Re: [OpenSIPS-Users] OpenSIPS on Amazon EC2

[Jason Bedward]

Yes as I said ngrep shows traffic but no action by opensips. Very annoying
as I have had it working on Amazon in the past.

Netstat shows opensips listening on my local host address on port 5060 UDP.

Opensips logs not showing any traffic.

I have exact same config on digital ocean and it works. But I want all
servers in the same place. As for my config it's the same that's on the
freeswitch site wiki.

Regards
On 26 Jan 2016 08:57, "Bogdan-Andrei Iancu" <bog...@opensips.org> wrote:

> Do you see the incoming traffic on the opensips machine (check with
> ngrep/tcpdump). Have you checked if OpenSIPS is listening on the right port
> (where the traffic is sent to) via "netstat -ulnp| greop opensips" ? Do you
> see any pending data on the socket ?
>
> Regards,
>
> Bogdan-Andrei Iancu
> OpenSIPS Founder and Developerhttp://www.opensips-solutions.com
>
> On 26.01.2016 10:46, Jason Bedward wrote:
>
> When traiffic comes in for example options, it does not respond or seem to
> process. There are no logs in opensips for this traffic coming through.
> On 26 Jan 2016 07:57, "Bogdan-Andrei Iancu" <bog...@opensips.org> wrote:
>
>> In this case can you elaborate on "opensips does not process traffic" ?
>> do you see waiting data on the listening sockets ?
>>
>> Regards,
>>
>> Bogdan-Andrei Iancu
>> OpenSIPS Founder and Developerhttp://www.opensips-solutions.com
>>
>> On 26.01.2016 00:32, Jason Bedward wrote:
>>
>> I have the below already set.:
>>
>> alias=42.48.159.140
>> listen=udp:eth0:5060
>> advertised_address=42.48.159.140
>>
>>
>> On Mon, Jan 25, 2016 at 1:37 PM, Jason Bedward <mase2...@gmail.com>
>> wrote:
>>
>>>  Hi
>>>
>>> I have opensips listening to all. If I type Opensips it displays local
>>> and advertised ip addresses.
>>>
>>> Not sure why it's not working as it should.
>>>
>>> Regards
>>> Hi Jason,
>>>
>>> If running in Amazon, what you have to do is:
>>> 1) set as listener into opensips the local/private IP of the machine
>>> 2) set as "advertise_address" and as "alias" the elastic IP/public you
>>> have.
>>>
>>> Regards,
>>>
>>> Bogdan-Andrei Iancu
>>> OpenSIPS Founder and Developerhttp://www.opensips-solutions.com
>>>
>>> On 23.01.2016 20:08, Jason Bedward wrote:
>>>
>>> Hi,
>>>
>>> I have previously had this working without issue. But for some reason
>>> now I can not get it to work. I have set advertised IP, and Opensips is
>>> showing that its waiting for traffic on that IP.
>>>
>>> But when traiffic comes in OpenSIPS does not process it. I have used
>>> ngrep to monitor. OpenSIPS itself seems to be working as I have a keep
>>> alive which was talking to a freeswitch server that was working.
>>>
>>> I have taken the same config and put it on Digital Ocean and it worked
>>> first time.
>>>
>>> Also I have tried version 1.71, 1.8, 2 all with same result. Anyone
>>> having success that could give advice?
>>>
>>> Thanks
>>>
>>>
>>> ___
>>> Users mailing 
>>> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>>
>>>
>>>
>>
>>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

[OpenSIPS-Users] OpenSIPS on Amazon EC2

[Jason Bedward]

Hi,

I have previously had this working without issue. But for some reason now I
can not get it to work. I have set advertised IP, and Opensips is showing
that its waiting for traffic on that IP.

But when traiffic comes in OpenSIPS does not process it. I have used ngrep
to monitor. OpenSIPS itself seems to be working as I have a keep alive
which was talking to a freeswitch server that was working.

I have taken the same config and put it on Digital Ocean and it worked
first time.

Also I have tried version 1.71, 1.8, 2 all with same result. Anyone having
success that could give advice?

Thanks
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

[Jason Bedward]

I see your point, in that case I'm not sure. Head over to the freeswitch
irc they should be able to clear that up. I would say its probably
technically possible but not sure why you would want that anyway?

