OpenSER SIP Proxy Users List

headers Arafath-uz-zaman khan | 1 Feb 2010 09:28 · /modules/

#
# $Id: kamailio.cfg 5926 2009-09-24 18:37:43Z miconda $
#
# Kamailio (OpenSER) SIP Server - basic configuration script
#     - web: http://www.kamailio.org

#     - svn: http://openser.svn.sourceforge.net/viewvc/openser/

#
# Direct your questions about this file to: <users <at> lists.kamailio.org>
#
# Refer to the Core CookBook at http://www.kamailio.org/dokuwiki/doku.php

# for an explanation of possible statements, functions and parameters.
#
# There are comments showing how to enable different features in th econfig
# file. Such commented code starts with #X# where X is a letter to identify
# a feature. Delete entire #X# if you want to enable that feature. Next are
# sed commands that help you enable such features.
#
# *** To enamble mysql execute:
#     sed -i 's/#m#//g' kamailio.cfg
#
# *** To enamble authentication execute:
#     - enable mysql
#     sed -i 's/#a#//g' kamailio.cfg
#     - add users using 'kamctl'
#
# *** To enamble persistent user location execute:
#     - enable mysql
#     sed -i 's/#u#//g' kamailio.cfg
#
# *** To enamble presence server execute:
#     - enable mysql
#     sed -i 's/#p#//g' kamailio.cfg
#
# *** To enamble nat traversal execute:
#     sed -i 's/#n#//g' kamailio.cfg
#     - install RTPProxy: http://www.rtpproxy.org

#     - start RTPProxy:
#        rtpproxy -l _your_public_ip_ -s udp:localhost:7722
#
# *** To enhance accounting execute:
#     - enable mysql
#     sed -i 's/#c#//g' kamailio.cfg
#     - add following columns to database
# ALTER TABLE acc ADD COLUMN src_user VARCHAR(64) NOT NULL DEFAULT '';
# ALTER TABLE acc ADD COLUMN src_domain VARCHAR(128) NOT NULL DEFAULT '';
# ALTER TABLE acc ADD COLUMN dst_ouser VARCHAR(64) NOT NULL DEFAULT '';
# ALTER TABLE acc ADD COLUMN dst_user VARCHAR(64) NOT NULL DEFAULT '';
# ALTER TABLE acc ADD COLUMN dst_domain VARCHAR(128) NOT NULL DEFAULT '';
# ALTER TABLE missed_calls ADD COLUMN src_user VARCHAR(64) NOT NULL DEFAULT '';
# ALTER TABLE missed_calls ADD COLUMN src_domain VARCHAR(128) NOT NULL DEFAULT '';
# ALTER TABLE missed_calls ADD COLUMN dst_ouser VARCHAR(64) NOT NULL DEFAULT '';
# ALTER TABLE missed_calls ADD COLUMN dst_user VARCHAR(64) NOT NULL DEFAULT '';
# ALTER TABLE missed_calls ADD COLUMN dst_domain VARCHAR(128) NOT NULL DEFAULT '';
#


####### Global Parameters #########

debug=9
log_stderror=no
log_facility=LOG_LOCAL6

fork=yes
children=4

/* uncomment the following lines to enable debugging */
#debug=6
#fork=no
#log_stderror=yes

/* uncomment the next line to disable TCP (default on) */
#disable_tcp=yes

/* uncomment the next line to enable the auto temporary blacklisting of 
   not available destinations (default disabled) */
#disable_dns_blacklist=no

/* uncomment the next line to enable IPv6 lookup after IPv4 dns 
   lookup failures (default disabled) */
#dns_try_ipv6=yes

/* uncomment the next line to disable the auto discovery of local aliases
   based on revers DNS on IPs (default on) */
#auto_aliases=no

