<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <br>
    -----BEGIN PGP SIGNED MESSAGE-----<br>
    Hash: SHA1<br>
    <br>
    Hi,<br>
    <br>
    I've worked out what's going wrong and I fear there is a mistake in
    your config at:<br>
    <br>
<a class="moz-txt-link-freetext" href="http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour">http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour</a><br>
    <br>
    inter-domain calls are going in plain text over UDP. I can see the
    invites at the reciving end doing a packet capture using tcpdump. My
    firewall blocks these thus explaining why nothing was seen in the
    kamailio log at that end.<br>
    <br>
    tcpdump -vvv -i eth0 src 46.43.48.253 and udp and port 5060
    >debug.txt<br>
    <br>
    How do I make all inter-domain traffic only TLS?<br>
    <br>
    I've ensured that there are just valid TLS SRV records at both ends:<br>
    <br>
    host -t SRV _sips._tcp.unspeak.im<br>
    _sips._tcp.unspeak.im has SRV record 0 0 5061 unspeak.im.<br>
    host -t SRV _sips._tcp.atoll.dmcip.com<br>
    _sips._tcp.atoll.dmcip.com has SRV record 0 10 5061 atoll.dmcip.com.<br>
    <br>
    Many thanks for all your help so far.<br>
    <br>
    Regards,<br>
    John<br>
    <br>
    <br>
    - -------- Original Message --------<br>
    Subject:     Re: [SR-Users]
    <a class="moz-txt-link-freetext" href="http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour">http://kb.asipto.com/kamailio:skype-like-service-in-less-than-one-hour</a><br>
    Date:     Tue, 21 May 2013 05:28:31 +0100<br>
    From:     johnc <a class="moz-txt-link-rfc2396E" href="mailto:johnc@aktivix.org"><johnc@aktivix.org></a><br>
    Reply-To:     Kamailio (SER) - Users Mailing List
    <a class="moz-txt-link-rfc2396E" href="mailto:sr-users@lists.sip-router.org"><sr-users@lists.sip-router.org></a><br>
    To:     <a class="moz-txt-link-abbreviated" href="mailto:miconda@gmail.com">miconda@gmail.com</a>, "Kamailio (SER) - Users Mailing List"
    <a class="moz-txt-link-rfc2396E" href="mailto:sr-users@lists.sip-router.org"><sr-users@lists.sip-router.org></a><br>
    <br>
    <br>
    <br>
    - -----BEGIN PGP SIGNED MESSAGE-----<br>
    Hash: SHA1<br>
    <br>
    Hi,<br>
    <br>
    Here is a The kamailio log from the sip proxy (atoll.dmcip.com) of
    the<br>
    caller. There is nothing in the called server's (unspeak.im) logs
    from<br>
    the call.<br>
    <br>
    <a class="moz-txt-link-abbreviated" href="mailto:johnc@atoll.dmcip.com">johnc@atoll.dmcip.com</a> ----Call---> <a class="moz-txt-link-abbreviated" href="mailto:gnuday@unspeak.im">gnuday@unspeak.im</a><br>
