## NOTE: DO NOT CHANGE THIS FILE, EDIT local.cfg ##
|
|
|
|
####### Flags #######
|
|
flags
|
|
FLAG_INTERNALLY_SOURCED: 1,
|
|
FLAG_ASSOCIATE_SERVER: 2,
|
|
FLAG_SKIP_NAT_CORRECTION: 3,
|
|
FLAG_ASSOCIATE_USER: 4,
|
|
FLAG_TRUSTED_SOURCE: 5,
|
|
FLAG_SESSION_PROGRESS: 6,
|
|
FLAG_IS_REPLY: 7,
|
|
FLAG_SIP_TRACE: 8;
|
|
|
|
####### Global Parameters #########
|
|
fork = yes
|
|
children = CHILDREN
|
|
server_signature = no
|
|
server_header = "Server: Kazoo"
|
|
user_agent_header = "User-Agent: Kazoo"
|
|
shm_force_alloc = yes
|
|
mlock_pages = yes
|
|
phone2tel = 1
|
|
max_while_loops = MAX_WHILE_LOOPS
|
|
|
|
pv_buffer_size=65536
|
|
mem_join=1
|
|
|
|
####### Logging Parameters #########
|
|
debug = KAZOO_LOG_LEVEL
|
|
memdbg = 10
|
|
memlog = L_INFO
|
|
corelog = L_ERR
|
|
mem_summary = 12
|
|
log_stderror = no
|
|
log_facility = LOG_LOCAL0
|
|
log_name="kamailio"
|
|
|
|
####### Alias Parameters #########
|
|
auto_aliases = yes
|
|
|
|
####### Binding Parameters #########
|
|
tos = IPTOS_LOWDELAY
|
|
|
|
####### TCP Parameters #########
|
|
tcp_children = TCP_CHILDREN
|
|
disable_tcp = no
|
|
tcp_max_connections = 4096
|
|
tcp_connection_lifetime = 3605
|
|
tcp_accept_aliases = no
|
|
tcp_async = yes
|
|
tcp_connect_timeout = 10
|
|
tcp_conn_wq_max = 65536
|
|
tcp_crlf_ping = yes
|
|
tcp_delayed_ack = yes
|
|
tcp_fd_cache = yes
|
|
tcp_keepalive = yes
|
|
tcp_keepcnt = 3
|
|
tcp_keepidle = 30
|
|
tcp_keepintvl = 10
|
|
tcp_linger2 = 30
|
|
tcp_rd_buf_size = 80000
|
|
tcp_send_timeout = 10
|
|
tcp_wq_blk_size = 2100
|
|
tcp_wq_max = 10485760
|
|
|
|
####### UDP Parameters #########
|
|
udp4_raw = 0
|
|
#udp4_raw_mtu = 800
|
|
# # pmtu_discovery = no
|
|
#udp_mtu = 800
|
|
# #udp_mtu_try_proto = TCP
|
|
|
|
####### DNS Parameters #########
|
|
dns = no
|
|
rev_dns = no
|
|
dns_try_ipv6 = no
|
|
use_dns_cache = on
|
|
dns_cache_del_nonexp = yes
|
|
dns_cache_flags = 1
|
|
dns_cache_gc_interval = 120
|
|
dns_cache_init = 0
|
|
dns_cache_mem = 1000
|
|
dns_cache_negative_ttl = 60
|
|
dns_try_naptr = no
|
|
use_dns_failover = off
|
|
dns_srv_lb = off
|
|
|
|
####### SCTP Parameters #########
|
|
disable_sctp = yes
|
|
|
|
######## Kamailio mqueue module ########
|
|
loadmodule "mqueue.so"
|
|
|
|
######## Kamailio outbound module ########
|
|
loadmodule "outbound.so"
|
|
|
|
######## Kamailio stun module ########
|
|
loadmodule "stun.so"
|
|
|
|
######## Kamailio path module ########
|
|
loadmodule "path.so"
|
|
|
|
######## Kamailio ipops module ########
|
|
loadmodule "ipops.so"
|
|
|
|
######## Kamailio control connector module ########
|
|
loadmodule "ctl.so"
|
|
modparam("ctl", "binrpc_buffer_size", 4096)
|
|
loadmodule "cfg_rpc.so"
|
|
loadmodule "cfgutils.so"
|
|
loadmodule "corex.so"
|
|
|
|
######## Kamailio uuid module ########
|
|
loadmodule "uuid.so"
|
|
|
|
######## Kamailio core extensions module ########
|
|
loadmodule "kex.so"
|
|
|
|
######## Transaction (stateful) module ########
|
|
loadmodule "tm.so"
|
|
loadmodule "tmx.so"
|
|
modparam("tm", "auto_inv_100", 1)
|
|
modparam("tm", "auto_inv_100_reason", "Attempting to connect your call")
|
|
modparam("tm", "cancel_b_method", 2)
|
|
modparam("tm", "ruri_matching", 0)
|
|
modparam("tm", "failure_reply_mode", 3)
|
|
# modparam("tm", "fr_timer", 30000)
|
|
# modparam("tm", "fr_inv_timer", 120000)
|
