Re: [asterisk-users] Get a SHAKEN Identity Token (Alexander Perkins)

2021-01-25 Thread Steve Edwards 

On Mon, 25 Jan 2021, Jeff LaCoursiere wrote:

So how does this guy get around it?  It sounds to me like he is offering 
to sign calls for whoever, which IMO totally defeats the purpose.


IIRC, back when he first started hawking his solution, he accepted 
everything. Numbers from Vitelity, my old out of service copper number, 
555-555-.


I'm all for the discussion, but can you start a new thread so we don't 
keep associating the innocent party (the OP) with this spammer.


--
Thanks in advance,
-
Steve Edwards   sedwa...@sedwards.com  Voice: +1-760-468-3867 PST
https://www.linkedin.com/in/steve-edwards-4244281-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Get a SHAKEN Identity Token (Alexander Perkins)

2021-01-25 Thread Jeff LaCoursiere 


Thanks Joshua, that was warranted IMO. I have to admit I am curious 
about his solution, though, and maybe we can turn this into a discussion 
about how we are handling STIR/SHAKEN collectively.


Our biggest issue is the fact that we use (our own) LCR to choose 
outbound routes for calls in real-time.  An outbound call could end up 
on any of several upstream providers, not necessarily the one that 
"owns" the DID that is making the outbound call.  Because of this we 
cannot rely on our upstreams to be the originating carriers - they won't 
be able to sign for calls from DID numbers they have no record of. We 
aren't alone in this, and Bandwidth.com is making noise about this issue 
and the "forward" problem, where we bounce a call to another number, and 
the original token info is lost.  I'm pretty sure this lands us in the 
"need to be an originating provider and generate crypt tokens".  I'm 
only just beginning diving into what that entails.


So how does this guy get around it?  It sounds to me like he is offering 
to sign calls for whoever, which IMO totally defeats the purpose.  So if 
I am some spammer and find my calls are rejected, I can just get him to 
sign them for me?  If I were him I would get a bunch of lawyers ready 
for when he becomes responsible for what they end up doing.  Isn't that 
the whole idea?


Cheers,

Jeff LaCoursiere
StratusTalk, Inc.

On 1/25/21 7:44 AM, Joshua C. Colp wrote:
On Sun, Jan 24, 2021 at 6:50 PM Steve Edwards 
mailto:asterisk@sedwards.com>> wrote:


On Sun, 24 Jan 2021, Saint Michael wrote:

> Please look at this
> https://issues.asterisk.org/jira/browse/ASTERISK-28924
> I have a solution that works for any version of Asterisk, if
interested contact me at venefax at the Google mail service.

"I have a commercial solution that works for any version of
Asterisk, if
interested contact me at venefax at the Google mail service."

Fixed. If you're going to post a commercial solution on a
non-commercial
forum, at least be up front about it.


Greetings all,

Just so everyone is aware I previously gave a final warning on 
commercial solicitation on the asterisk-users mailing list to this 
individual[1]. As they've continued to do so I've removed them from 
the mailing list. You are free to communicate with them directly.


Cheers,

[1] 
http://lists.digium.com/pipermail/asterisk-users/2020-July/295208.html


--
Joshua C. Colp
Asterisk Technical Lead
Sangoma Technologies
Check us out at www.sangoma.com  and 
www.asterisk.org 




--
Jeff LaCoursiere
StratusTalk, Inc.
703 496 4990 x108
815 546 6599 cell

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Get a SHAKEN Identity Token (Alexander Perkins)

2021-01-25 Thread Joshua C. Colp 
On Sun, Jan 24, 2021 at 6:50 PM Steve Edwards 
wrote:

> On Sun, 24 Jan 2021, Saint Michael wrote:
>
> > Please look at this
> > https://issues.asterisk.org/jira/browse/ASTERISK-28924
> > I have a solution that works for any version of Asterisk, if interested
> contact me at venefax at the Google mail service.
>
> "I have a commercial solution that works for any version of Asterisk, if
> interested contact me at venefax at the Google mail service."
>
> Fixed. If you're going to post a commercial solution on a non-commercial
> forum, at least be up front about it.
>

Greetings all,

Just so everyone is aware I previously gave a final warning on commercial
solicitation on the asterisk-users mailing list to this individual[1]. As
they've continued to do so I've removed them from the mailing list. You are
free to communicate with them directly.