On Tue, Jan 19, 2016 at 9:18 PM, Tim King <t...@triton.net> wrote:

> It is working now and I am doing things the same way you described. The
> part I was expecting that I don't see was that I was going to say hey
> freeswitch for this proxy check the stuff received in X-AUTH-IP against
> this specific ACL. It appears that it just checks all of the ACL's
>
>
> On 1/19/2016 4:13 PM, Jason Bedward wrote:
>
> Sorry I'm confused is it working now?
>
> The way I have things is opensips ip is the proxy. When freeswitch see it
> its like hey, I know you, I need to look out for the other ip you have
> X-Auth and process that. Freeswitch then looks up the X-Auth ip as it that
> was the IP that initiated the session
>
> On Tue, Jan 19, 2016 at 9:10 PM, Tim King <t...@triton.net> wrote:
>
>>
>> This is the intended behavior I was requesting. The purpose of the ACL
>> setup is to only allow calls through that are in the list of IP's set to
>> allow. The same way you would with Freeswitch without a proxy. The
>> relationship I was looking for that apparently does not exist is where you
>> tell freeswitch which list to use for the proxy-acl. Apparently there is no
>> relationship between them it just searches all the lists to see if ti finds
>> a match? I'm not really sure all I know is at this point if I put the IP's
>> of the addresses I wish to allow in the last list in my acl.conf which
>> happens to be names opensips the calls are allowed. If I take the IP out
>> they are rejected... Thank you very much for your help.
>>
>>
>>
>> ___
>> Users mailing list
>> Users@lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

[Jason Bedward]

Also edit the "apply-proxy-acl" IP you are missing the /32

On Wed, Jan 13, 2016 at 6:14 PM, Tim King  wrote:

> Thank You. do you have an example as to how to have the Freeswitch ACL
> work with he via headers you discussed? I have followed many guides for
> setting up OpenSIPs as a load balancer for Freeswitch, but none of them
> addressed making the Freeswitch ACL functional.
>
>
> On 1/13/2016 12:49 PM, Stefano Pisani wrote:
>
> to be precise:
>
> append_hf("X-Auth-IP: $i\r\n");
>
> according to documentation
>
> Il 13/01/2016 18.43, Tim King ha scritto:
>
> I have read countless articles now talking about using x-auth-ip as a
> method for using OpenSIPs as a load balancer serving to a cluster of
> Freeswtich servers and having a method to maintain the original IP address.
>
> Direct from the Freeswitch wiki it states:
>
> apply-proxy-acl
>
> Use the IP specified in X-AUTH-IP header sent from proxy for
> apply-inbound-acl Note: You'll need to configure your proxy to add this
> header
>
>
> However I am not able to find any example of how to make OpenSIPs add this
> header. Can anyone provide me some guidance as to how to accomplish this?
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

[Jason Bedward]

Sorry I'm confused is it working now?

The way I have things is opensips ip is the proxy. When freeswitch see it
its like hey, I know you, I need to look out for the other ip you have
X-Auth and process that. Freeswitch then looks up the X-Auth ip as it that
was the IP that initiated the session

On Tue, Jan 19, 2016 at 9:10 PM, Tim King  wrote:

>
> This is the intended behavior I was requesting. The purpose of the ACL
> setup is to only allow calls through that are in the list of IP's set to
> allow. The same way you would with Freeswitch without a proxy. The
> relationship I was looking for that apparently does not exist is where you
> tell freeswitch which list to use for the proxy-acl. Apparently there is no
> relationship between them it just searches all the lists to see if ti finds
> a match? I'm not really sure all I know is at this point if I put the IP's
> of the addresses I wish to allow in the last list in my acl.conf which
> happens to be names opensips the calls are allowed. If I take the IP out
> they are rejected... Thank you very much for your help.
>
>
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

[Jason Bedward]

Look and think, you are saying acl = test. But in test you deny everything
aside from you sip phone!...lol

On Tue, Jan 19, 2016 at 8:47 PM, Tim King <t...@triton.net> wrote:

> I have a name in there do I need to change that to 20.172.0.46/32 ? If
> yes do I need my list to be named for that IP? Sorry for all the questions,
> I just have not found a working documented example and it seems like it is
> very close now.
>
> 
> 
> 
> 
> 
>
>
>
>
> On 1/19/2016 3:42 PM, Jason Bedward wrote:
>
> Also edit the "apply-proxy-acl" IP you are missing the /32
>
> On Wed, Jan 13, 2016 at 6:14 PM, Tim King <t...@triton.net> wrote:
>
>> Thank You. do you have an example as to how to have the Freeswitch ACL
>> work with he via headers you discussed? I have followed many guides for
>> setting up OpenSIPs as a load balancer for Freeswitch, but none of them
>> addressed making the Freeswitch ACL functional.
>>
>>
>> On 1/13/2016 12:49 PM, Stefano Pisani wrote:
>>
>> to be precise:
>>
>> append_hf("X-Auth-IP: $i\r\n");
>>
>> according to documentation
>>
>> Il 13/01/2016 18.43, Tim King ha scritto:
>>
>> I have read countless articles now talking about using x-auth-ip as a
>> method for using OpenSIPs as a load balancer serving to a cluster of
>> Freeswtich servers and having a method to maintain the original IP address.
>>
>> Direct from the Freeswitch wiki it states:
>>
>> apply-proxy-acl
>>
>> Use the IP specified in X-AUTH-IP header sent from proxy for
>> apply-inbound-acl Note: You'll need to configure your proxy to add this
>> header
>>
>>
>> However I am not able to find any example of how to make OpenSIPs add
>> this header. Can anyone provide me some guidance as to how to accomplish
>> this?
>>
>>
>> ___
>> Users mailing 
>> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>>
>>
>> ___
>> Users mailing 
>> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>>
>> ___
>> Users mailing list
>> Users@lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

[Jason Bedward]

change to IP as I originally said about 2 hours ago :)

On Tue, Jan 19, 2016 at 8:47 PM, Tim King <t...@triton.net> wrote:

> I have a name in there do I need to change that to 20.172.0.46/32 ? If
> yes do I need my list to be named for that IP? Sorry for all the questions,
> I just have not found a working documented example and it seems like it is
> very close now.
>
> 
> 
> 
> 
> 
>
>
>
>
> On 1/19/2016 3:42 PM, Jason Bedward wrote:
>
> Also edit the "apply-proxy-acl" IP you are missing the /32
>
> On Wed, Jan 13, 2016 at 6:14 PM, Tim King <t...@triton.net> wrote:
>
>> Thank You. do you have an example as to how to have the Freeswitch ACL
>> work with he via headers you discussed? I have followed many guides for
>> setting up OpenSIPs as a load balancer for Freeswitch, but none of them
>> addressed making the Freeswitch ACL functional.
>>
>>
>> On 1/13/2016 12:49 PM, Stefano Pisani wrote:
>>
>> to be precise:
>>
>> append_hf("X-Auth-IP: $i\r\n");
>>
>> according to documentation
>>
>> Il 13/01/2016 18.43, Tim King ha scritto:
>>
>> I have read countless articles now talking about using x-auth-ip as a
>> method for using OpenSIPs as a load balancer serving to a cluster of
>> Freeswtich servers and having a method to maintain the original IP address.
>>
>> Direct from the Freeswitch wiki it states:
>>
>> apply-proxy-acl
>>
>> Use the IP specified in X-AUTH-IP header sent from proxy for
>> apply-inbound-acl Note: You'll need to configure your proxy to add this
>> header
>>
>>
>> However I am not able to find any example of how to make OpenSIPs add
>> this header. Can anyone provide me some guidance as to how to accomplish
>> this?
>>
>>
>> ___
>> Users mailing 
>> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>>
>>
>> ___
>> Users mailing 
>> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>>
>> ___
>> Users mailing list
>> Users@lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>>
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] X-Auth-IP How?

[Jason Bedward]

Astpp comes with and opensips config file which add X-auth automatically...
On 13 Jan 2016 18:13, "Tim King"  wrote:

> Thank You. do you have an example as to how to have the Freeswitch ACL
> work with he via headers you discussed? I have followed many guides for
> setting up OpenSIPs as a load balancer for Freeswitch, but none of them
> addressed making the Freeswitch ACL functional.
>
> On 1/13/2016 12:49 PM, Stefano Pisani wrote:
>
> to be precise:
>
> append_hf("X-Auth-IP: $i\r\n");
>
> according to documentation
>
> Il 13/01/2016 18.43, Tim King ha scritto:
>
> I have read countless articles now talking about using x-auth-ip as a
> method for using OpenSIPs as a load balancer serving to a cluster of
> Freeswtich servers and having a method to maintain the original IP address.
>
> Direct from the Freeswitch wiki it states:
>
> apply-proxy-acl
>
> Use the IP specified in X-AUTH-IP header sent from proxy for
> apply-inbound-acl Note: You'll need to configure your proxy to add this
> header
>
>
> However I am not able to find any example of how to make OpenSIPs add this
> header. Can anyone provide me some guidance as to how to accomplish this?
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users