[Spce-user] reject call from pstn if callee is not local

Francisco Franco Gallego francisco.franco at ethcero.es
Thu Apr 11 07:21:34 EDT 2013


After upgrade, problems increases. Now, calls to local subscriber return
404 if comes from pstn with ip-based URI.

968407243 at AAA.AAA.AAA.AAA is registered in spce but with domain-based URI
like 968407243 at mydomain.com

How can i do a roll back?

Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: New
request - M=INVITE
R=sip:968407243 at AAA.AAA.AAA.AAAF=sip:637510038 at BBB.BBB.BBB.BBBT=sip:968407243 at CCC.CCC.CCC.CCCIP=CCC.CCC.CCC.CCC:5060
(
127.0.0.1:5060) ID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Call from
PSTN - R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Load peer
preferences for peer host '5' -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Load
dialplan IDs for peer host '5' -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Fetched
dialplan IDs caller_in='5', callee_in='6' -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Use
'P-NGCP-Src-Ip' for CDR IP -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Dialog
set mark total -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Dialog
set mark peer to '5' -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: IP
authorization for caller not provisioned, allow call -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>:
User-Provided CLI '637510038' taken from From-User -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>:
Network-Provided CLI '637510038' taken from From-User -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Applying
caller-in peer rewrite rules on user-provided CLI using dpid '5' -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: No
matching rewrite rules for '637510038' found -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Applying
caller-in peer rewrite rules on network-provided CLI using dpid '5' -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: No
matching rewrite rules for '637510038' found -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Setting
'637510038 at BBB.BBB.BBB.BBB' as initiating user-provided CLI -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Setting
'637510038 at BBB.BBB.BBB.BBB' as initiating network-provided CLI -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Searching
for callee - R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Skipping
internal services for unauthenticated call -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Clear
callee preferences -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Callee is
not local - R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Check
Administrative NCOS level -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Check
User NCOS level -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Checking
URI '968407243 at AAA.AAA.AAA.AAA' and CLI '968407243' against block out lists
- R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Admin
caller block mode is 'open' -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Caller
block mode is 'open' -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Call to
unknown user - R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>:
Accounting failed request for uuid '0' -
R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Setting
acc source-leg for uuid '0':
'0|637510038|CCC.CCC.CCC.CCC|637510038|||<null>|||0|call|CCC.CCC.CCC.CCC|1365676907.107262'
- R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2844]: INFO: <script>: Setting
acc destination-leg for uuid '0':
'0|||<null>|968407243|0|968407243|AAA.AAA.AAA.AAA|968407243|AAA.AAA.AAA.AAA'
- R=sip:968407243 at AAA.AAA.AAA.AAAID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2845]: INFO: <script>: New
request - M=ACK
R=sip:968407243 at AAA.AAA.AAA.AAAF=sip:637510038 at BBB.BBB.BBB.BBBT=sip:968407243 at CCC.CCC.CCC.CCCIP=CCC.CCC.CCC.CCC:5060
(
127.0.0.1:5060) ID=135A0533-CEB911D3-BFEDD966-EF97746C at BBB.BBB.BBB.BBB
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: New
request - M=INVITE R=sip:968407243 at AAA.AAA.AAA.AAA F=
sip:637510038 at 212.230.5.228;noa=national
T=sip:968407243 at CCC.CCC.CCC.CCC;noa=national
IP=CCC.CCC.CCC.CCC:5060 (127.0.0.1:5060) ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Call from
PSTN - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Load peer
preferences for peer host '5' - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Load
dialplan IDs for peer host '5' - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Fetched
dialplan IDs caller_in='5', callee_in='6' - R=sip:968407243 at AAA.AAA.AAA.AAAID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Use