|
|
|
######## Stateless replier module ########
|
|
loadmodule "sl.so"
|
|
|
|
######## Record-Route and Route module ########
|
|
loadmodule "rr.so"
|
|
modparam("rr", "enable_full_lr", 1)
|
|
modparam("rr", "enable_double_rr", 1)
|
|
|
|
######## Max-Forward processor module ########
|
|
loadmodule "maxfwd.so"
|
|
modparam("maxfwd", "max_limit", 50)
|
|
|
|
######## SIP utilities [requires sl] ########
|
|
loadmodule "siputils.so"
|
|
|
|
######## SIP message formatting sanity checks [requires sl] ########
|
|
loadmodule "sanity.so"
|
|
modparam("sanity", "default_checks", 1511)
|
|
modparam("sanity", "uri_checks", 7)
|
|
modparam("sanity", "autodrop", 0)
|
|
|
|
######## Text operations module ########
|
|
loadmodule "textops.so"
|
|
loadmodule "textopsx.so"
|
|
|
|
######## Generic Hash Table container in shared memory ########
|
|
loadmodule "htable.so"
|
|
modparam("htable", "htable", "associations=>size=16;autoexpire=7200")
|
|
modparam("htable", "htable", "redirects=>size=16;autoexpire=5")
|
|
|
|
######## Pseudo-Variables module ########
|
|
loadmodule "pv.so"
|
|
|
|
######## Advanced logger module ########
|
|
loadmodule "xlog.so"
|
|
|
|
######## UAC ########
|
|
loadmodule "uac.so"
|
|
|
|
######## AVP's ########
|
|
loadmodule "avp.so"
|
|
loadmodule "avpops.so"
|
|
|
|
######## UAC Redirection module ########
|
|
loadmodule "uac_redirect.so"
|
|
|
|
#### json rpc ####
|
|
loadmodule "jsonrpcs.so"
|
|
|
|
####### SQL OPS module ##########
|
|
loadmodule "sqlops.so"
|
|
modparam("sqlops","sqlcon", "cb=>KAZOO_DB_URL")
|
|
modparam("sqlops","sqlcon", "exec=>KAZOO_DB_URL")
|
|
|
|
####### DATABASE module ##########
|
|
loadmodule "db_KAMAILIO_DBMS.so"
|
|
|
|
####### Kazoo Integration module ##########
|
|
loadmodule "kazoo.so"
|
|
modparam("kazoo", "pua_mode", MY_AMQP_PUA_MODE)
|
|
modparam("kazoo", "amqp_primary_zone", "MY_AMQP_ZONE")
|
|
modparam("kazoo", "amqp_query_timeout_avp", "$avp(kz_timeout)")
|
|
modparam("kazoo", "node_hostname", "MY_HOSTNAME")
|
|
modparam("kazoo", "amqp_heartbeats", MY_AMQP_HEARTBEATS)
|
|
modparam("kazoo", "amqp_max_channels", MY_AMQP_MAX_CHANNELS)
|
|
modparam("kazoo", "amqp_consumer_processes", MY_AMQP_CONSUMER_PROCESSES)
|
|
modparam("kazoo", "amqp_consumer_workers", MY_AMQP_CONSUMER_WORKERS)
|
|
## amqp connections
|
|
modparam("kazoo", "amqp_connection", "MY_AMQP_URL")
|
|
#!ifdef MY_AMQP_SECONDARY_URL
|
|
modparam("kazoo", "amqp_connection", "MY_AMQP_SECONDARY_URL")
|
|
#!endif
|
|
#!ifdef MY_AMQP_TERTIARY_URL
|
|
modparam("kazoo", "amqp_connection", "MY_AMQP_TERTIARY_URL")
|
|
#!endif
|
|
#!ifdef MY_AMQP_QUATERNARY_URL
|
|
modparam("kazoo", "amqp_connection", "MY_AMQP_QUATERNARY_URL")
|
|
#!endif
|
|
#!ifdef MY_AMQP_QUINARY_URL
|
|
modparam("kazoo", "amqp_connection", "MY_AMQP_QUINARY_URL")
|
|
#!endif
|
|
#!ifdef MY_AMQP_SENARY_URL
|
|
modparam("kazoo", "amqp_connection", "MY_AMQP_SENARY_URL")
|
|
#!endif
|
|
#!ifdef MY_AMQP_SEPTENARY_URL
|
|
modparam("kazoo", "amqp_connection", "MY_AMQP_SEPTENARY_URL")
|
|
#!endif
|
|
#!ifdef MY_AMQP_OCTONARY_URL
|
|
modparam("kazoo", "amqp_connection", "MY_AMQP_OCTONARY_URL")
|
|
#!endif
|
|
#!ifdef MY_AMQP_NONARY_URL
|
|
modparam("kazoo", "amqp_connection", "MY_AMQP_NONARY_URL")
|
|
#!endif
|
|
#!ifdef MY_AMQP_DENARY_URL
|
|
modparam("kazoo", "amqp_connection", "MY_AMQP_DENARY_URL")
