lunes, 20 de agosto de 2012

Configuracion de Kamailio 3.3 con NAT Traversal y XCAP.

En esta entrada les ofrecere un ejemplo de configuracion de kamailio 3.3 con NAT traversal y XCAP server.
Si aun no sabes como funciona una red basada en SIP o un servidor SIP como Kamailio, primero deberias leer la anterior entrada para comprender mejor el funcionamiento de Kamailio.

Para seguir este tutorial es necesario tener un servidor conectado a internet con IP publica y con SO Linux.
En kamailio.org/wiki pueden encontrar diferentes guias de instalacion para muchos SO, aunque yo les explicare aqui como instalar kamailio en Ubuntu 12.04.

Instalacion de Kamailio en Ubuntu 12.04 

  • Abrimos un terminal.
  • Importamos la llave del repositorio
wget http://deb.kamailio.org/kamailiodebkey.gpg
apt-key add kamailiodebkey.gpg

  • Editamos /etc/apt/sources.list y añadimos al final
deb http://deb.kamailio.org/kamailio precise main
deb-src http://deb.kamailio.org/kamailio precise main

  • Ejecutamos sudo apt-get update y para buscar todos los paquetes de kamailio ejecutamos sudo apt-cache search kamailio
  • En este tutorial utilizaremos kamailio y MySQL como base de datos para el registrar y el servidor XCAP. Ejecutamos sudo apt-get install kamailio kamailio-mysql-modules kamailio-tls-modules
  • Instalamos mysql-server 
sudo apt-get install mysql-server
  • Para atravesar un NAT simetrico, los mas comunes,  utilizaremos rtpproxy.
sudo apt-get install rtpproxy

  • Editamos el archivo /etc/default/rtpproxy y lo dejamos de esta forma:
# Defaults for rtpproxy

# The control socket.
CONTROL_SOCK="udp:127.0.0.1:7722"

# Additional options that are passed to the daemon.
EXTRA_OPTS="-l your_public_ip -m 35000 -M 65000 -d DBUG:LOG_LOCAL5 -F"
Con estos parametros le estamos indicando que utilizara los puertos del 35000 al 65000, y tendremos que abrir ese rango de puertos si estan bloqueados.
  • Ejecutamos el siguiente comando para iniciar el rtpproxy.
sudo /etc/init.d/rtproxy restart
Configuracion de Kamailio 3.3

  • Editamos /etc/default/kamailio:
RUN_KAMAILIO=yes

  • Editamos /etc/kamailio/kamctlrc
SIP_DOMAIN=_your_server_ip_or_hostname_ puede ser localhost
DBENGINE=MYSQL
y quitamos los comentarios a DBHOST, DBNAME, DBRWUSER y DBRWPW.


  • Creamos la base de datos que necesita Kamailio, para ello ejecutamos el siguiente script, introducimos la contraseña del root de MySQL y le respondemos "yes" a todo. Este script crea los usuarios DBRWUSER y DBROUSER en MySQL, crea la base de datos openser y todas las tablas necesarias para el funcionamiento de los diferentes modulos.
kamdbctl create

  • Creamos dos usuarios diferentes de la siguiente forma. 
kamctl add userid password
kamctl add bob bob123
kamctl add alice alice123

  • Ahora vamos a editar el archivo de configuracion de Kamailio, el verdadero "cerebro" de nuestro servidor SIP. Este archivo se ejecuta en cada peticion que hagamos al servidor. Primero vamos a hacer una copia de seguridad de nuestro arhivo de configuracion. 
sudo mv /etc/kamailio/kamailio.cfg /etc/kamailio/kamailio.cfg.save

  • Despues de hacer la copia de seguridad borramos el archivo de configuracion
sudo rm -f /etc/kamailio/kamailio.cfg

  • Editamos un nuevo archivo de configuracion, podemos hacerlo con cualquier programa de edicion de texto o en el terminal podemos utilizar nano.
sudo nano /etc/kamailio/kamailio.cfg
y copiamos lo siguiente con CTRL+ MAYUS+V si estamos en la terminal. OJO!!! Antes de copiarlo debemos asegurarnos de cambiar las lineas escritas en rojo y fijarnos en las lineas escritas en verde.