'P-NGCP-Src-Ip' for CDR IP - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Dialog
set mark total - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Dialog
set mark peer to '5' - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: IP
authorization for caller not provisioned, allow call -
R=sip:968407243 at AAA.AAA.AAA.AAA ID=5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>:
User-Provided CLI '637510038' taken from From-User -
R=sip:968407243 at AAA.AAA.AAA.AAA ID=5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>:
Network-Provided CLI '637510038' taken from From-User -
R=sip:968407243 at AAA.AAA.AAA.AAA ID=5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Applying
caller-in peer rewrite rules on user-provided CLI using dpid '5' -
R=sip:968407243 at AAA.AAA.AAA.AAA ID=5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: No
matching rewrite rules for '637510038' found -
R=sip:968407243 at AAA.AAA.AAA.AAA ID=5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Applying
caller-in peer rewrite rules on network-provided CLI using dpid '5' -
R=sip:968407243 at AAA.AAA.AAA.AAA ID=5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: No
matching rewrite rules for '637510038' found -
R=sip:968407243 at AAA.AAA.AAA.AAA ID=5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Setting '
637510038 at 212.230.5.228' as initiating user-provided CLI -
R=sip:968407243 at AAA.AAA.AAA.AAA ID=5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Setting '
637510038 at 212.230.5.228' as initiating network-provided CLI -
R=sip:968407243 at AAA.AAA.AAA.AAA ID=5166936b00000b1c00000013724c76af at ens.com
*Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>:
Searching for callee - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com*
*Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Skipping
internal services for unauthenticated call - R=sip:968407243 at AAA.AAA.AAA.AAAID=
5166936b00000b1c00000013724c76af at ens.com*
*Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Clear
callee preferences - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com*
*Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Callee
is not local - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com*
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Check
Administrative NCOS level - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Check
User NCOS level - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Checking
URI '968407243 at AAA.AAA.AAA.AAA' and CLI '968407243' against block out lists
- R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Admin
caller block mode is 'open' - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Caller
block mode is 'open' - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Call to
unknown user - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>:
Accounting failed request for uuid '0' - R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Setting
acc source-leg for uuid '0':
'0|637510038|CCC.CCC.CCC.CCC|637510038|||<null>|||0|call|CCC.CCC.CCC.CCC|1365676907.378488'
- R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2846]: INFO: <script>: Setting
acc destination-leg for uuid '0':
'0|||<null>|968407243|0|968407243|AAA.AAA.AAA.AAA|968407243|AAA.AAA.AAA.AAA'
- R=sip:968407243 at AAA.AAA.AAA.AAA ID=
5166936b00000b1c00000013724c76af at ens.com
Apr 11 12:41:47 SIPWISE /usr/sbin/kamailio[2847]: INFO: <script>: New
request - M=ACK R=sip:968407243 at AAA.AAA.AAA.AAA F=
sip:637510038 at 212.230.5.228;noa=national
T=sip:968407243 at CCC.CCC.CCC.CCC;noa=national
IP=CCC.CCC.CCC.CCC:5060 (127.0.0.1:5060) ID=
5166936b00000b1c00000013724c76af at ens.com
^C
root at SIPWISE:/etc/ngcp-config/templates/etc#



2013/4/11 Andrew Pogrebennyk <apogrebennyk at sipwise.com>

> On 04/09/2013 07:28 PM, Jon Bonilla (Manwe) wrote:
> > El Tue, 9 Apr 2013 19:24:52 +0200
> > Francisco Franco Gallego <francisco.franco at ethcero.es> escribió:
> >
> >> But if i delete ip-domain, the call is going  out by route that i have
> >> configured. I think that this can be exploited.
> >>
> >
> > Yes, it will be fixed. Calls without the ip in the domain list will be
> rejected
> > or at least won't be sent outside. This change was introduced in 2.8.
> We're
> > looking for the best solution to this.
>
> the templates update has been released, while the notification email is
> under way please follow the usual upgrade instructions. Thanks for the
> report.
>
>
> _______________________________________________
> Spce-user mailing list
> Spce-user at lists.sipwise.com
> http://lists.sipwise.com/listinfo/spce-user
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20130411/e6606ab6/attachment-0001.html>


More information about the Spce-user mailing list