    <br>
    The call gets as far as "SIP 100 trying".<br>
    <br>
    <br>
    Both servers have only port 5061 TCP open on the firewall to only<br>
    allow TLS.<br>
    <br>
    Any help would be greatly appreciated.<br>
    <br>
    Many thanks.<br>
    <br>
    Regards,<br>
    John<br>
    - -----BEGIN PGP SIGNATURE-----<br>
    Version: GnuPG v1.4.12 (GNU/Linux)<br>
    Comment: Using GnuPG with Mozilla - <a class="moz-txt-link-freetext" href="http://enigmail.mozdev.org/">http://enigmail.mozdev.org/</a><br>
    <br>
    iQIcBAEBAgAGBQJRmvfnAAoJELy1jPQ1KER7O8EP/RfxYhBP4zhP6ioZq/piMIQX<br>
    6zCEX+dC087MHtST3lOqx1oQf5ERHbR8vRpbuZyoflnKHspAijwEvuQwWuPfGXlR<br>
    RQlMowAMcKuEZ6RL4FS+Tm2VlFz+HFxH4KxJgOi721DGdzUrT4eKUf4hD3vsRlj/<br>
    QY7fLWiNj5TgHFu4yRu/OSVQ5DYr+PFrV8T7GtwgbCCq2Wzu1TdtuLTKJeUlHQJ/<br>
    v9uQxLJyFTUsjGWdWj1ynEBJ1CoYMwWj85eorjsylW/PQ49SJupNd1w4CkagCpAO<br>
    78h+qgcm2znxJajiA/sqD+31qzGCx2muSEVfFApg5JsLanr62xQuhAGYxLhDMR6u<br>
    yda9ItUlFWrzrAy+TGf9NZyBN2l+pjAU2O4jWuEJRZ0znf9AshwS/zvRdbkGecqa<br>
    E26eMSnfWks+JvE5YjIShyaKxXEcrNYm9RdrUQbKqzHwM0zS+/V42iZp9pZA73+T<br>
    pWdwWasi0P5H1bBhLkdIO6mxidsahMbkUjeOeAzP7JVKszvjWow4ks/Pd/b+Rk6m<br>
    /3A2bAyGn3SkPo4PveXBDGGdqA5sEMivm4WOBAGkXN2dIDtXCZ2bVGv7ucsm8qzC<br>
    gAJ80cdiH2n3x8WFp9xlRBmcqG89b8JUW8I2KDjSCkEnltUByA7MC3YXQ+MdrlrI<br>
    lBnxCsMyckAXGJnZniD+<br>
    =Zcfa<br>
    - -----END PGP SIGNATURE-----<br>
    <br>
    -----BEGIN PGP SIGNATURE-----<br>
    Version: GnuPG v1.4.12 (GNU/Linux)<br>
    Comment: Using GnuPG with Mozilla - <a class="moz-txt-link-freetext" href="http://enigmail.mozdev.org/">http://enigmail.mozdev.org/</a><br>
    <br>
    iQIcBAEBAgAGBQJRm2VIAAoJELy1jPQ1KER7IoIP/2ZkWpzrGeILaYnClWiiRBL9<br>
    A9VIqr4w7ilk0RG/xovBjEPagA56TFbPGTVTxlEUmDOKEvEObg+arc/+NGrB6+FV<br>
    ypdm0uV6TDQbS5MTX6NOUs8pb3wW359Wpf0cZi8qUzoJW4Pt1SFccSLKUXYmepK6<br>
    m1ISppVImPWYNY+EL2yLBa/82q+QeSsMbQg/V+lhh4VydM4kFZgJQXOQHZFe4raR<br>
    sV2XHj1/p1kpNzqwnzGfKVpP0De+o2ZNhbgLGliE48yd8nD5gKxA5tFlrh3d7dI0<br>
    VCSRY59KH3nxFfO3uI6TAkCTMQj/HlMvJrVdcrP2vFbg9umyQZFl9hYGCXCNO4U9<br>
    P4YTExi7GgpmYqe/DC9vTCn6eeltc6oma0RXgGF/5J964D4bxj/dOT1yuM3XDygJ<br>
    z9q/Z5mFnggWkkTTgZi7tUcAk0k+Th3t/5YM5F83bWRqU1dNNEqAkBuXxu2Wgv2Q<br>
    rm62m8MAyHvF+vS0/xrNEfzU7v0D0uMSkTxpAIY6EoyMcsJFTITVuJJt0fHYn2cN<br>
    3WeLyZKl/LR/smpVL+2vltVT6kHnBaYSKHbm7lOwlsGdm09Mo9Lmnq8C7ygv0lT3<br>
    vTfvH9bZ/mZDuFDHsOCPd1na6BEG11r1lLJ/XMcdtanadTu7g67p8HF1H11k4aK4<br>
    nmdaw2qGN9NPddTeO3Nf<br>
    =XB4S<br>
    -----END PGP SIGNATURE-----<br>
    <br>
  </body>
</html>