#!KAMAILIO
#!define WITH_AUTH
#!define WITH_MYSQL
#!define WITH_USRLOCDB
##!define WITH_TLS /*Deshabilitado./
##!define WITH_DEBUG /*Deshabilitado para activarlo quita un simbolo #*/
#!define WITH_NAT
#!define WITH_PRESENCE
#!define WITH_XCAPSRV
# Kamailio (OpenSER) SIP Server v3.3 - default configuration script
#     - web: http://www.kamailio.org
#     - git: http://sip-router.org
#
# Direct your questions about this file to: <sr-users@lists.sip-router.org>
#
# Refer to the Core CookBook at http://www.kamailio.org/dokuwiki/doku.php
# for an explanation of possible statements, functions and parameters.
#
# Several features can be enabled using '#!define WITH_FEATURE' directives:
#
# *** To run in debug mode: 
#     - define WITH_DEBUG
#
# *** To enable mysql: 
#     - define WITH_MYSQL
#
# *** To enable authentication execute:
#     - enable mysql
#     - define WITH_AUTH
#     - add users using 'kamctl'
#
# *** To enable IP authentication execute:
#     - enable mysql
#     - enable authentication
#     - define WITH_IPAUTH
#     - add IP addresses with group id '1' to 'address' table
#
# *** To enable persistent user location execute:
#     - enable mysql
#     - define WITH_USRLOCDB
#
# *** To enable presence server execute:
#     - enable mysql
#     - define WITH_PRESENCE
#
# *** To enable nat traversal execute:
#     - define WITH_NAT
#     - install RTPProxy: http://www.rtpproxy.org
#     - start RTPProxy:
#        rtpproxy -l _your_public_ip_ -s udp:localhost:7722
#
# *** To enable PSTN gateway routing execute:
#     - define WITH_PSTN
#     - set the value of pstn.gw_ip
#     - check route[PSTN] for regexp routing condition
#
# *** To enable database aliases lookup execute:
#     - enable mysql
#     - define WITH_ALIASDB
#
# *** To enable speed dial lookup execute:
#     - enable mysql
#     - define WITH_SPEEDDIAL
#
# *** To enable multi-domain support execute:
#     - enable mysql
#     - define WITH_MULTIDOMAIN
#
# *** To enable TLS support execute:
#     - adjust CFGDIR/tls.cfg as needed
#     - define WITH_TLS
#
# *** To enable XMLRPC support execute:
#     - define WITH_XMLRPC
#     - adjust route[XMLRPC] for access policy
#
# *** To enable anti-flood detection execute:
#     - adjust pike and htable=>ipban settings as needed (default is
#       block if more than 16 requests in 2 seconds and ban for 300 seconds)
#     - define WITH_ANTIFLOOD
#
# *** To block 3XX redirect replies execute:
#     - define WITH_BLOCK3XX
#
# *** To enable VoiceMail routing execute:
#     - define WITH_VOICEMAIL
#     - set the value of voicemail.srv_ip
#     - adjust the value of voicemail.srv_port
#
# *** To enhance accounting execute:
#     - enable mysql
#     - define WITH_ACCDB
#     - add following columns to database
#!ifdef ACCDB_COMMENT
  ALTER TABLE acc ADD COLUMN src_user VARCHAR(64) NOT NULL DEFAULT '';
  ALTER TABLE acc ADD COLUMN src_domain VARCHAR(128) NOT NULL DEFAULT '';
  ALTER TABLE acc ADD COLUMN src_ip varchar(64) NOT NULL default '';
  ALTER TABLE acc ADD COLUMN dst_ouser VARCHAR(64) NOT NULL DEFAULT '';
  ALTER TABLE acc ADD COLUMN dst_user VARCHAR(64) NOT NULL DEFAULT '';
  ALTER TABLE acc ADD COLUMN dst_domain VARCHAR(128) NOT NULL DEFAULT '';
  ALTER TABLE missed_calls ADD COLUMN src_user VARCHAR(64) NOT NULL DEFAULT '';
  ALTER TABLE missed_calls ADD COLUMN src_domain VARCHAR(128) NOT NULL DEFAULT '';
  ALTER TABLE missed_calls ADD COLUMN src_ip varchar(64) NOT NULL default '';
  ALTER TABLE missed_calls ADD COLUMN dst_ouser VARCHAR(64) NOT NULL DEFAULT '';
  ALTER TABLE missed_calls ADD COLUMN dst_user VARCHAR(64) NOT NULL DEFAULT '';
  ALTER TABLE missed_calls ADD COLUMN dst_domain VARCHAR(128) NOT NULL DEFAULT '';
#!endif

####### Defined Values #########

# *** Value defines - IDs used later in config
#!ifdef WITH_MYSQL
# - database URL - used to connect to database server by modules such
#       as: auth_db, acc, usrloc, a.s.o.
#!define DBURL "mysql://openser:openserrw@localhost/openser"
#!endif
#!ifdef WITH_MULTIDOMAIN
# - the value for 'use_domain' parameters
#!define MULTIDOMAIN 1
#!else
#!define MULTIDOMAIN 0
#!endif

# - flags
#   FLT_ - per transaction (message) flags
# FLB_ - per branch flags
#!define FLT_ACC 1
#!define FLT_ACCMISSED 2
#!define FLT_ACCFAILED 3
#!define FLT_NATS 5

