Great addition, thanks Karsten! Am 30.10.19 um 08:08 schrieb Karsten Horsmann: Hi Henning,
nice to see that howto. Thanks. Maybe interesting for the list - i try to verify the ms-teams calls with tls and use the permission module functions as "helper": # account only INVITEs if (is_method("INVITE")) { setflag(FLT_ACC); # do accounting xlog("L_INFO", "-----------> tls_peer_subject <$tls_peer_subject> tls_peer_subject_cn <$tls_peer_subject_cn> tls_peer_verified <$tls_peer_verified> tls_peer_server_name <$tls_peer_server_name> \n"); xlog("L_INFO", "-----------> $Ri:$Rp src_user=$fU src_domain=$fd src_ip=$si dst_ouser=$tU dst_user=$rU dst_domain=$rd\n"); if($tls_peer_verified == -1) { xlog("L_INFO", "tls_peer_subject_cn $tls_peer_subject_cn is NOT verfied!\n"); return; } $var(dns) = $tls_peer_subject_cn; $var(group) = allow_address_group($var(dns), $Rp); xlog("L_INFO", "-----------> allow_address_group var(group) $var(group) var(dns) $var(dns) Rp $Rp\n"); if ($var(group) == -1) { xlog("L_INFO", "Trunk is not activate for registrar DNS_GROUP:[$var(dns)], Source: [$si], Destination: [$Ri] Port:[$Rp]\n"); return; } } Oct 30 07:55:46 sbc1 /usr/sbin/kamailio[2689]: INFO: {1 1 INVITE 34b77c805b475a39a669b03544f87fae} <script>: -----------> tls_peer_subject <<null>> tls_peer_subject_cn <sip.pstnhub.microsoft.com<http://sip.pstnhub.microsoft.com>> tls_peer_verified <1> tls_peer_server_name <SBC-DNS-NAME> Oct 30 07:55:46 sbc1 /usr/sbin/kamailio[2689]: INFO: {1 1 INVITE 34b77c805b475a39a669b03544f87fae} <script>: -----------> allow_address_group var(group) 1 var(dns) sip.pstnhub.microsoft.com<http://sip.pstnhub.microsoft.com> Rp 5061 less /etc/kamailio/database/address id(int,auto) grp(int) ip_addr(string) mask(int) port(int) tag(string,null) 1:1:sip.pstnhub.microsoft.com:0:0:msteams 2:1:sip2.pstnhub.microsoft.com:0:0:msteams 3:1:sip3.pstnhub.microsoft.com:0:0:msteams 4:1:sip-all.pstnhub.microsoft.com:0:0:msteams Henning Westerholt <h...@skalatan.de<mailto:h...@skalatan.de>> schrieb am Mo., 28. Okt. 2019, 17:22: Hello, I have created a “How-To” blog post on using Kamailio as “session border controller” for Microsoft Teams Direct Routing: https://skalatan.de/en/blog/kamailio-sbc-teams You can this way use all the existing possibilities that Kamailio provide to interact with MS Teams as well. Best regards, Henning -- Henning Westerholt - https://skalatan.de/blog/ Kamailio services - https://skalatan.de/services _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org<mailto:sr-users@lists.kamailio.org> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users _______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org<mailto:sr-users@lists.kamailio.org> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users -- Kamailio Merchandising - https://skalatan.de/merchandising/ Kamailio services - https://skalatan.de/services Henning Westerholt - https://skalatan.de/blog/
_______________________________________________ Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users