Cheers,

[1] http://lists.digium.com/pipermail/asterisk-users/2020-July/295208.html

-- 
Joshua C. Colp
Asterisk Technical Lead
Sangoma Technologies
Check us out at www.sangoma.com and www.asterisk.org
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Get a SHAKEN Identity Token (Alexander Perkins)

2021-01-24 Thread Steve Edwards 

On Sun, 24 Jan 2021, Saint Michael wrote:


Please look at this
https://issues.asterisk.org/jira/browse/ASTERISK-28924
I have a solution that works for any version of Asterisk, if interested contact 
me at venefax at the Google mail service.


"I have a commercial solution that works for any version of Asterisk, if 
interested contact me at venefax at the Google mail service."


Fixed. If you're going to post a commercial solution on a non-commercial 
forum, at least be up front about it.


--
Thanks in advance,
-
Steve Edwards   sedwa...@sedwards.com  Voice: +1-760-468-3867 PST
https://www.linkedin.com/in/steve-edwards-4244281

--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
 https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Get a SHAKEN Identity Token (Alexander Perkins)

2021-01-24 Thread Saint Michael 
Please look at this
https://issues.asterisk.org/jira/browse/ASTERISK-28924
I have a solution that works for any version of Asterisk, if interested
contact me at venefax at the Google mail service.

On Sun, Jan 24, 2021 at 1:00 PM 
wrote:

> Send asterisk-users mailing list submissions to
> asterisk-users@lists.digium.com
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.digium.com/mailman/listinfo/asterisk-users
> or, via email, send a message with subject or body 'help' to
> asterisk-users-requ...@lists.digium.com
>
> You can reach the person managing the list at
> asterisk-users-ow...@lists.digium.com
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of asterisk-users digest..."
>
>
> Today's Topics:
>
>1. Re: Get a SHAKEN Identity Token (Alexander Perkins)
>
>
> --
>
> Message: 1
> Date: Sat, 23 Jan 2021 20:30:42 -0500
> From: Alexander Perkins 
> To: Markus 
> Cc: asterisk-users@lists.digium.com
> Subject: Re: [asterisk-users] Get a SHAKEN Identity Token
> Message-ID:
> <
> callktp0j5hfj1ou+rhrxaevab_wvxqzcoon9s-kfpvzwt6m...@mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> Hi Markus.  Thanks a bunch!  I will try that out!
>
> On Fri, Jan 22, 2021 at 8:06 AM Markus  wrote:
>
> > Am 07.01.2021 um 23:49 schrieb Alexander Perkins:
> > > Hi All.  We have old Asterisk servers, 1,89, (we cannot upgrade because
> > > of several reasons) and we are now implementing SHAKEN via our
> > > provider.  We place a SIP call to our provider and they return a 302
> > > (information below).  I am trying to get the X-Identity information
> > > below, but I do not seem to be able to do so.  Can somebody help me
> with
> > > this?  Any suggestions on how to get it?
> >
> > I use SIP_HEADER to extract information from inbound SIP packets and
> > SIPAddHeader to copy that info to the outgoing call leg. Maybe this
> > helps you?
> >
> > Example:
> >
> > exten => _+X.,1,NoOp(${CALLERID(num)})
> > exten => _+X.,n,Set(PAI=${SIP_HEADER(P-Asserted-Identity)})
> > exten => _+X.,n,Set(PAI=${CUT(PAI,:,2)})
> > exten => _+X.,n,Set(PAI=${CUT(PAI,@,1)})
> > exten => _+X.,n,GotoIf($["${CALLERID(num)}" = "anonymous"]?anonymous:cli)
> > exten => _+X.,n(anonymous),SIPAddHeader(P-Asserted-Identity: "${PAI}"
> > )
> > exten => _+X.,n,SIPAddHeader(Privacy: user\;id)
> > exten => _+X.,n,Goto(dial)
> > exten => _+X.,n(cli),SIPAddHeader(P-Asserted-Identity: "${PAI}"
> > )
> > exten => _+X.,n,SIPAddHeader(Privacy: id)
> > exten => _+X.,n,Goto(dial)
> >
> >
> >
> -- next part --
> An HTML attachment was scrubbed...
> URL: <
> http://lists.digium.com/pipermail/asterisk-users/attachments/20210123/a26b80f1/attachment-0001.html
> >
>
> --
>
> Subject: Digest Footer
>
> ___
> --Bandwidth and Colocation Provided by http://www.api-digital.com--
>
> Check out the new Asterisk community forum at:
> https://community.asterisk.org/
>
> New to Asterisk? Start here:
>   https://wiki.asterisk.org/wiki/display/AST/Getting+Started
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>http://lists.digium.com/mailman/listinfo/asterisk-users
>
> --
>
> End of asterisk-users Digest, Vol 197, Issue 17
> ***
>
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users