#!define FLB_NATB 6
#!define FLB_NATSIPPING 7

####### Global Parameters #########

#!ifdef WITH_DEBUG
debug=3
log_stderror=yes
#!else
debug=2
log_stderror=no
#!endif

memdbg=5
memlog=5

log_facility=LOG_LOCAL0

fork=yes
children=4

/* uncomment the next line to disable TCP (default on) */
#disable_tcp=yes

/* uncomment the next line to disable the auto discovery of local aliases
   based on reverse DNS on IPs (default on) */
#auto_aliases=no

/* add local domain aliases */ s


alias="your_public_ip or your domain"

/*alias es muy importante, si vas a utilizar varios dominios agrega varias lineas alias="domain1" ... se utiliza en  if(uri==myself), remplazandose myself por alias*/
/* uncomment and configure the following line if you want Kamailio to 
   bind on a specific interface/port/proto (default bind on all available) */
/*Si estas detras de un NAT estatico tal vez necesites utilizar advertise, para atravesar ese NAT, sino tal vez no hace falta. */


listen=private_ip advertise public_ip:port

/* port to listen to
 * - can be specified more than once if needed to listen on many ports */


port=5060

#!ifdef WITH_TLS
enable_tls=yes
#!endif

# life time of TCP connection when there is no traffic
# - a bit higher than registration expires to cope with UA behind NAT
tcp_connection_lifetime=3605

####### Custom Parameters #########

# These parameters can be modified runtime via RPC interface
# - see the documentation of 'cfg_rpc' module.
#
# Format: group.id = value 'desc' description
# Access: $sel(cfg_get.group.id) or @cfg_get.group.id
#

#!ifdef WITH_PSTN
# PSTN GW Routing
#
# - pstn.gw_ip: valid IP or hostname as string value, example:
# pstn.gw_ip = "10.0.0.101" desc "My PSTN GW Address"
#
# - by default is empty to avoid misrouting
pstn.gw_ip = "" desc "PSTN GW Address"
#!endif

#!ifdef WITH_VOICEMAIL
# VoiceMail Routing on offline, busy or no answer
#
# - by default Voicemail server IP is empty to avoid misrouting
voicemail.srv_ip = "" desc "VoiceMail IP Address"
voicemail.srv_port = "5060" desc "VoiceMail Port"
#!endif

#!ifdef WITH_XCAPSRV
tcp_accept_no_cl=yes
#!endif
 
####### Modules Section ########

# set paths to location of modules (to sources or installation folders)
#!ifdef WITH_SRCPATH
mpath="modules_k:modules"
#!else


/*Asegurate de que esta ruta sea  valida, en este caso es un SO de 64 bits, si el tuyo es de 32 bits la ruta es diferente.*/



mpath="/usr/lib64/kamailio/modules_k/:/usr/lib64/kamailio/modules/"

#!endif

#!ifdef WITH_MYSQL
loadmodule "db_mysql.so"
#!endif

loadmodule "mi_fifo.so"
loadmodule "kex.so"
loadmodule "tm.so"
loadmodule "tmx.so"
loadmodule "sl.so"
loadmodule "rr.so"
loadmodule "pv.so"
loadmodule "maxfwd.so"
loadmodule "usrloc.so"
loadmodule "registrar.so"
loadmodule "textops.so"
loadmodule "siputils.so"
loadmodule "xlog.so"
loadmodule "sanity.so"
loadmodule "ctl.so"
loadmodule "cfg_rpc.so"
loadmodule "mi_rpc.so"
loadmodule "acc.so"

#!ifdef WITH_AUTH
loadmodule "auth.so"
loadmodule "auth_db.so"
#!ifdef WITH_IPAUTH
loadmodule "permissions.so"
#!endif
#!endif

#!ifdef WITH_ALIASDB
loadmodule "alias_db.so"
#!endif

#!ifdef WITH_SPEEDDIAL
loadmodule "speeddial.so"
#!endif

#!ifdef WITH_MULTIDOMAIN
loadmodule "domain.so"
#!endif

#!ifdef WITH_PRESENCE
loadmodule "presence.so"
loadmodule "presence_xml.so"
#!endif

#!ifdef WITH_NAT
loadmodule "nathelper.so"
loadmodule "rtpproxy.so"
#!endif

#!ifdef WITH_TLS
loadmodule "tls.so"
#!endif

#!ifdef WITH_ANTIFLOOD
loadmodule "htable.so"
loadmodule "pike.so"
#!endif

#!ifdef WITH_XMLRPC
loadmodule "xmlrpc.so"
#!endif

#!ifdef WITH_DEBUG
loadmodule "debugger.so"
#!endif

#!ifdef WITH_XCAPSRV
loadmodule "xhttp.so"
loadmodule "xcap_server.so"
#!endif

#!ifdef WITH_MSILO
loadmodule "msilo.so"
#!endif
# ----------------- setting module-specific parameters ---------------


