney2india%2F%3Fm2i%3DBAC-MSN%26att%3DMSNTLM2I70CHAR%26rfr%3DMSNTLM2I70CHAR</a>
------------------------------
_______________________________________________
Serusers mailing list
<a class="moz-txt-link-abbreviated" href="mailto:serusers@lists.iptel.org">serusers@lists.iptel.org</a>
<a class="moz-txt-link-freetext" href="http://lists.iptel.org/mailman/listinfo/serusers">http://lists.iptel.org/mailman/listinfo/serusers</a>
End of Serusers Digest, Vol 35, Issue 13
****************************************
</pre>
</blockquote>
</body>
</html>