Re: siproxd not reacting on incoming connections
bloodcarter <[email protected]> Wed, 5 Sep 2018 18:44:10 +0700
| Newsgroups | gmane.network.siproxd |
|---|---|
| Message-ID | <CALxA4cnTB5YG7t0zGkfULMJqSOMtqVTA7of7Y7u=LHXx2CRMoQ@mail.gmail.com> |
--===============0628456836005853702== Content-Type: multipart/alternative; boundary="0000000000007f2a5e05751e4bb5" --0000000000007f2a5e05751e4bb5 Content-Type: text/plain; charset="UTF-8" OK, now I am recieving this. I want my 192.168.31.98 machine connect to 35.184.99.143 siproxd, and the remote SIP server 195.19.70.1 thought that my machine IP is 35.184.99.143 11:42:01 register.c:237 sip_register:11:42:01 register.c:323 register: [email protected] expires=300 seconds11:42:01 register.c:348 found entry for [email protected] <-> [email protected] at slot=0, exp=32611:42:01 utils.c:361 fetching outbound IP by HOSTNAME11:42:01 register.c:448 masquerading UA [email protected] local 1305-F4pM+reJByGkQiDmCM/[email protected]:42:01 proxy.c:86 proxy_request11:42:01 utils.c:394 fetching interface IP by INTERFACE [1]11:42:01 utils.c:472 ifaddr lookup - from cache: ens4 -> 10.128.0.5 UP11:42:01 utils.c:361 fetching outbound IP by HOSTNAME11:42:01 route_processing.c:135 route_preprocess: checking topmost Route header11:42:01 route_processing.c:150 removed Route header pointing to myself11:42:01 sip_utils.c:1026 sip_find_direction: beginning search11:42:01 sip_utils.c:1069 sip_find_direction: no OUTGOING found11:42:01 sip_utils.c:326 compare_url: IP mismatch11:42:01 sip_utils.c:1114 sip_find_direction: no INCOMING (To:) found11:42:01 sip_utils.c:326 compare_url: IP mismatch11:42:01 sip_utils.c:1136 sip_find_direction: no INCOMING RQ (SIP URI) found11:42:01 sip_utils.c:1209 sip_find_direction: no INCOMING RS (via header) found11:42:01 utils.c:394 fetching interface IP by INTERFACE [1]11:42:01 utils.c:472 ifaddr lookup - from cache: ens4 -> 10.128.0.5 UP11:42:01 utils.c:361 fetching outbound IP by HOSTNAME11:42:01 sip_utils.c:1237 sip_find_direction: no INCOMING (redirected) found11:42:01 sip_utils.c:1243 sip_find_direction: unable to determine direction of SIP packet11:42:01 proxy.c:239 request [REGISTER] from/to unregistered UA (RQ: [email protected] -> *NULL*@195.19.70.1) --Vladislav Chernyshov On Wed, Sep 5, 2018 at 12:12 AM Thomas Ries <[email protected]> wrote: > Hi, > > 1) setting hosts_allow_reg = 0.0.0.0/0 is a bad idea, > you don't want all the internet be able to register with your siproxd. > hosts_allow_reg should be restricted to your local network. > Remember, siproxd does proxy between public Internet and local networks > that > are connected to the Internet via NAT. > > 2) if using the same interface for if_inbound and if_outbound you must tell > siproxd what its public IP is. Either by setting host_outbound or using the > STUN plugin. > > 3) Enabling debug output will give more information about what is > happening. > > Regards, > /Thomas > > On 09/04/2018 01:36 PM, bloodcarter wrote: > > iptables is configured properly, because when I set hosts_allow_reg for > some > > fake subnet and try to connect using my sip client, siproxd warns about > > non-authorised attempt. And that's correct. But when I change > hosts_allow_reg > > = 0.0.0.0/0 <http://0.0.0.0/0> to allow registrations from any IP, then > just > > nothing happens, no logs, nothing. > > > > My siproxd.conf is below: > > if_inbound = eth0 > > if_outbound = eth0 > > hosts_allow_reg = 0.0.0.0/0 <http://0.0.0.0/0> > > sip_listen_port = 5060 > > daemonize = 0 > > silence_log = 0 > > log_calls = 1 > > user = siproxd > > registration_file = /var/lib/siproxd_registrations > > pid_file = /var/run/siproxd/siproxd.pid > > rtp_proxy_enable = 1 > > rtp_port_low = 10000 > > rtp_port_high = 30000 > > rtp_timeout = 300 > > default_expires = 600 > > debug_level = 0 > > debug_port = 0 > > > > --Vladislav Chernyshov > > > > > > > ------------------------------------------------------------------------------ > > Check out the vibrant tech community on one of the world's most > > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > > > > > > > > _______________________________________________ > > Siproxd-users mailing list > > [email protected] > > https://lists.sourceforge.net/lists/listinfo/siproxd-users > > > > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______________________________________________ > Siproxd-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/siproxd-users > --0000000000007f2a5e05751e4bb5 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div>OK, now I am recieving this. I want my 192.168.31.98 = machine connect to 35.184.99.143 siproxd, and the remote SIP server 195.19.= 70.1 thought that my machine IP is 35.184.99.143</div><div><br></div><div><= br></div><div><span style=3D"display:block;color:rgb(255,255,255);font-fami= ly:"courier new",monospace;font-size:13px;font-variant-ligatures:= none;white-space:pre;background-color:rgb(34,34,34)">11:42:01 register.c:23= 7 sip_register:</span><span style=3D"display:block;color:rgb(255,255,255);f= ont-family:"courier new",monospace;font-size:13px;font-variant-li= gatures:none;white-space:pre;background-color:rgb(34,34,34)">11:42:01 regis= ter.c:323 register: <a href=3D"mailto:[email protected]">[email protected]= 8</a> expires=3D300 seconds</span><span style=3D"display:block;color:rgb(25= 5,255,255);font-family:"courier new",monospace;font-size:13px;fon= t-variant-ligatures:none;white-space:pre;background-color:rgb(34,34,34)">11= :42:01 register.c:348 found entry for <a href=3D"mailto:[email protected]"= >[email protected]</a> <-> <a href=3D"mailto:[email protected]">1305@= 195.19.70.1</a> at slot=3D0, exp=3D326</span><span style=3D"display:block;c= olor:rgb(255,255,255);font-family:"courier new",monospace;font-si= ze:13px;font-variant-ligatures:none;white-space:pre;background-color:rgb(34= ,34,34)">11:42:01 utils.c:361 fetching outbound IP by HOSTNAME</span><span = style=3D"display:block;color:rgb(255,255,255);font-family:"courier new= ",monospace;font-size:13px;font-variant-ligatures:none;white-space:pre= ;background-color:rgb(34,34,34)">11:42:01 register.c:448 masquerading UA <a= href=3D"mailto:[email protected]">[email protected]</a> local <a href=3D= "mailto:[email protected]">[email protected]</a></span><span style=3D"dis= play:block;color:rgb(255,255,255);font-family:"courier new",monos= pace;font-size:13px;font-variant-ligatures:none;white-space:pre;background-= color:rgb(34,34,34)">11:42:01 proxy.c:86 proxy_request</span><span style=3D= "display:block;color:rgb(255,255,255);font-family:"courier new",m= onospace;font-size:13px;font-variant-ligatures:none;white-space:pre;backgro= und-color:rgb(34,34,34)">11:42:01 utils.c:394 fetching interface IP by INTE= RFACE [1]</span><span style=3D"display:block;color:rgb(255,255,255);font-fa= mily:"courier new",monospace;font-size:13px;font-variant-ligature= s:none;white-space:pre;background-color:rgb(34,34,34)">11:42:01 utils.c:472= ifaddr lookup - from cache: ens4 -> 10.128.0.5 UP</span><span style=3D"= display:block;color:rgb(255,255,255);font-family:"courier new",mo= nospace;font-size:13px;font-variant-ligatures:none;white-space:pre;backgrou= nd-color:rgb(34,34,34)">11:42:01 utils.c:361 fetching outbound IP by HOSTNA= ME</span><span style=3D"display:block;color:rgb(255,255,255);font-family:&q= uot;courier new",monospace;font-size:13px;font-variant-ligatures:none;= white-space:pre;background-color:rgb(34,34,34)">11:42:01 route_processing.c= :135 route_preprocess: checking topmost Route header</span><span style=3D"d= isplay:block;color:rgb(255,255,255);font-family:"courier new",mon= ospace;font-size:13px;font-variant-ligatures:none;white-space:pre;backgroun= d-color:rgb(34,34,34)">11:42:01 route_processing.c:150 removed Route header= pointing