|
|
#!endif
|
|
|
|
|
|
###### kazoo bindings ######
|
|
include_file "kazoo-bindings.cfg"
|
|
|
|
####### Role Configurations ##########
|
|
#!ifdef DISPATCHER_ROLE
|
|
include_file "dispatcher-role.cfg"
|
|
#!endif
|
|
#!ifdef REGISTRAR_ROLE
|
|
include_file "registrar-role.cfg"
|
|
#!endif
|
|
#!ifdef PRESENCE_ROLE
|
|
include_file "presence-role.cfg"
|
|
#!endif
|
|
#!ifdef MESSAGE_ROLE
|
|
include_file "message-role.cfg"
|
|
#!endif
|
|
#!ifdef NAT_TRAVERSAL_ROLE
|
|
include_file "nat-traversal-role.cfg"
|
|
#!endif
|
|
#!ifdef WEBSOCKETS_ROLE
|
|
include_file "websockets-role.cfg"
|
|
#!endif
|
|
#!ifdef TLS_ROLE
|
|
include_file "tls-role.cfg"
|
|
#!endif
|
|
#!ifdef ACCOUNTING_ROLE
|
|
include_file "accounting-role.cfg"
|
|
#!endif
|
|
#!ifdef ANTIFLOOD_ROLE
|
|
include_file "antiflood-role.cfg"
|
|
#!endif
|
|
#!ifdef TRAFFIC_FILTER_ROLE
|
|
include_file "traffic-filter-role.cfg"
|
|
#!endif
|
|
#!ifdef ACL_ROLE
|
|
include_file "acl-role.cfg"
|
|
#!endif
|
|
#!ifdef RATE_LIMITER_ROLE
|
|
include_file "rate-limiter-role.cfg"
|
|
#!endif
|
|
#!ifdef PUSHER_ROLE
|
|
include_file "pusher-role.cfg"
|
|
#!endif
|
|
#!ifdef RESPONDER_ROLE
|
|
include_file "responder-role.cfg"
|
|
#!endif
|
|
#!ifdef NODES_ROLE
|
|
include_file "nodes-role.cfg"
|
|
#!endif
|
|
#!ifdef SIP_TRACE_ROLE
|
|
include_file "sip_trace-role.cfg"
|
|
#!endif
|
|
|
|
|
|
####### Permissions module ##########
|
|
loadmodule "permissions.so"
|
|
modparam("permissions", "db_url", "KAZOO_DB_URL")
|
|
modparam("permissions", "db_mode", 1)
|
|
|
|
|
|
####### DEBUG ######
|
|
loadmodule "debugger.so"
|
|
modparam("debugger", "mod_hash_size", 5)
|
|
modparam("debugger", "mod_level_mode", 1)
|
|
|
|
####### Routing Logic ########
|
|
route
|
|
{
|
|
route(SANITY_CHECK);
|
|
|
|
route(CHECK_RETRANS);
|
|
|
|
# log the basic info regarding this call
|
|
xlog("L_INFO", "$ci|start|received $pr request $rm $ou\n");
|
|
xlog("L_INFO", "$ci|log|source $si:$sp -> $Ri:$Rp\n");
|
|
xlog("L_INFO", "$ci|log|from $fu\n");
|
|
xlog("L_INFO", "$ci|log|to $tu\n");
|
|
|
|
route(CLASSIFY_SOURCE);
|
|
|
|
#!ifdef ANTIFLOOD_ROLE
|
|
route(ANTIFLOOD_RATE_LIMIT);
|
|
route(ANITFLOOD_AUTH_LIMIT);
|
|
#!endif
|
|
|
|
#!ifdef TRAFFIC_FILTER_ROLE
|
|
route(FILTER_REQUEST);
|
|
#!endif
|
|
|
|
#!ifdef ACL_ROLE
|
|
route(ACL_CHECK);
|
|
#!endif
|
|
|
|
#!ifdef RATE_LIMITER_ROLE
|
|
route(DOS_PREVENTION);
|
|
#!endif
|
|
|
|
#!ifdef WEBSOCKETS_ROLE
|
|
route(HANDLE_WEBSOCKETS);
|
|
#!endif
|
|
|
|
route(HANDLE_OPTIONS);
|
|
|
|
route(HANDLE_NOTIFY);
|
|
|
|
#!ifdef AUTHORIZATION_ROLE
|
|
route(AUTHORIZATION_CHECK);
|
|
#!endif
|
|
|
|
route(HANDLE_MESSAGE);
|
|
|
|
#!ifdef PRESENCE_ROLE
|
|
route(HANDLE_SUBSCRIBE);
|
|
route(HANDLE_PUBLISH);
|
|
#!endif
|
|
|
|
#!ifdef REGISTRAR_ROLE
|
|
route(HANDLE_REGISTER);
|
|
#!endif
|
|
|
|
route(HANDLE_IN_DIALOG_REQUESTS);
|
|
|
|
route(PREPARE_INITIAL_REQUESTS);
|
|
|
|
#!ifdef PUSHER_ROLE
|
|
route(PUSHER_ROUTE);
|
|
#!endif
|
|
|
|
#!ifdef RESPONDER_ROLE
|
|
if (isflagset(FLAG_INTERNALLY_SOURCED)) {
|
|
route(HANDLE_RESPOND);
|
|
}
|
|
#!endif
|
|
|
|
#!ifdef DISPATCHER_ROLE
|
|
if (!isflagset(FLAG_INTERNALLY_SOURCED)) {
|
|
route(DISPATCHER_FIND_ROUTES);
|
|
}
|
|
#!endif
|
|
|
|
route(RELAY);
|
|
}
|
|
|
|
route[CHECK_RETRANS]
|
|
{
|
|