# ----- mi_fifo params -----
modparam("mi_fifo", "fifo_name", "/tmp/kamailio_fifo")


# ----- tm params -----
# auto-discard branches from previous serial forking leg
modparam("tm", "failure_reply_mode", 3)
# default retransmission timeout: 30sec
modparam("tm", "fr_timer", 30000)
# default invite retransmission timeout after 1xx: 120sec
modparam("tm", "fr_inv_timer", 120000)


# ----- rr params -----
# add value to ;lr param to cope with most of the UAs
modparam("rr", "enable_full_lr", 1)
# do not append from tag to the RR (no need for this script)
modparam("rr", "append_fromtag", 0)


# ----- registrar params -----
modparam("registrar", "method_filtering", 1)
/* uncomment the next line to disable parallel forking via location */
# modparam("registrar", "append_branches", 0)
/* uncomment the next line not to allow more than 10 contacts per AOR */
#modparam("registrar", "max_contacts", 10)
# max value for expires of registrations
modparam("registrar", "max_expires", 3600)
# set it to 1 to enable GRUU
modparam("registrar", "gruu_enabled", 0)


# ----- acc params -----
/* what special events should be accounted ? */
modparam("acc", "early_media", 0)
modparam("acc", "report_ack", 0)
modparam("acc", "report_cancels", 0)
/* by default ww do not adjust the direct of the sequential requests.
   if you enable this parameter, be sure the enable "append_fromtag"
   in "rr" module */
modparam("acc", "detect_direction", 0)
/* account triggers (flags) */
modparam("acc", "log_flag", FLT_ACC)
modparam("acc", "log_missed_flag", FLT_ACCMISSED)
modparam("acc", "log_extra", 
 "src_user=$fU;src_domain=$fd;src_ip=$si;"
 "dst_ouser=$tU;dst_user=$rU;dst_domain=$rd")
modparam("acc", "failed_transaction_flag", FLT_ACCFAILED)
/* enhanced DB accounting */
#!ifdef WITH_ACCDB
modparam("acc", "db_flag", FLT_ACC)
modparam("acc", "db_missed_flag", FLT_ACCMISSED)
modparam("acc", "db_url", DBURL)
modparam("acc", "db_extra",
 "src_user=$fU;src_domain=$fd;src_ip=$si;"
 "dst_ouser=$tU;dst_user=$rU;dst_domain=$rd")
#!endif


# ----- usrloc params -----
/* enable DB persistency for location entries */
#!ifdef WITH_USRLOCDB
modparam("usrloc", "db_url", DBURL)
modparam("usrloc", "db_mode", 2)
modparam("usrloc", "use_domain", MULTIDOMAIN)
#!endif


# ----- auth_db params -----
#!ifdef WITH_AUTH
modparam("auth_db", "db_url", DBURL)
modparam("auth_db", "calculate_ha1", yes)
modparam("auth_db", "password_column", "password")
modparam("auth_db", "load_credentials", "")
modparam("auth_db", "use_domain", MULTIDOMAIN)

# ----- permissions params -----
#!ifdef WITH_IPAUTH
modparam("permissions", "db_url", DBURL)
modparam("permissions", "db_mode", 1)
#!endif

#!endif


# ----- alias_db params -----
#!ifdef WITH_ALIASDB
modparam("alias_db", "db_url", DBURL)
modparam("alias_db", "use_domain", MULTIDOMAIN)
#!endif


# ----- speedial params -----
#!ifdef WITH_SPEEDDIAL
modparam("speeddial", "db_url", DBURL)
modparam("speeddial", "use_domain", MULTIDOMAIN)
#!endif


# ----- domain params -----
#!ifdef WITH_MULTIDOMAIN
modparam("domain", "db_url", DBURL)
# use caching
modparam("domain", "db_mode", 1)
# register callback to match myself condition with domains list
modparam("domain", "register_myself", 1)
#!endif


#!ifdef WITH_PRESENCE
# ----- presence params -----
modparam("presence", "db_url", DBURL)

# ----- presence_xml params -----
modparam("presence_xml", "db_url", DBURL)
modparam("presence_xml", "force_active", 1)
#!endif


#!ifdef WITH_NAT
# ----- rtpproxy params -----
modparam("rtpproxy", "rtpproxy_sock", "udp:127.0.0.1:7722")

# ----- nathelper params -----
modparam("nathelper", "natping_interval", 30)
modparam("nathelper", "ping_nated_only", 1)
modparam("nathelper", "sipping_bflag", FLB_NATSIPPING)
modparam("nathelper", "sipping_from", "sip:pinger@your_public_ip")

# params needed for NAT traversal in other modules
modparam("nathelper|registrar", "received_avp", "$avp(RECEIVED)")
modparam("usrloc", "nat_bflag", FLB_NATB)
#!endif


#!ifdef WITH_TLS
# ----- tls params -----
modparam("tls", "config", "/etc/kamailio/tls.cfg")
#!endif