/* uncomment the following lines to enable TLS support  (default off) */
disable_tls = no
listen = tls:192.168.10.1:7161
tls_verify_server = 1
tls_verify_client = 0
tls_require_client_certificate = 0
tls_method = TLSv1
tls_certificate = "/usr/local/etc/kamailio/tls/user/user-cert.pem"
tls_private_key = "/usr/local/etc/kamailio/tls/user/user-privkey.pem"
tls_ca_list     = "/usr/local/etc/kamailio/tls/user/user-calist.pem"


#port=7160

/* uncomment and configure the following line if you want Kamailio to 
   bind on a specific interface/port/proto (default bind on all available) */
listen=udp:192.168.10.1:5060


####### Modules Section ########

#set module path
mpath="/usr/local/lib/kamailio/modules/"

/* uncomment next line for MySQL DB support */
loadmodule "db_mysql.so"
loadmodule "mi_fifo.so"
loadmodule "sl.so"
loadmodule "tm.so"
loadmodule "rr.so"
loadmodule "pv.so"
loadmodule "maxfwd.so"
loadmodule "usrloc.so"
loadmodule "registrar.so"
loadmodule "textops.so"
loadmodule "uri_db.so"
loadmodule "siputils.so"
loadmodule "xlog.so"
loadmodule "acc.so"
/* uncomment next lines for MySQL based authentication support 
   NOTE: a DB (like db_mysql) module must be also loaded */
loadmodule "auth.so"
loadmodule "auth_db.so"
/* uncomment next line for aliases support
   NOTE: a DB (like db_mysql) module must be also loaded */
loadmodule "alias_db.so"
/* uncomment next line for multi-domain support
   NOTE: a DB (like db_mysql) module must be also loaded
   NOTE: be sure and enable multi-domain support in all used modules
         (see "multi-module params" section ) */
#loadmodule "domain.so"
/* uncomment the next two lines for presence server support
   NOTE: a DB (like db_mysql) module must be also loaded */
#p#loadmodule "presence.so"
#p#loadmodule "presence_xml.so"

loadmodule "nathelper.so"

# ----------------- setting module-specific parameters ---------------

# ----- mi_fifo params -----
modparam("mi_fifo", "fifo_name", "/tmp/kamailio_fifo")


# ----- rr params -----
# add value to ;lr param to cope with most of the UAs
modparam("rr", "enable_full_lr", 1)
# do not append from tag to the RR (no need for this script)
modparam("rr", "append_fromtag", 0)


# ----- rr params -----
modparam("registrar", "method_filtering", 1)
/* uncomment the next line to disable parallel forking via location */
# modparam("registrar", "append_branches", 1)
/* uncomment the next line not to allow more than 10 contacts per AOR */
#modparam("registrar", "max_contacts", 10)


# ----- uri_db params -----
/* by default we disable the DB support in the module as we do not need it
   in this configuration */
modparam("uri_db", "use_uri_table", 0)
modparam("uri_db", "db_url", "")


# ----- acc params -----
/* what sepcial events should be accounted ? */
modparam("acc", "early_media", 1)
modparam("acc", "report_ack", 1)
modparam("acc", "report_cancels", 1)
/* by default ww do not adjust the direct of the sequential requests.
   if you enable this parameter, be sure the enable "append_fromtag"
   in "rr" module */
modparam("acc", "detect_direction", 0)
/* account triggers (flags) */
modparam("acc", "failed_transaction_flag", 3)
modparam("acc", "log_flag", 1)
modparam("acc", "log_missed_flag", 2)
modparam("acc", "log_extra", 
	"src_user=$fU;src_domain=$fd;dst_ouser=$tU;dst_user=$rU;dst_domain=$rd")
/* uncomment the following lines to enable DB accounting also */
modparam("acc", "db_flag", 1)
modparam("acc", "db_missed_flag", 2)
modparam("acc", "db_url",
	"mysql://openser:openserrw <at> localhost/openser")
#modparam("acc", "db_extra",
#	"src_user=$fU;src_domain=$fd;dst_ouser=$tU;dst_user=$rU;dst_domain=$rd")