# handle retransmissions
|
|
if (!is_method("ACK")) {
|
|
if(t_precheck_trans()) {
|
|
t_check_trans();
|
|
exit;
|
|
}
|
|
t_check_trans();
|
|
}
|
|
}
|
|
|
|
route[SANITY_CHECK]
|
|
{
|
|
if (!sanity_check()) {
|
|
xlog("L_WARN", "$ci|end|message from $si:$sp is insane\n");
|
|
exit;
|
|
}
|
|
|
|
if (!mf_process_maxfwd_header("10")) {
|
|
xlog("L_WARN", "$ci|end|too much hops, not enough barley from $si:$sp\n");
|
|
send_reply("483", "Too Many Hops");
|
|
exit;
|
|
}
|
|
|
|
if ($ua == "friendly-scanner" ||
|
|
$ua == "sundayddr" ||
|
|
$ua == "pplsip" ||
|
|
$ua =~ "NiceGuy" ||
|
|
$ua =~ "sipcli" ) {
|
|
xlog("L_WARN", "$ci|end|dropping message with user-agent $ua from $si:$sp\n");
|
|
exit;
|
|
}
|
|
}
|
|
|
|
route[CLASSIFY_SOURCE]
|
|
{
|
|
#!ifdef DISPATCHER_ROLE
|
|
route(DISPATCHER_CLASSIFY_SOURCE);
|
|
#!endif
|
|
|
|
if (isflagset(FLAG_INTERNALLY_SOURCED) || allow_source_address(TRUSTED_ADR_GROUP) || is_myself($si)) {
|
|
xlog("L_INFO", "$ci|log|request from trusted IP\n");
|
|
setflag(FLAG_TRUSTED_SOURCE);
|
|
}
|
|
}
|
|
|
|
route[HANDLE_OPTIONS]
|
|
{
|
|
if (is_method("OPTIONS")) {
|
|
if (isflagset(FLAG_INTERNALLY_SOURCED)) {
|
|
route(INTERNAL_TO_EXTERNAL_RELAY);
|
|
} else {
|
|
#!ifdef TRAFFIC_FILTER_ROLE
|
|
if (!isflagset(FLAG_TRUSTED_SOURCE)) {
|
|
route(FILTER_REQUEST_DOMAIN);
|
|
}
|
|
#!endif
|
|
|
|
#!ifdef NAT_TRAVERSAL_ROLE
|
|
route(NAT_TEST_AND_CORRECT);
|
|
#!endif
|
|
|
|
sl_send_reply("200", "Rawr!!");
|
|
}
|
|
exit;
|
|
}
|
|
}
|
|
|
|
route[HANDLE_NOTIFY]
|
|
{
|
|
if (has_totag())
|
|
return;
|
|
|
|
if (is_method("NOTIFY")) {
|
|
if (isflagset(FLAG_INTERNALLY_SOURCED)) {
|
|
if (loose_route()) {
|
|
xlog("L_INFO", "$ci|log|Able to loose-route. Cool beans!\n");
|
|
}
|
|
|
|
#!ifdef REGISTRAR_ROLE
|
|
if (registered("location")) {
|
|
lookup("location");
|
|
xlog("L_INFO", "$ci|log|routing to $ruid\n");
|
|
}
|
|
#!endif
|
|
|
|
route(INTERNAL_TO_EXTERNAL_RELAY);
|
|
} else {
|
|
#!ifdef TRAFFIC_FILTER_ROLE
|
|
if (!isflagset(FLAG_TRUSTED_SOURCE)) {
|
|
route(FILTER_REQUEST_DOMAIN);
|
|
}
|
|
#!endif
|
|
|
|
#!ifdef WEBSOCKETS_ROLE
|
|
route(NAT_WEBSOCKETS_CORRECT);
|
|
#!endif
|
|
|
|
#!ifdef NAT_TRAVERSAL_ROLE
|
|
route(NAT_TEST_AND_CORRECT);
|
|
#!endif
|
|
|
|
if($hdr(Event) == "keep-alive") {
|
|
xlog("L_INFO", "$ci|stop|replying to keep alive\n");
|
|
sl_send_reply("405", "Stay Alive / Method Not Allowed");
|
|
} else {
|
|
xlog("L_INFO", "$ci|stop|consuming event $hdr(Event)\n");
|
|
sl_send_reply("200", "Rawr!!");
|
|
}
|
|
}
|
|
exit;
|
|
}
|
|
}
|
|
|
|
route[HANDLE_MESSAGE]
|
|
{
|
|
#!ifdef MESSAGE_ROLE
|
|
if (is_method("MESSAGE")) {
|
|
xlog("L_INFO", "$ci|MESSAGE from $fu to $tu\n");
|
|
if (isflagset(FLAG_INTERNALLY_SOURCED) || src_ip == myself) {
|
|
xlog("L_INFO", "$ci| routing MESSAGE to external from $fu to $tu\n");
|
|
if (registered("location")) {
|
|
lookup("location");
|
|
xlog("L_INFO", "$ci|log|routing to $ruid\n");
|
|
}
|
|
#!ifdef TRAFFIC_FILTER_ROLE
|
|
} else if (!isflagset(FLAG_TRUSTED_SOURCE)
|
|
&& $rd =~ "[0-9]{1,3}\.[0-9]{1,3}.[0-9]{1,3}\.[0-9]{1,3}") {
|
|
xlog("L_WARN", "$ci|end|dropping MESSAGE request with IP domain\n");
|
|
exit();
|
|
#!endif
|
|
} else {
|
|
xlog("L_WARN", "$ci|end|MESSAGE $(hdr(Content-Type))\n");
|
|
if( $hdr(Content-Type) == "application/im-iscomposing+xml" ) {
