Re: [asterisk-users] SIP Trunk over Proxy (matching ip of outbound proxy in incomming calls)

[Dave Platt]

> Not sure maybe there's a better solution but I thought about using another
> peer with type=user for incoming connections.

That's what I've done for my connection to the service provider
I use (Vitelity), as they have different inbound and outbound
hosts/proxies.  This works fine.




-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] SIP Trunk over Proxy (matching ip of outbound proxy in incomming calls)

[Kseniya Blashchuk]

Not sure maybe there's a better solution but I thought about using another
peer with type=user for incoming connections.

On Mon, May 22, 2017, 6:13 PM Benoit Panizzon 
wrote:

> Hello List
>
> I work at an SIP Provider and we have added and SBC in front of our
> Voice Switch to protect it.
>
> This requires all our SIP Trunk customers to register via a 'proxy'.
>
> I struggle with Asterisk to work over a proxy.
>
> This is what I have done so far.
>
> register => usern...@sip.example.com:passw...@sbc.example.com
>
> This works fine, asterisk is sending registrations via the SBC to the
> voice switch defined by URI.
>
> [username]
> type=peer
> secret=password
> host=sip.example.com
> outboundproxy=sbc.example.com
> context=from-ISP-X
>
> From the Dialplan that string is dialed:
>
> Dial(SIP/username/${EXTEN})
>
> This works fine, asterisk sends the call to the outboundproxy defined
> in the sip.conf section of [username].
>
> Before adding outboundproxy setting, incomming calls were
> matched because they originated from the host and passed to the correct
> context.
>
> I have set allowguest=no to challenge all those sip attackers in
> [default] who occasionaly managed to call internal extensions defined
> there.
>
> Now incomming calls do not originate from the ip of sip.example.com
> anymore, but from the ip of sbc.example.com and are not set to the
> context [from-ISP-X] but probably to [default] and challenged.
>
> Of course, I could allow guests, but that would bring back the problem
> of having unwanted calls from sip scanners.
>
> So how do I tell the asterisk to also match calls from the ip of the
> outbound proxy?
>
> -Benoît Panizzon-
> --
> I m p r o W a r e   A G-Leiter Commerce Kunden
> __
>
> Zurlindenstrasse 29 Tel  +41 61 826 93 00
> CH-4133 PrattelnFax  +41 61 826 93 01
> Schweiz Web  http://www.imp.ch
> __
>
> --
> _
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> Check out the new Asterisk community forum at:
> https://community.asterisk.org/
>
> New to Asterisk? Start here:
>   https://wiki.asterisk.org/wiki/display/AST/Getting+Started
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>http://lists.digium.com/mailman/listinfo/asterisk-users
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

[asterisk-users] SIP Trunk over Proxy (matching ip of outbound proxy in incomming calls)

[Benoit Panizzon]

Hello List

I work at an SIP Provider and we have added and SBC in front of our
Voice Switch to protect it.

This requires all our SIP Trunk customers to register via a 'proxy'.

I struggle with Asterisk to work over a proxy.

This is what I have done so far.

register => usern...@sip.example.com:passw...@sbc.example.com

This works fine, asterisk is sending registrations via the SBC to the
voice switch defined by URI.

[username]
type=peer
secret=password
host=sip.example.com
outboundproxy=sbc.example.com
context=from-ISP-X

From the Dialplan that string is dialed:

Dial(SIP/username/${EXTEN})

This works fine, asterisk sends the call to the outboundproxy defined
in the sip.conf section of [username].

Before adding outboundproxy setting, incomming calls were
matched because they originated from the host and passed to the correct
context.

I have set allowguest=no to challenge all those sip attackers in
[default] who occasionaly managed to call internal extensions defined
there.

Now incomming calls do not originate from the ip of sip.example.com
anymore, but from the ip of sbc.example.com and are not set to the
context [from-ISP-X] but probably to [default] and challenged.

Of course, I could allow guests, but that would bring back the problem
of having unwanted calls from sip scanners.

So how do I tell the asterisk to also match calls from the ip of the
outbound proxy?

-Benoît Panizzon-
-- 
I m p r o W a r e   A G-Leiter Commerce Kunden
__

Zurlindenstrasse 29 Tel  +41 61 826 93 00
CH-4133 PrattelnFax  +41 61 826 93 01
Schweiz Web  http://www.imp.ch
__

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users