# ----- usrloc params -----
/* uncomment the following lines if you want to enable DB persistency
   for location entries */
modparam("usrloc", "db_mode",   2)
modparam("usrloc", "db_url",
	"mysql://openser:openserrw <at> localhost/openser")

# ----- auth_db params -----
/* uncomment the following lines if you want to enable the DB based
   authentication */
modparam("auth_db", "calculate_ha1", yes)
modparam("auth_db", "password_column", "password")
modparam("auth_db", "db_url",
	"mysql://openser:openserrw <at> localhost/openser")
modparam("auth_db", "load_credentials", "")


# ----- alias_db params -----
/* uncomment the following lines if you want to enable the DB based
   aliases */
modparam("alias_db", "db_url",
	"mysql://openser:openserrw <at> localhost/openser")


# ----- domain params -----
/* uncomment the following lines to enable multi-domain detection
   support */
#modparam("domain", "db_url",
#	"mysql://openser:openserrw <at> localhost/openser")
#modparam("domain", "db_mode", 1)   # Use caching


# ----- multi-module params -----
/* uncomment the following line if you want to enable multi-domain support
   in the modules (dafault off) */
#modparam("alias_db|auth_db|usrloc|uri_db", "use_domain", 1)


# ----- presence params -----
/* uncomment the following lines if you want to enable presence */
#p#modparam("presence|presence_xml", "db_url",
#p#	"mysql://openser:openserrw <at> localhost/openser")
#p#modparam("presence_xml", "force_active", 1)
#p#modparam("presence", "server_address", "sip:192.168.1.2:5060")

# -- nathelper
modparam("nathelper", "rtpproxy_sock", "udp:127.0.0.1:7722")
modparam("nathelper", "natping_interval", 30)
modparam("nathelper", "ping_nated_only", 1)
modparam("nathelper", "sipping_bflag", 7)
modparam("nathelper", "sipping_from", "sip:pinger <at> kamailio.org")
modparam("registrar|nathelper", "received_avp", "$avp(i:80)")
modparam("usrloc", "nat_bflag", 6)

####### Routing Logic ########


# main request routing logic

route{

	if (!mf_process_maxfwd_header("10")) {
		sl_send_reply("483","Too Many Hops");
		exit;
	}

	# NAT detection
	route(4);

	if (has_totag()) {
		# sequential request withing a dialog should
		# take the path determined by record-routing
		if (loose_route()) {
			if (is_method("BYE")) {
				setflag(1); # do accounting ...
				setflag(3); # ... even if the transaction fails
			}
			route(1);
		} else {
			if (is_method("SUBSCRIBE") && uri == myself) {
				# in-dialog subscribe requests
				route(2);
				exit;
			}
			if ( is_method("ACK") ) {
				if ( t_check_trans() ) {
					# non loose-route, but stateful ACK; must be an ACK after a 487 or e.g. 404 from upstream server
					t_relay();
					exit;
				} else {
					# ACK without matching transaction ... ignore and discard.\n");
					exit;
				}
			}
			sl_send_reply("404","Not here");
		}
		exit;
	}

	#initial requests

	# CANCEL processing
	if (is_method("CANCEL"))
	{
		if (t_check_trans())
			t_relay();
		exit;
	}

	t_check_trans();

	# authentication
	route(3);

	# record routing
	if (!is_method("REGISTER|MESSAGE"))
		record_route();

	# account only INVITEs
	if ($fU==":"&&is_method("INVITE")) {
#	if(is_method("INVITE")) {
		setflag(1); # do accounting
	record_route();
	rewritehost("192.168.10.2");
	t_relay();

	}
	if (!uri==myself)
	/* replace with following line if multi-domain support is used */
	##if (!is_uri_host_local())
	{
		append_hf("P-hint: outbound\r\n"); 
		# if you have some interdomain connections via TLS
		##if($rd=="tls_domain1.net") {
		##	t_relay("tls:domain1.net");
		##	exit;
		##} else if($rd=="tls_domain2.net") {
		##	t_relay("tls:domain2.net");
		##	exit;
		##}
		route(1);
	}