|
|
xlog("L_WARN", "$ci|end|dropping MESSAGE application/im-iscomposing+xml\n");
|
|
sl_send_reply("200", "OK");
|
|
} else if( $hdr(Content-Type) == "message/imdn+xml" ) {
|
|
xlog("L_WARN", "$ci|end|dropping MESSAGE message/imdn+xml\n");
|
|
sl_send_reply("202", "Accepted");
|
|
} else {
|
|
route(DISPATCHER_FIND_ROUTES);
|
|
}
|
|
}
|
|
route(RELAY);
|
|
}
|
|
#!else
|
|
if (is_method("MESSAGE")) {
|
|
if (!isflagset(FLAG_INTERNALLY_SOURCED)) {
|
|
sl_send_reply("202", "delivered to /dev/null");
|
|
exit();
|
|
}
|
|
route(RELAY);
|
|
}
|
|
#!endif
|
|
}
|
|
|
|
|
|
route[HANDLE_IN_DIALOG_REQUESTS]
|
|
{
|
|
if (has_totag()) {
|
|
if (is_method("INVITE")) {
|
|
setflag(FLAG_SESSION_PROGRESS);
|
|
record_route();
|
|
}
|
|
if (loose_route()) {
|
|
|
|
#!ifdef ACCOUNTING_ROLE
|
|
if (is_method("BYE")) {
|
|
setflag(FLAG_ACC);
|
|
setflag(FLAG_ACCFAILED);
|
|
}
|
|
#!endif
|
|
|
|
#!ifdef NAT_TRAVERSAL_ROLE
|
|
if(!isdsturiset()) {
|
|
handle_ruri_alias();
|
|
}
|
|
#!endif
|
|
|
|
xlog("L_INFO", "$ci|log|loose_route in-dialog message\n");
|
|
# Called on in-dialog requests
|
|
# If the request in an Invite for on hold from external to internal,
|
|
# associate the contact with the media server
|
|
# if Invite for on hold, we need to associate the contact URI with the next hop
|
|
if (is_method("INVITE") && !isflagset(FLAG_INTERNALLY_SOURCED) && is_audio_on_hold()) {
|
|
setflag(FLAG_ASSOCIATE_USER);
|
|
}
|
|
if ( is_method("NOTIFY") ) {
|
|
# Add Record-Route for in-dialog NOTIFY as per RFC 6665.
|
|
record_route();
|
|
}
|
|
route(RELAY);
|
|
} else if (isflagset(FLAG_INTERNALLY_SOURCED)) {
|
|
xlog("L_INFO", "$ci|log|relay internally sourced in-dialog message without loose_route\n");
|
|
route(RELAY);
|
|
} else if (t_check_trans()) {
|
|
xlog("L_INFO", "$ci|log|allow message for a known transaction\n");
|
|
route(RELAY);
|
|
} else {
|
|
xlog("L_INFO", "$ci|log|message had a to-tag but can't be loose routed\n");
|
|
sl_send_reply("481", "Call Leg/Transaction Does Not Exist");
|
|
}
|
|
exit();
|
|
}
|
|
}
|
|
|
|
route[PREPARE_INITIAL_REQUESTS]
|
|
{
|
|
if (is_method("CANCEL")) {
|
|
if (t_check_trans()) {
|
|
route(RELAY);
|
|
} else {
|
|
sl_send_reply("481", "Call leg/transaction does not exist");
|
|
}
|
|
exit();
|
|
} else if (is_method("ACK")) {
|
|
if (t_check_trans()) {
|
|
route(RELAY);
|
|
}
|
|
exit();
|
|
}
|
|
|
|
if (is_method("UPDATE")) {
|
|
xlog("L_WARN", "$ci|end|update outside dialog not allowed\n");
|
|
send_reply("403", "Dialog does not exist");
|
|
break;
|
|
}
|
|
|
|
if (is_method("BYE|PRACK")) {
|
|
xlog("L_WARN", "$ci|end|originating subsequent requests outside dialog not allowed\n");
|
|
send_reply("403", "Dialog does not exist");
|
|
break;
|
|
}
|
|
|
|
if (loose_route()) {
|
|
#!ifdef REGISTRAR_ROLE
|
|
$xavp(regcfg=>match_received) = $su;
|
|
if(registered("location", "$rz:$Au", 2) == 1) {
|
|
xlog("L_INFO", "$ci|log|allowing initial route-set for $Au\n");
|
|
} else {
|
|
#!endif
|
|
xlog("L_WARN", "$ci|end|dropping initial request with route-set\n");
|
|
sl_send_reply("403", "No pre-loaded routes");
|
|
exit();
|
|
#!ifdef REGISTRAR_ROLE
|
|
}
|
|
#!endif
|
|
}
|
|
|
|
record_route();
|
|
}
|
|
|
|
route[RELAY]
|
|
{
|
|
#!ifdef SIP_TRACE_ROLE
|
|
route(SEND_SIP_TRACE);
|
|
#!endif
|
|
|
|
if (isflagset(FLAG_INTERNALLY_SOURCED)) {