#!ifdef WITH_ANTIFLOOD
# ----- pike params -----
modparam("pike", "sampling_time_unit", 2)
modparam("pike", "reqs_density_per_unit", 16)
modparam("pike", "remove_latency", 4)

# ----- htable params -----
# ip ban htable with autoexpire after 5 minutes
modparam("htable", "htable", "ipban=>size=8;autoexpire=300;")
#!endif

#!ifdef WITH_XMLRPC
# ----- xmlrpc params -----
modparam("xmlrpc", "route", "XMLRPC");
modparam("xmlrpc", "url_match", "^/RPC")
#!endif

#!ifdef WITH_DEBUG
# ----- debugger params -----
modparam("debugger", "cfgtrace", 1)
#!endif

#!ifdef WITH_XCAPSRV
# ----- xcap_server params -----
modparam("xcap_server", "db_url", DBURL)
#!endif
/*Este modulo es opcional, se utiliza para guardar mensajes en la base de datos si el usuario esta offline, y se lo envia cuando vuelva a estar en linea, para activarlo debes escribir al principio #!define WITH_MSILO y cambiar las siguientes lineas*/
#!ifdef WITH_MSILO
# ------ msilo params ------
modparam("msilo","db_url",DBURL)
modparam("msilo","from_address","sip:registrar@your_public_ip")
#modparam("msilo","contact_hdr","Contact: <sip:registrar@your_public_ip>\r\n")
modparam("msilo","content_type_hdr","Content-Type: text/plain\r\n")
modparam("msilo","offline_message","*** User $rU is offline!")
#modparam("msilo", "check_time", 10)
#!endif

####### Routing Logic ########


# Main SIP request routing logic
# - processing of any incoming SIP request starts with this route
# - note: this is the same as route { ... }
request_route {

 # per request initial checks
 route(REQINIT);

 # NAT detection
 route(NATDETECT);

 # handle requests within SIP dialogs
 route(WITHINDLG);

 ### only initial requests (no To tag)

 # CANCEL processing
 if (is_method("CANCEL"))
 {
  if (t_check_trans())
   t_relay();
  exit;
 }

 t_check_trans();

 # authentication
 route(AUTH);

 # record routing for dialog forming requests (in case they are routed)
 # - remove preloaded route headers
 remove_hf("Route");
 if (is_method("INVITE|SUBSCRIBE"))
 { 
  record_route();
         
 }
 # account only INVITEs
 if (is_method("INVITE"))
 {
              
  setflag(FLT_ACC); # do accounting
 }

 # dispatch requests to foreign domains
 route(SIPOUT);

 ### requests for my local domains

 # handle presence related requests
 route(PRESENCE);

 # handle registrations
 route(REGISTRAR);
        
 if ($rU==$null)
 {
  # request with no Username in RURI
  sl_send_reply("484","Address Incomplete");
  exit;
 }

 # dispatch destinations to PSTN
 route(PSTN);

 # user location service
 route(LOCATION);

 route(RELAY);
}


route[RELAY] {

 # enable additional event routes for forwarded requests
 # - serial forking, RTP relaying handling, a.s.o.
       
       if (is_method("INVITE|SUBSCRIBE")) {
    t_on_branch("MANAGE_BRANCH");
  t_on_reply("MANAGE_REPLY");
 }
 if (is_method("INVITE")) {
     
           t_on_failure("MANAGE_FAILURE");
 }

 if (!t_relay()) {
  sl_reply_error();
 }
 exit;
}

# Per SIP request initial checks
route[REQINIT] {
#!ifdef WITH_ANTIFLOOD
 # flood dection from same IP and traffic ban for a while
 # be sure you exclude checking trusted peers, such as pstn gateways
 # - local host excluded (e.g., loop to self)
 if(src_ip!=myself)
 {
  if($sht(ipban=>$si)!=$null)
  {
   # ip is already blocked
   xdbg("request from blocked IP - $rm from $fu (IP:$si:$sp)\n");
   exit;
  }
  if (!pike_check_req())
  {
   xlog("L_ALERT","ALERT: pike blocking $rm from $fu (IP:$si:$sp)\n");
   $sht(ipban=>$si) = 1;
   exit;
  }
 }
#!endif

 if (!mf_process_maxfwd_header("10")) {
  sl_send_reply("483","Too Many Hops");
  exit;
 }

 if(!sanity_check("1511", "7"))
 {
  xlog("Malformed SIP message from $si:$sp\n");
  exit;
 }
}

# Handle requests within SIP dialogs
route[WITHINDLG] {
 if (has_totag()) {
  # sequential request withing a dialog should
  # take the path determined by record-routing
  if (loose_route()) {
   if (is_method("BYE")) {
    setflag(FLT_ACC); # do accounting ...
    setflag(FLT_ACCFAILED); # ... even if the transaction fails
   }
     if ( is_method("ACK") ) {
     # ACK is forwarded statelessy
    route(NATMANAGE);
                               