	# requests for my domain

	if( is_method("PUBLISH|SUBSCRIBE"))
		route(2);

	if (is_method("REGISTER"))
	{
		if (isflagset(5)) {
#n#			setbflag(6);
#n#			setbflag(7);
		}
		if (!save("location"))
			sl_reply_error();

		exit;
	}

	
	if ($rU==NULL) {
		# request with no Username in RURI
		sl_send_reply("484","Address Incomplete");
		exit;
	}

	# apply DB based aliases (uncomment to enable)
	alias_db_lookup("dbaliases");

	if (!lookup("location")) {
		switch ($retcode) {
			case -1:
			case -3:
				t_newtran();
				t_reply("404", "Not Found");
				exit;
			case -2:
				sl_send_reply("405", "Method Not Allowed");
				exit;
		}
	}

	# when routing via usrloc, log the missed calls also
	setflag(2);

	route(1);
}


route[1] {
	if (check_route_param("nat=yes")) {
		setbflag(6);
	}
if (isflagset(5) || isbflagset(6)) {
		route(5);
	}

	/* example how to enable some additional event routes */
	if (is_method("INVITE")) {
#		t_on_branch("1");
		t_on_reply("1");
		t_on_failure("1");
	}

	if (!t_relay()) {
		sl_reply_error();
	}
	exit;
}


# Presence route
/* uncomment the whole following route for enabling presence server */
route[2]
{
#p#	if (!t_newtran())
#p#	{
#p#		sl_reply_error();
#p#		exit;
#p#	};
#p#
#p#	if(is_method("PUBLISH"))
#p#	{
#p#		handle_publish();
#p#		t_release();
#p#	}
#p#	else
#p#	if( is_method("SUBSCRIBE"))
#p#	{
#p#		handle_subscribe();
#p#		t_release();
#p#	}
#p#	exit;
	
	# if presence enabled, this part will not be executed
	if (is_method("PUBLISH") || $rU==null)
	{
		sl_send_reply("404", "Not here");
		exit;
	}
	return;
}

# Authentication route
/* uncomment the whole following route for enabling authentication */
route[3] {
#	if (is_method("REGISTER"))
#	{
		# authenticate the REGISTER requests (uncomment to enable auth)
#		if (!www_authorize("", "subscriber"))
#		{
#			www_challenge("", "0");
#			exit;
#		}
#a#
#		if ($au!=$tU) 
#		{
#			sl_send_reply("403","Forbidden auth ID");
#			exit;
#		}
#	} else {
#a#		# authenticate if from local subscriber (uncomment to enable auth)
#		if (from_uri==myself)
#		{
#			if (!proxy_authorize("", "subscriber")) {
#				proxy_challenge("", "0");
#				exit;
#		}
#			if (is_method("PUBLISH"))
#			{
#				if ($au!=$tU) {
#					sl_send_reply("403","Forbidden auth ID");
#					exit;
#				}
#			} else {
#				if ($au!=$fU) {
#				sl_send_reply("403","Forbidden auth ID");
#					exit;
#				}
#			}
#a#
#			consume_credentials();
#a#			# caller authenticated
#		}
#	}
	return;
}

# Caller NAT detection route
/* uncomment the whole following route for enabling Caller NAT Detection */
route[4]{
	force_rport();
	if (nat_uac_test("19")) {
		if (method=="REGISTER")&&($fU==":.") {
#		if (method=="REGISTER") {
			fix_nated_register();
		} else {
			fix_nated_contact();
		}
		setflag(5);
	}
	return;
}