|
|
route(INTERNAL_TO_EXTERNAL_RELAY);
|
|
#!ifdef MESSAGE_ROLE
|
|
} else if (is_method("MESSAGE") && src_ip == myself) {
|
|
route(INTERNAL_TO_EXTERNAL_RELAY);
|
|
#!endif
|
|
} else {
|
|
route(EXTERNAL_TO_INTERNAL_RELAY);
|
|
}
|
|
|
|
exit();
|
|
}
|
|
|
|
route[INTERNAL_TO_EXTERNAL_RELAY]
|
|
{
|
|
#!ifdef ACCOUNTING_ROLE
|
|
if (is_method("INVITE")) {
|
|
setflag(FLAG_ACC);
|
|
setflag(FLAG_ACCFAILED);
|
|
}
|
|
#!endif
|
|
|
|
#!ifdef REGISTRAR_ROLE
|
|
if ($hdr(X-KAZOO-AOR) != $null) {
|
|
xlog("L_INFO", "$ci|log|using AOR $hdr(X-KAZOO-AOR)\n");
|
|
if ($hdr(X-KAZOO-INVITE-FORMAT) == "contact") {
|
|
if(lookup("location", "$hdr(X-KAZOO-AOR)") > 0){
|
|
xlog("L_INFO", "$ci|end|routing to contact $ru\n");
|
|
} else {
|
|
xlog("L_INFO", "$ci|end|lookup for AOR $hdr(X-KAZOO-AOR) failed\n");
|
|
sl_send_reply("404", "Not registered");
|
|
exit;
|
|
}
|
|
} else if (reg_fetch_contacts("location", "$hdr(X-KAZOO-AOR)", "callee")) {
|
|
$du = $(ulc(callee=>received));
|
|
$fs = $(ulc(callee=>socket));
|
|
xlog("L_INFO", "$ci|log|routing $hdr(X-KAZOO-AOR) to $du via $fs\n");
|
|
} else if ($hdr(X-KAZOO-PUSHER-Token-ID) != $null) {
|
|
xlog("L_INFO", "$ci|log|ignoring missing registration while waiting for push notification response\n");
|
|
t_on_reply("EXTERNAL_REPLY");
|
|
t_set_fr(0, 10000);
|
|
t_release();
|
|
exit;
|
|
} else {
|
|
xlog("L_INFO", "$ci|end|user is not registered\n");
|
|
sl_send_reply("404", "Not registered");
|
|
exit;
|
|
}
|
|
}
|
|
#!endif
|
|
|
|
remove_hf_re("^X-.*");
|
|
|
|
t_on_reply("EXTERNAL_REPLY");
|
|
|
|
t_set_fr(0, 10000);
|
|
|
|
t_relay();
|
|
}
|
|
|
|
route[EXTERNAL_TO_INTERNAL_RELAY]
|
|
{
|
|
#!ifdef ACCOUNTING_ROLE
|
|
if (is_method("INVITE") && is_present_hf("Proxy-Authorization")) {
|
|
setflag(FLAG_ACC);
|
|
setflag(FLAG_ACCFAILED);
|
|
}
|
|
#!endif
|
|
|
|
#!ifdef NAT_TRAVERSAL_ROLE
|
|
if (!isflagset(FLAG_INTERNALLY_SOURCED)) {
|
|
route(NAT_TEST_AND_CORRECT);
|
|
}
|
|
#!endif
|
|
|
|
remove_hf_re("^X-.*");
|
|
|
|
append_hf("X-AUTH-IP: $si\r\n");
|
|
append_hf("X-AUTH-PORT: $sp\r\n");
|
|
|
|
#!ifdef REGISTRAR_ROLE
|
|
route(ADD_AUTHORIZATION_HEADERS);
|
|
#!endif
|
|
|
|
t_on_reply("INTERNAL_REPLY");
|
|
t_on_failure("INTERNAL_FAULT");
|
|
|
|
t_set_fr(0, 1000);
|
|
|
|
t_relay();
|
|
}
|
|
|
|
onreply_route[EXTERNAL_REPLY]
|
|
{
|
|
xlog("L_INFO", "$ci|log|external reply $T_reply_code\n");
|
|
|
|
#!ifdef WEBSOCKETS_ROLE
|
|
route(NAT_WEBSOCKETS_CORRECT);
|
|
#!endif
|
|
|
|
#!ifdef NAT_TRAVERSAL_ROLE
|
|
route(NAT_TEST_AND_CORRECT);
|
|
#!endif
|
|
|
|
#!ifdef ACL_ROLE
|
|
setflag(FLAG_IS_REPLY);
|
|
route(ACL_CHECK);
|
|
#!endif
|
|
|
|
#!ifdef RATE_LIMITER_ROLE
|
|
setflag(FLAG_IS_REPLY);
|
|
route(DOS_PREVENTION);
|
|
#!endif
|
|
|
|
#!ifdef MESSAGE_ROLE
|
|
if (is_method("MESSAGE")) {
|
|
route(MESSAGE_REPLY);
|
|
}
|
|
#!endif
|
|
}
|
|
|
|
onreply_route[INTERNAL_REPLY]
|
|
{
|
|
# this route handles replies that are comming from our media server
|
|
xlog("L_INFO", "$ci|start|received internal reply $T_reply_code $rr\n");
|
|
xlog("L_INFO", "$ci|log|source $si:$sp\n");
|
|
|
|
#!ifdef WEBSOCKETS_ROLE
|
|
route(NAT_WEBSOCKETS_CORRECT);
|
|
#!endif
|
|
|
|
#!ifdef ACL_ROLE
|
|
setflag(FLAG_IS_REPLY);
|
|
route(ACL_CHECK);
|
|
#!endif
|
|
|
|
#!ifdef RATE_LIMITER_ROLE
|
|