   }
                        
   route(RELAY);
  } else {
   if (is_method("SUBSCRIBE") && uri == myself) {
    # in-dialog subscribe requests
    route(PRESENCE);
    exit;
   }
   if ( is_method("ACK") ) {
    if ( t_check_trans() ) {
     # no loose-route, but stateful ACK;
     # must be an ACK after a 487
     # or e.g. 404 from upstream server
     t_relay();
     exit;
    } else {
     # ACK without matching transaction ... ignore and discard
     exit;
    }
   }
   sl_send_reply("404","Not here");
  }
  exit;
 }
}

# Handle SIP registrations
route[REGISTRAR] {
 if (is_method("REGISTER"))
 {
  if(isflagset(FLT_NATS))
  {
   setbflag(FLB_NATB);
   # uncomment next line to do SIP NAT pinging 
   ## setbflag(FLB_NATSIPPING);
  }
  if (!save("location"))
   sl_reply_error();
                
   #!ifdef WITH_MSILO
     m_dump();
   #!endif
 
  exit;
 }
}

# USER location service
route[LOCATION] {

#!ifdef WITH_SPEEDIAL
 # search for short dialing - 2-digit extension
 if($rU=~"^[0-9][0-9]$")
  if(sd_lookup("speed_dial"))
   route(SIPOUT);
#!endif

#!ifdef WITH_ALIASDB
 # search in DB-based aliases
 if(alias_db_lookup("dbaliases"))
  route(SIPOUT);
#!endif

#!ifdef WITH_MSILO
 if(is_method("MESSAGE")){
        route(MSILO);
     exit;
 }
#!endif
 $avp(oexten) = $rU;
 if (!lookup("location")) {
  $var(rc) = $rc;
  route(TOVOICEMAIL);
  t_newtran();
  switch ($var(rc)) {
   case -1:
   case -3:
    send_reply("404", "Not Found");
    exit;
   case -2:
    send_reply("405", "Method Not Allowed");   
    exit;
  }
         
  
    
 }
   

 # when routing via usrloc, log the missed calls also
 if (is_method("INVITE"))
 {
  setflag(FLT_ACCMISSED);
 }
}

# Presence server route
route[PRESENCE] {
 if(!is_method("PUBLISH|SUBSCRIBE"))
  return;

#!ifdef WITH_PRESENCE
 if (!t_newtran())
 {
  sl_reply_error();
  exit;
 };

 if(is_method("PUBLISH"))
 {
  handle_publish();
  t_release();
 }
 else
 if( is_method("SUBSCRIBE"))
 {
  handle_subscribe();
  t_release();
 }
 exit;
#!endif
 
 # if presence enabled, this part will not be executed
 if (is_method("PUBLISH") || $rU==$null)
 {
  sl_send_reply("404", "Not here");
  exit;
 }
 return;
}

# Authentication route
route[AUTH] {
#!ifdef WITH_AUTH

#!ifdef WITH_IPAUTH
 if((!is_method("REGISTER")) && allow_source_address())
 {
  # source IP allowed
  return;
 }
#!endif

#!ifdef WITH_MSILO
if(is_method("MESSAGE")){
 return;
}
#!endif
 if ((is_method("REGISTER") || from_uri==myself))
 {
  
  # authenticate requests
  if (!auth_check("$fd", "subscriber","1")) {
   auth_challenge("$fd", "0");
   exit;
  }

  # user authenticated - remove auth header
  if(!is_method("REGISTER|PUBLISH"))
   consume_credentials();
 }
 # if caller is not local subscriber, then check if it calls
 # a local destination, otherwise deny, not an open relay here
 if (from_uri!=myself && uri!=myself)
 {
  sl_send_reply("403","Not relaying");
  exit;
 }

#!endif
 return;
}

# Caller NAT detection route
route[NATDETECT] {
#!ifdef WITH_NAT
 force_rport();
 setflag(FLT_NATS);
        if (nat_uac_test("19")) {
  if (is_method("REGISTER")) {
   fix_nated_register();
  } else {
   fix_nated_contact();
  }
  setflag(FLT_NATS);
 }
#!endif
 return;
}

# RTPProxy control
route[NATMANAGE] {
#!ifdef WITH_NAT
 if (is_request()) {
  if(has_totag()) {
   if(check_route_param("nat=yes")) {
    setbflag(FLB_NATB);
   }
  }
 }

         

 if (!(isflagset(FLT_NATS) || isbflagset(FLB_NATB)))
  return;

       rtpproxy_manage();

 if (is_request()) {
  if (!has_totag()) {
   add_rr_param(";nat=yes");
  }
 }
 if (is_reply()) {
  if(isbflagset(FLB_NATB)) {
   fix_nated_contact();
  }
 }
#!endif
 return;
}

