> On Aug. 29, 2014, 11:04 p.m., Damian Ivereigh wrote: > > Thanks for all that info Matt. In answer to the question "how should > > outboundproxy behave", perhaps it might be useful to detail my setup. I > > have a number of Asterisk servers on an internal network with a kamailio > > server and a media proxy facing the internet. My goal was to harden the > > kamailio server and allow the asterisk servers to be less secure and allow > > each asterisk to define it's own peers. I want as close as possible for > > each Asterisk server to appear to the outside world as if they are > > externally connected (no NAT stuff), yet actually put everything through > > kamailio and the media proxy. > > > > So the obvious solution was to use outboundproxy to get asterisk to send > > its outgoing invites and registrations through the kamailio server which > > would mangle them so that everything appeared to come from the external > > server. However things fell apart when asterisk tried to send qualify > > requests direct (which the firewall blocked). Hence this fix. I really > > cannot see a situation where one would use an outboundproxy and then want > > to send the qualify requests directly.
Re: mem leak: https://reviewboard.asterisk.org/r/4016/ As for the "how should the outboundproxy behave". I agree that this addition makes sense. But I'd like to hear someone else who uses obproxy to chime in too before giving this the go-ahead. - wdoekes ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviewboard.asterisk.org/r/3948/#review13207 ----------------------------------------------------------- On Aug. 25, 2014, 10:04 p.m., Damian Ivereigh wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviewboard.asterisk.org/r/3948/ > ----------------------------------------------------------- > > (Updated Aug. 25, 2014, 10:04 p.m.) > > > Review request for Asterisk Developers. > > > Bugs: ASTERISK-24063 > https://issues.asterisk.org/jira/browse/ASTERISK-24063 > > > Repository: Asterisk > > > Description > ------- > > The outboundproxy setting is ignored when sending the qualify packets > (OPTIONS). This means that if an asterisk server is unable to send the packet > directly to a peer, it is unable to qualify any non inbound registered peer > (e.g. a peer SIP Trunk). This problem is found on asterisk-11.6-cert4 (and > many others) > > It has been pointed out (thanks Walter Doekes), that the p->outboundproxy may > not be freed at the end which would create a memory leak. > > > Diffs > ----- > > certified/tags/11.6-cert4/channels/chan_sip.c 422052 > > Diff: https://reviewboard.asterisk.org/r/3948/diff/ > > > Testing > ------- > > Have run this change in production for many months, however the possible > memory leak issue needs to be verified. > > > Thanks, > > Damian Ivereigh > >
-- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- asterisk-dev mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-dev