setflag(FLAG_IS_REPLY);
|
|
route(DOS_PREVENTION);
|
|
#!endif
|
|
|
|
if (is_method("INVITE") &&
|
|
!isflagset(FLAG_SESSION_PROGRESS) &&
|
|
t_check_status("(180)|(183)|(200)")
|
|
) {
|
|
if ($avp(AVP_REDIRECT_KEY) != $null &&
|
|
$sht(redirects=>$avp(AVP_REDIRECT_KEY)) != $null
|
|
) {
|
|
xlog("L_INFO", "$ci|log|removing redirect mapping $avp(AVP_REDIRECT_KEY)\n");
|
|
$sht(redirects=>$avp(AVP_REDIRECT_KEY)) = $null;
|
|
}
|
|
xlog("L_INFO", "$ci|log|call setup, now ignoring abnormal termination\n");
|
|
setflag(FLAG_SESSION_PROGRESS);
|
|
}
|
|
|
|
if ($rs < 300) {
|
|
xlog("L_INFO", "$ci|pass|$T_req($si):$T_req($sp)\n");
|
|
}
|
|
|
|
$var(reply_reason) = $rr;
|
|
}
|
|
|
|
failure_route[INTERNAL_FAULT]
|
|
{
|
|
# this branch handles failures (>=300) to our media servers,
|
|
# which we can sometimes overcome by routing to another server
|
|
|
|
# if the failure cause was due to the transaction being
|
|
# cancelled then we are complete
|
|
if (t_is_canceled()) {
|
|
xlog("L_INFO", "$ci|log|transaction was cancelled\n");
|
|
exit;
|
|
}
|
|
|
|
# Handle redirects
|
|
if (t_check_status("302")) {
|
|
$var(redirect) = @from.uri.user + "@" + @from.uri.host + "->"
|
|
+ $T_rpl($(ct{tobody.user})) + "@" + $T_rpl($(ct{tobody.host}));
|
|
if($T_rpl($hdr(X-Redirect-Server)) != $null) {
|
|
$sht(redirects=>$var(redirect)) = $T_rpl($hdr(X-Redirect-Server));
|
|
xlog("L_INFO", "$ci|log|stored redirect mapping $var(redirect) to $T_rpl($hdr(X-Redirect-Server))\n");
|
|
}
|
|
route(INTERNAL_REDIRECT);
|
|
} else if (!t_check_status("407") &&
|
|
$avp(AVP_REDIRECT_KEY) != $null &&
|
|
$sht(redirects=>$avp(AVP_REDIRECT_KEY)) != $null
|
|
) {
|
|
xlog("L_INFO", "$ci|log|removing redirect mapping $avp(AVP_REDIRECT_KEY)\n");
|
|
$sht(redirects=>$avp(AVP_REDIRECT_KEY)) = $null;
|
|
}
|
|
|
|
remove_hf_re("^X-.*");
|
|
|
|
# change 6xx to 4xx
|
|
if (t_check_status("6[0-9][0-9]") && !t_check_status("600|603|604|606")) {
|
|
$var(new_code) = "4" + $(T_reply_code{s.substr,1,0});
|
|
xlog("L_INFO", "$ci|log|sending 6XX reply as $var(new_code) $var(reply_reason)\n");
|
|
t_reply("$(var(new_code){s.int})", "$var(reply_reason)");
|
|
|
|
# if the failure case was something that we should recover
|
|
# from then try to find a new media server
|
|
} else if ($var(reply_reason) =~ "call barred") {
|
|
xlog("L_INFO", "$ci|log|failure route ignoring call barred\n");
|
|
} else if (isflagset(FLAG_SESSION_PROGRESS)) {
|
|
xlog("L_INFO", "$ci|log|failure route ignoring failure after session progress\n");
|
|
} else if (t_check_status("403") && $var(reply_reason)=="Forbidden") {
|
|
xlog("L_WARNING", "$ci|log|failure route ignoring. Failed auth from IP $si\n");
|
|
} else if (t_check_status("(401)|(407)|(486)|(403)")) {
|
|
xlog("L_INFO", "$ci|log|failure route ignoring auth reply $T_reply_code $var(reply_reason)\n");
|
|
} else if (t_check_status("402")) {
|
|
xlog("L_INFO", "$ci|log|failure route overriding reply code 402 with 486\n");
|
|
send_reply("486", "Insufficient Funds");
|
|
} else if (t_check_status("(4[0-9][0-9])|(5[0-9][0-9])")) {
|
|
xlog("L_INFO", "$ci|start|received failure reply $T_reply_code $rr\n");
|
|
|
|
#!ifdef DISPATCHER_ROLE
|
|
route(DISPATCHER_NEXT_ROUTE);
|
|
#!endif
|
|
|
|
send_reply("486", "Unable to Comply");
|
|
} else {
|
|