# Routing to foreign domains
route[SIPOUT] {
 if (!uri==myself)
 {
  append_hf("P-hint: outbound\r\n");
  route(RELAY);
 }
}

# PSTN GW routing
route[PSTN] {
#!ifdef WITH_PSTN
 # check if PSTN GW IP is defined
 if (strempty($sel(cfg_get.pstn.gw_ip))) {
  xlog("SCRIPT: PSTN rotuing enabled but pstn.gw_ip not defined\n");
  return;
 }

 # route to PSTN dialed numbers starting with '+' or '00'
 #     (international format)
 # - update the condition to match your dialing rules for PSTN routing
 if(!($rU=~"^(\+|00)[1-9][0-9]{3,20}$"))
  return;

 # only local users allowed to call
 if(from_uri!=myself) {
  sl_send_reply("403", "Not Allowed");
  exit;
 }

 $ru = "sip:" + $rU + "@" + $sel(cfg_get.pstn.gw_ip);

 route(RELAY);
 exit;
#!endif

 return;
}

# XMLRPC routing
#!ifdef WITH_XMLRPC
route[XMLRPC] {
 # allow XMLRPC from localhost
 if ((method=="POST" || method=="GET")
   && (src_ip==127.0.0.1)) {
  # close connection only for xmlrpclib user agents (there is a bug in
  # xmlrpclib: it waits for EOF before interpreting the response).
  if ($hdr(User-Agent) =~ "xmlrpclib")
   set_reply_close();
  set_reply_no_connect();
  dispatch_rpc();
  exit;
 }
 send_reply("403", "Forbidden");
 exit;
}
#!endif

# route to voicemail server
route[TOVOICEMAIL] {
#!ifdef WITH_VOICEMAIL
 if(!is_method("INVITE"))
  return;

 # check if VoiceMail server IP is defined
 if (strempty($sel(cfg_get.voicemail.srv_ip))) {
  xlog("SCRIPT: VoiceMail rotuing enabled but IP not defined\n");
  return;
 }
 if($avp(oexten)==$null)
  return;

 $ru = "sip:" + $avp(oexten) + "@" + $sel(cfg_get.voicemail.srv_ip)
    + ":" + $sel(cfg_get.voicemail.srv_port);
 route(RELAY);
 exit;
#!endif

 return;
}

# manage outgoing branches
branch_route[MANAGE_BRANCH] {
 xdbg("new branch [$T_branch_idx] to $ru\n");
 route(NATMANAGE);
}

# manage incoming replies
onreply_route[MANAGE_REPLY] {
 xdbg("incoming reply\n");
 if(status=~"[12][0-9][0-9]")
 route(NATMANAGE);
}
#!ifdef WITH_MSILO
#manage failure message
failure_route[MANAGE_FAILURE_MESSAGE] {
       if (!method=="MESSAGE")
    {
        exit;
    }
    
    log(1,"MSILO:the downstream UA doesn't support MESSAGEs\n");
    # we have changed the R-URI with the contact address, ignore it now
    if (m_store("$ou"))
    {
        t_reply("202", "Accepted"); 
    }else{
        t_reply("503", "Service Unavailable");
    }
}
#!endif

# manage failure routing cases
failure_route[MANAGE_FAILURE] {
 route(NATMANAGE);

 if (t_is_canceled()) {
  exit;
 }

#!ifdef WITH_BLOCK3XX
 # block call redirect based on 3xx replies.
 if (t_check_status("3[0-9][0-9]")) {
  t_reply("404","Not found");
  exit;
 }
#!endif

#!ifdef WITH_VOICEMAIL
 # serial forking
 # - route to voicemail on busy or no answer (timeout)
 if (t_check_status("486|408")) {
  route(TOVOICEMAIL);
  exit;
 }
#!endif      
}

#!ifdef WITH_XCAPSRV
#!define WITH_XHTTPAUTH
event_route[xhttp:request] {
 xdbg("===== xhttp: request [$rv] $rm => $hu\n");   
 if (!www_authorize("xcap", "subscriber"))
    {
        www_challenge("xcap", "0");
        exit;
    }
    if($hu=~"^/xcap-root/")
    {
        set_reply_close();
        set_reply_no_connect();
        # xcap ops - break down http uri to get xcap user id
        $xcapuri(u=>data) = $hu;
        if($xcapuri(u=>xuid)=~"^sip:.+@.+")
            $var(uri) = $xcapuri(u=>xuid);
        else
            $var(uri) = "sip:"+ $xcapuri(u=>xuid) + "@" + $Ri;
        xlog("===== xhttp: $xcapuri(u=>auid) : $xcapuri(u=>xuid)\n");
        # handle XCAP capability request
        if($rm=="GET" && $xcapuri(u=>auid)=="xcap-caps")
        {
            $var(xbody) =
"<?xml version='1.0' encoding='UTF-8'?>
<xcap-caps xmlns='urn:ietf:params:xml:ns:xcap-caps'>
  <auids>
    <auid>rls-services</auid>
    <auid>pidf-manipulation</auid>
    <auid>xcap-caps</auid>
    <auid>resource-lists</auid>
    <auid>pres-rules</auid>
    <auid>org.openmobilealliance.pres-rules</auid>
  </auids>
  <extensions>
  </extensions>
  <namespaces>
    <namespace>urn:ietf:params:xml:ns:rls-services</namespace>
    <namespace>urn:ietf:params:xml:ns:pidf</namespace>
    <namespace>urn:ietf:params:xml:ns:xcap-caps</namespace>
    <namespace>urn:ietf:params:xml:ns:resource-lists</namespace>
    <namespace>urn:ietf:params:xml:ns:pres-rules</namespace>
  </namespaces>
</xcap-caps>";
            xhttp_reply("200", "ok", "application/xcap-caps+xml",
                    "$var(xbody)");
            exit;
        }
        # be sure auth user access only its documents
        if ($au!=$(var(uri){uri.user})) {
            xhttp_reply("403", "Forbidden", "text/html",
                    "operation not allowed");
            exit;
        }