to myself</span><span style=3D"display:block;color:rgb(255,255,25= 5);font-family:"courier new",monospace;font-size:13px;font-varian= t-ligatures:none;white-space:pre;background-color:rgb(34,34,34)">11:42:01 s= ip_utils.c:1026 sip_find_direction: beginning search</span><span style=3D"d= isplay:block;color:rgb(255,255,255);font-family:"courier new",mon= ospace;font-size:13px;font-variant-ligatures:none;white-space:pre;backgroun= d-color:rgb(34,34,34)">11:42:01 sip_utils.c:1069 sip_find_direction: no OUT= GOING found</span><span style=3D"display:block;color:rgb(255,255,255);font-= family:"courier new",monospace;font-size:13px;font-variant-ligatu= res:none;white-space:pre;background-color:rgb(34,34,34)">11:42:01 sip_utils= .c:326 compare_url: IP mismatch</span><span style=3D"display:block;color:rg= b(255,255,255);font-family:"courier new",monospace;font-size:13px= ;font-variant-ligatures:none;white-space:pre;background-color:rgb(34,34,34)= ">11:42:01 sip_utils.c:1114 sip_find_direction: no INCOMING (To:) found</sp= an><span style=3D"display:block;color:rgb(255,255,255);font-family:"co= urier new",monospace;font-size:13px;font-variant-ligatures:none;white-= space:pre;background-color:rgb(34,34,34)">11:42:01 sip_utils.c:326 compare_= url: IP mismatch</span><span style=3D"display:block;color:rgb(255,255,255);= font-family:"courier new",monospace;font-size:13px;font-variant-l= igatures:none;white-space:pre;background-color:rgb(34,34,34)">11:42:01 sip_= utils.c:1136 sip_find_direction: no INCOMING RQ (SIP URI) found</span><span= style=3D"display:block;color:rgb(255,255,255);font-family:"courier ne= w",monospace;font-size:13px;font-variant-ligatures:none;white-space:pr= e;background-color:rgb(34,34,34)">11:42:01 sip_utils.c:1209 sip_find_direct= ion: no INCOMING RS (via header) found</span><span style=3D"display:block;c= olor:rgb(255,255,255);font-family:"courier new",monospace;font-si= ze:13px;font-variant-ligatures:none;white-space:pre;background-color:rgb(34= ,34,34)">11:42:01 utils.c:394 fetching interface IP by INTERFACE [1]</span>= <span style=3D"display:block;color:rgb(255,255,255);font-family:"couri= er new",monospace;font-size:13px;font-variant-ligatures:none;white-spa= ce:pre;background-color:rgb(34,34,34)">11:42:01 utils.c:472 ifaddr lookup -= from cache: ens4 -> 10.128.0.5 UP</span><span style=3D"display:block;co= lor:rgb(255,255,255);font-family:"courier new",monospace;font-siz= e:13px;font-variant-ligatures:none;white-space:pre;background-color:rgb(34,= 34,34)">11:42:01 utils.c:361 fetching outbound IP by HOSTNAME</span><span s= tyle=3D"display:block;color:rgb(255,255,255);font-family:"courier new&= quot;,monospace;font-size:13px;font-variant-ligatures:none;white-space:pre;= background-color:rgb(34,34,34)">11:42:01 sip_utils.c:1237 sip_find_directio= n: no INCOMING (redirected) found</span><span style=3D"display:block;color:= rgb(255,255,255);font-family:"courier new",monospace;font-size:13= px;font-variant-ligatures:none;white-space:pre;background-color:rgb(34,34,3= 4)">11:42:01 sip_utils.c:1243 sip_find_direction: unable to determine direc= tion of SIP packet</span><span style=3D"display:block;color:rgb(255,255,255= );font-family:"courier new",monospace;font-size:13px;font-variant= -ligatures:none;white-space:pre;background-color:rgb(34,34,34)">11:42:01 pr= oxy.c:239 request [REGISTER] from/to unregistered UA (RQ: <a href=3D"mailto= :[email protected]">[email protected]</a> -> *NULL*@<a href=3D"http://195.= 19.70.1">195.19.70.1</a>)</span></div><div><br></div><div><br></div><br cle= ar=3D"all"><div><div dir=3D"ltr" class=3D"gmail_signature" data-smartmail= =3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div>--Vladisla= v Chernyshov</div><div><br></div></div></div></div></div></div></div><br><d= iv class=3D"gmail_quote"><div dir=3D"ltr">On Wed, Sep 5, 2018 at 12:12 AM T= homas Ries <<a href=3D"mailto:[email protected]">[email protected]</a>> wrote= :<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bor= der-left:1px #ccc solid;padding-left:1ex">Hi,<br> <br> 1) setting hosts_allow_reg =3D <a href=3D"http://0.0.0.0/0" rel=3D"noreferr= er" target=3D"_blank">0.0.0.0/0</a>=C2=A0 is a bad idea,<br> you don't want all the internet be able to register with your siproxd.