xlog("L_INFO", "$ci|log|failure route ignoring reply $T_reply_code $rr\n");
|
|
}
|
|
xlog("L_INFO", "$ci|pass|$si:$sp\n");
|
|
}
|
|
|
|
|
|
route[INTERNAL_REDIRECT]
|
|
{
|
|
$var(ds_group) = 1;
|
|
$var(contact_uri) = $(ct{tobody.user}) + "@" + $(ct{tobody.host});
|
|
$var(redirect) = @from.uri.user + "@" + @from.uri.host + "->"
|
|
+ @ruri.user + "@" + @ruri.host;
|
|
if ($sht(redirects=>$var(redirect)) != $null) {
|
|
$var(prefered_route) = $sht(redirects=>$var(redirect));
|
|
xlog("L_INFO", "$ci|log|found redirect for $var(redirect) : $var(prefered_route)\n");
|
|
$du = $var(prefered_route);
|
|
$avp(AVP_REDIRECT_KEY) = $var(redirect);
|
|
t_on_reply("INTERNAL_REPLY");
|
|
t_on_failure("INTERNAL_FAULT");
|
|
t_set_fr(0, 1000);
|
|
t_relay();
|
|
exit();
|
|
}
|
|
}
|
|
|
|
onsend_route {
|
|
if (isflagset(FLAG_ASSOCIATE_USER)) {
|
|
$var(user_source) = $(ct{tobody.user}) + "@" + $si + ":" + $sp;
|
|
xlog("L_INFO", "$ci|log|associate traffic from $var(user_source) with media server sip:$sndto(ip):$sndto(port)\n");
|
|
$sht(associations=>$var(user_source))= "sip:" + $sndto(ip) + ":" + $sndto(port);
|
|
}
|
|
|
|
xlog("L_INFO", "$ci|pass|$sndfrom(ip):$sndfrom(port) -> $sndto(ip):$sndto(port)\n");
|
|
}
|
|
|
|
#!ifdef REGISTRAR_ROLE
|
|
route[ADD_AUTHORIZATION_HEADERS]
|
|
{
|
|
if (!is_method("INVITE|MESSAGE|REFER")) {
|
|
return;
|
|
}
|
|
|
|
$xavp(regcfg=>match_received) = $su;
|
|
if (registered("location","$fu", 2, 1) == 1) {
|
|
if($(xavp(ulattrs=>custom_channel_vars){kz.json,Account-ID}{s.len}) > 0)
|
|
append_hf("X-ecallmgr_Account-ID: $(xavp(ulattrs=>custom_channel_vars){kz.json,Account-ID})\r\n");
|
|
|
|
if($(xavp(ulattrs=>custom_channel_vars){kz.json,Authorizing-Type}{s.len}) > 0)
|
|
append_hf("X-ecallmgr_Authorizing-Type: $(xavp(ulattrs=>custom_channel_vars){kz.json,Authorizing-Type})\r\n");
|
|
|
|
if($(xavp(ulattrs=>custom_channel_vars){kz.json,Authorizing-ID}{s.len}) > 0)
|
|
append_hf("X-ecallmgr_Authorizing-ID: $(xavp(ulattrs=>custom_channel_vars){kz.json,Authorizing-ID})\r\n");
|
|
|
|
if($(xavp(ulattrs=>custom_channel_vars){kz.json,Username}{s.len}) > 0)
|
|
append_hf("X-ecallmgr_Username: $(xavp(ulattrs=>custom_channel_vars){kz.json,Username})\r\n");
|
|
|
|
if($(xavp(ulattrs=>custom_channel_vars){kz.json,Realm}{s.len}) > 0)
|
|
append_hf("X-ecallmgr_Realm: $(xavp(ulattrs=>custom_channel_vars){kz.json,Realm})\r\n");
|
|
|
|
if($(xavp(ulattrs=>custom_channel_vars){kz.json,Account-Realm}{s.len}) > 0)
|
|
append_hf("X-ecallmgr_Account-Realm: $(xavp(ulattrs=>custom_channel_vars){kz.json,Account-Realm})\r\n");
|
|
|
|
if($(xavp(ulattrs=>custom_channel_vars){kz.json,Account-Name}{s.len}) > 0)
|
|
append_hf("X-ecallmgr_Account-Name: $(xavp(ulattrs=>custom_channel_vars){kz.json,Account-Name})\r\n");
|
|
|
|
if($(xavp(ulattrs=>custom_channel_vars){kz.json,Presence-ID}{s.len}) > 0)
|
|
append_hf("X-ecallmgr_Presence-ID: $(xavp(ulattrs=>custom_channel_vars){kz.json,Presence-ID})\r\n");
|
|
|
|
if($(xavp(ulattrs=>custom_channel_vars){kz.json,Owner-ID}{s.len}) > 0)
|
|
append_hf("X-ecallmgr_Owner-ID: $(xavp(ulattrs=>custom_channel_vars){kz.json,Owner-ID})\r\n");
|
|
}
|
|
}
|
|
#!endif
|
|
|
|
#!ifdef PRESENCE_NOTIFY_INIT
|
|
event_route[tm:local-request]
|
|
{
|
|
route(PRESENCE_LOCAL_NOTIFY);
|
|
}
|
|
#!endif
|
|
|
|
# vim: tabstop=4 softtabstop=4 shiftwidth=4 expandtab
|