        xdbg("SCRIPT: xcap service $xcapuri(u=>auid) for $xcapuri(u=>xuid)\n");
        switch($rm) {
            case "PUT":
                xcaps_put("$var(uri)", "$hu", "$rb");
                if($xcapuri(u=>auid)=~"pres-rules")
                {
  xlog("===== xhttp put: refreshing watchers for $var(uri)\n");
                    pres_update_watchers("$var(uri)", "presence");
                    pres_refresh_watchers("$var(uri)", "presence", 1);
                }
                exit;
            break;
            case "GET":
   xlog("===== xhttp: get $var(uri) => $hu\n");
                xcaps_get("$var(uri)", "$hu");
                exit;
            break;
            case "DELETE":
                xcaps_del("$var(uri)", "$hu");
                if($xcapuri(u=>auid)=~"pres-rules")
                {
  xlog("===== xhttp del: refreshing watchers for $var(uri)\n");
                    pres_update_watchers("$var(uri)", "presence");
                    pres_refresh_watchers("$var(uri)", "presence", 1);
                }
                exit;
            break;
        }
    }

    # other http requests
    xhttp_reply("200", "OK", "text/html",
            "<html><body>OK: $si:$sp</body></html>");
    exit;
}
#!endif

route[MSILO]{
#!ifdef WITH_MSILO
 if(!is_method("MESSAGE"))
  return;
 
        if(!lookup("location")) 
        {
  $var(rc)=$rc;
   if (! t_newtran())
             {
                 sl_reply_error();
                 exit;
              };

              switch ($var(rc)) {
                        case -1:
                        case -3:
    if (m_store("$ru"))
             {
                   if (!t_reply("202", "Accepted"))
                   {
                       sl_reply_error();
                   };
               }else{

                    if (!t_reply("503", "Service Unavailable"))
                   {
                       sl_reply_error();
                   };
               };
               exit;

                                
                        case -2:
                                t_on_failure("MANAGE_FAILURE_MESSAGE");
           t_relay();
           exit;
                }
        };
  t_on_failure("MANAGE_FAILURE_MESSAGE");
        t_relay();
        exit;
                 
#!endif
return;
}
  • Ahora ejecutamos 
sudo /etc/init.d/kamailio restart
y deberia funcionar, si ocurre algun error fijate en la salida y en la linea que te da el error. Si quieres depurar escribe al principio del archivo de configuracion #!define WITH_DEBUG.


  • Si queremos ver los dialogos SIP debemos ejecutar netstat -anp|grep 5060.
Podemos ver que todo funcione correctamente, descargando y configurando un Cliente SIP como JITSY para LINUX/WINDOWS, SIPDROID para Android. En Blackberry tenemos el VMOBILE.

Configurar un cliente sip es muy sencillo. Recordemos que tenemos 2 usuarios registrados bob y alice,

En username escribimos bob por ejemplo
Username: bob
PASSWORD: bob123
Domain: tu_ip_publica o dominio
Registrar: tu_ip_publica:5060
PROXY: Lo mismo que en domain o le damos a configurar proxy automaticamente si existe la opcion.
Puerto: 5060. 
Servidor XCAP: yourpublic_ip:5060/xcap-root (Si existe la opcion)

Registramos los 2 clientes, uno en el PC y otro en un Movil o en otro PC y ya podremos hacer llamadas y videollamadas, ademas de escribirnos mensajes.
Espero les haya sido de ayuda. 
Publicado por en
Etiquetas: , , , , , , , , , , ,

1 comentario:

  1. Unknown5 de noviembre de 2013, 7:44

    The Best of the best ,neat,clean, clear.

    Congratulacion and thanks !

    ResponderEliminar

Suscribirse a: Enviar comentarios (Atom)