<= br> hosts_allow_reg should be restricted to your local network.<br> Remember, siproxd does proxy between public Internet and local networks tha= t<br> are connected to the Internet via NAT.<br> <br> 2) if using the same interface for if_inbound and if_outbound you must tell= <br> siproxd what its public IP is. Either by setting host_outbound or using the= <br> STUN plugin.<br> <br> 3) Enabling debug output will give more information about what is happening= .<br> <br> Regards,<br> /Thomas<br> <br> On 09/04/2018 01:36 PM, bloodcarter wrote:<br> > iptables is configured properly, because when I set hosts_allow_reg fo= r some<br> > fake subnet and try to connect using my sip client, siproxd warns abou= t<br> > non-authorised attempt. And that's correct. But when I change host= s_allow_reg<br> > =3D <a href=3D"http://0.0.0.0/0" rel=3D"noreferrer" target=3D"_blank">= 0.0.0.0/0</a> <<a href=3D"http://0.0.0.0/0" rel=3D"noreferrer" target=3D= "_blank">http://0.0.0.0/0</a>> to allow registrations from any IP, then = just<br> > nothing happens, no logs, nothing.<br> > <br> > My siproxd.conf is below:<br> > if_inbound=C2=A0 =3D eth0<br> > if_outbound =3D eth0<br> > hosts_allow_reg =3D <a href=3D"http://0.0.0.0/0" rel=3D"noreferrer" ta= rget=3D"_blank">0.0.0.0/0</a> <<a href=3D"http://0.0.0.0/0" rel=3D"noref= errer" target=3D"_blank">http://0.0.0.0/0</a>><br> > sip_listen_port =3D 5060<br> > daemonize =3D 0<br> > silence_log =3D 0<br> > log_calls =3D 1<br> > user =3D siproxd<br> > registration_file =3D /var/lib/siproxd_registrations<br> > pid_file =3D /var/run/siproxd/siproxd.pid<br> > rtp_proxy_enable =3D 1<br> > rtp_port_low=C2=A0 =3D 10000<br> > rtp_port_high =3D 30000<br> > rtp_timeout =3D 300<br> > default_expires =3D 600<br> > debug_level =3D 0<br> > debug_port =3D 0<br> > <br> > --Vladislav Chernyshov<br> > <br> > <br> > ----------------------------------------------------------------------= --------<br> > Check out the vibrant tech community on one of the world's most<br= > > engaging tech sites, Slashdot.org! <a href=3D"http://sdm.link/slashdot= " rel=3D"noreferrer" target=3D"_blank">http://sdm.link/slashdot</a><br> > <br> > <br> > <br> > _______________________________________________<br> > Siproxd-users mailing list<br> > <a href=3D"mailto:[email protected]" target=3D"_blan= k">[email protected]</a><br> > <a href=3D"https://lists.sourceforge.net/lists/listinfo/siproxd-users"= rel=3D"noreferrer" target=3D"_blank">https://lists.sourceforge.net/lists/l= istinfo/siproxd-users</a><br> > <br> <br> ---------------------------------------------------------------------------= ---<br> Check out the vibrant tech community on one of the world's most<br> engaging tech sites, Slashdot.org! <a href=3D"http://sdm.link/slashdot" rel= =3D"noreferrer" target=3D"_blank">http://sdm.link/slashdot</a>_____________= __________________________________<br> Siproxd-users mailing list<br> <a href=3D"mailto:[email protected]" target=3D"_blank">Si= [email protected]</a><br> <a href=3D"https://lists.sourceforge.net/lists/listinfo/siproxd-users" rel= =3D"noreferrer" target=3D"_blank">https://lists.sourceforge.net/lists/listi= nfo/siproxd-users</a><br> </blockquote></div> --0000000000007f2a5e05751e4bb5-- --===============0628456836005853702== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot --===============0628456836005853702== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Siproxd-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/siproxd-users --===============0628456836005853702==--