# RTPProxy control
/* uncomment the whole following route for enabling RTPProxy Control */
route[5] {
#	if (is_method("BYE")&&$fU==":.") {
	if (is_method("BYE")) {
		unforce_rtp_proxy();
	} else if (is_method("INVITE")){
		force_rtp_proxy();
	}
	  else if (is_method("INVITE")&&$fU==":."){
		force_rtp_proxy();
		rewritehost("sip:192.168.10.2");
    		t_relay();

	}
	if (!has_totag()) add_rr_param(";nat=yes");
	return;
}

branch_route[1] {
	xdbg("new branch at $ru\n");
}


onreply_route[1] {
	xdbg("incoming reply\n");

	if ((isflagset(5) || isbflagset(6)) && status=~"(183)|(2[0-9][0-9])") {
		force_rtp_proxy();
	}
	if (isbflagset(6)) {
		fix_nated_contact();
	}
}


failure_route[1] {
#	if (is_method("INVITE")
#			&& (isbflagset(6) || isflagset(5))) {
#		unforce_rtp_proxy();
#	}

	if (t_was_cancelled()) {
		exit;
	}

	# uncomment the following lines if you want to block client 
	# redirect based on 3xx replies.
	##if (t_check_status("3[0-9][0-9]")) {
	##t_reply("404","Not found");
	##	exit;
	##}

	# uncomment the following lines if you want to redirect the failed 
	# calls to a different new destination
	##if (t_check_status("486|408")) {
	##	sethostport("192.168.2.100:5060");
	##	append_branch();
	##	# do not set the missed call flag again
	##	t_relay();
	##}
}

Mon	Tue	Wed	Thu	Fri	Sat	Sun

1	2	3	4	5	6	7
8	9	10	11	12	13	14
15	16	17	18	19	20	21
22	23	24	25	26	27	28

384	May 2013
425	April 2013
387	March 2013
296	February 2013
368	January 2013
278	December 2012
443	November 2012
576	October 2012
393	September 2012
410	August 2012
283	July 2012
402	June 2012
371	May 2012
365	April 2012
461	March 2012
380	February 2012
396	January 2012
329	December 2011
364	November 2011
414	October 2011
351	September 2011
355	August 2011
360	July 2011
428	June 2011
383	May 2011
351	April 2011
417	March 2011
367	February 2011
366	January 2011
335	December 2010
382	November 2010
629	October 2010
380	September 2010
271	August 2010
395	July 2010
367	June 2010
373	May 2010
452	April 2010
361	March 2010
419	February 2010
471	January 2010
341	December 2009
343	November 2009
330	October 2009
295	September 2009
299	August 2009
318	July 2009
477	June 2009
367	May 2009
413	April 2009
624	March 2009
434	February 2009
436	January 2009
370	December 2008
466	November 2008
480	October 2008
457	September 2008
658	August 2008
431	July 2008
641	June 2008
447	May 2008
489	April 2008
524	March 2008
620	February 2008
521	January 2008
417	December 2007
511	November 2007
639	October 2007
539	September 2007
574	August 2007
506	July 2007
523	June 2007
506	May 2007
533	April 2007
856	March 2007
555	February 2007
405	January 2007
480	December 2006
494	November 2006
478	October 2006
539	September 2006
476	August 2006
557	July 2006
545	June 2006
553	May 2006
490	April 2006
578	March 2006
359	February 2006
377	January 2006
428	December 2005
703	November 2005
457	October 2005
264	September 2005
350	August 2005
123	July 2005
2	December 2003

[Kamailio-Users] protocol/port mismatch on BYE from Calle to Caller

Re: [Kamailio-Users] kamailio 1.4 cpc

Re: [Kamailio-Users] kamailio 1.4 cpc

[Kamailio-Users] xlog enhancements

Re: [Kamailio-Users] xlog enhancements

Re: [Kamailio-Users] xlog enhancements

Re: [Kamailio-Users] kamailio 1.4 cpc

Re: [Kamailio-Users] kamailio 1.4 cpc

Re: [Kamailio-Users] xlog enhancements

[Kamailio-Users] project updates