Open Source Sip: [OpenSIPStack] domain rewriting question ...

Up to Discussions in OpenSIPStack

7 Replies Last post: Oct 20, 2008 12:02 PM by Guest

Guest

Oct 1, 2008 10:01 PM

[OpenSIPStack] domain rewriting question

Guest

1. Oct 1, 2008 10:01 PM

in response to: Guest

Re: [OpenSIPStack] domain rewriting question

Andre,

I am 50/50 on this one. Half of the argument is as you have already
stated in this post. The other half is, this is the first time I have
encountered a GW that filters INVITE based on the from header. From is
a very weak form of identity assertion since it can be forged very
easily using any softphone. This is not mentioning that RFC 3261 not
only allows From to be forged easily but also allows it to be
anonymized. For example sip:anonymous@anonymous.invalid to indicate
that you want your identity to be private is aperfectly valid from
header. Thus, an implementation that relies on From to assert identity
is tantamount to a multitude of interoperability issues.

Never the less, I'll find time to make the domain rewrite for from
configurable via B2BUA Route as well. I guess these sorts of issues is
the main reason why SBC's are invented anyway.

Joegen

Andre Mamitzsch wrote:

Hi,

I just need some clarification regarding the domain rewriting concept of
the OpenSBC.

We are using the SBC in upper registration mode. The upper registration
works fine, all register messages are "hijacked" and domain rewriting is
performed. So, everything is fine here.

If I try to place a call, I receive the message "forbidden AOR" since no
rewriting in the From: field is performed while the domain in the To:
is replaced as expected.

In my opinion, the local domain (xyz.net) should be replaced by the
target domain (abc.net) in the From: as well. Or am I wrong here ?

Regards,

Andre

Our setup:

-------- ------- ---------
+ SIP UA ------------------ oSBC ------------------- SIP Net +
-------- ------- ---------
192.168.10.3 10.70.3.200 10.70.5.85
123456@sip.xyz.net sip.abc.net

2008/10/01 22:35:05.384 DTL: CID=0x0e3e ICT(3121173204)
Event(SIPMessage) - SIP/2.0 403 Forbidden AOR

2008/10/01 22:35:05.384 DBG: CID=0x0e3e TRANSACTION: (ICT) SIP/2.0 403
Forbidden AOR State: 3

2008/10/01 22:35:05.385 INF: CID=0x0e3e >>> ACK sip:789123@sip.abc.net
SIP/2.0 DST: 10.70.5.85:5060:UDP SRC: 10.70.3.200:5060 enc=0 bytes=656

2008/10/01 22:35:05.385 DBG: CID=0x0e3e

2008/10/01 22:35:05.385 DBG: CID=0x0e3e ACK sip:789123@sip.abc.net SIP/2.0

2008/10/01 22:35:05.385 DBG: CID=0x0e3e From: "123456"
;tag=ed94ab1c

2008/10/01 22:35:05.385 DBG: CID=0x0e3e To: "789123"
;tag=1_1146_t160890_14h5

2008/10/01 22:35:05.385 DBG: CID=0x0e3e Via: SIP/2.0/UDP
10.70.3.200:5060;iid=22771;branch=z9hG4bK4ec38706668edd119c5bdb9c33a35a27;uas-addr=10.70.5.85;rport

2008/10/01 22:35:05.385 DBG: CID=0x0e3e CSeq: 1 ACK

2008/10/01 22:35:05.385 DBG: CID=0x0e3e Call-ID:
ZTMzZjllOTQ1M2UwZGI0YWY2OGRlNjJjNTE2MGZmOTc.-0x0004

2008/10/01 22:35:05.385 DBG: CID=0x0e3e Contact:

2008/10/01 22:35:05.385 DBG: CID=0x0e3e User-Agent: OpenSBC v1.1.5-13

2008/10/01 22:35:05.385 DBG: CID=0x0e3e Max-Forwards: 70

2008/10/01 22:35:05.385 DBG: CID=0x0e3e Allow: INVITE, ACK, CANCEL,
OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO

2008/10/01 22:35:05.385 DBG: CID=0x0e3e Supported: timer

2008/10/01 22:35:05.385 DBG: CID=0x0e3e Session-Expires: 1800

2008/10/01 22:35:05.385 DBG: CID=0x0e3e Min-SE: 90

2008/10/01 22:35:05.385 DBG: CID=0x0e3e Content-Length: 0

2008/10/01 22:35:05.385 DBG: CID=0x0e3e

2008/10/01 22:35:05.385 DBG: CID=0x0e3e

This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
opensipstack-devel mailing list
opensipstack-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/opensipstack-devel

No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.173 / Virus Database: 270.7.5/1702 - Release Date: 10/1/2008 9:05 AM

Guest

2. Oct 2, 2008 9:12 AM

in response to: Guest

Re: [OpenSIPStack] domain rewriting question

Hello Joegen,

thanks for your reply. I'm with you regarding the 50/50 - I checked the
RFC3261 this morning.

Never the less, I'll find time to make the domain rewrite for from
configurable via B2BUA Route as well.

Please wait. I found something confusing today which I cannot explain
yet. I disabled the "Rewrite-Request-URI" and "Rewrite-TO-URI" and
things start working. The from field value ist replaced with the target
domain (abc.net) while the to: field remains unchanged and contains the
local domain value (xyz.net).

I' m totally confused now - I need to overthink that and come back to
you as soon as I verified the scenario.

Regards,

Andre

joegen@opensipstack.org schrieb:

-------- ------- ---------
+ SIP UA ------------------ oSBC ------------------- SIP Net +
-------- ------- ---------
192.168.10.3 10.70.3.200 10.70.5.85
123456@sip.xyz.net sip.abc.net

No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.173 / Virus Database: 270.7.5/1702 - Release Date: 10/1/2008 9:05 AM

Guest

3. Oct 7, 2008 8:22 AM

in response to: Guest

Re: [OpenSIPStack] domain rewriting question

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Joegen,

the rewrite of the domain in the from field seems to work until
1.1.5-10. After that, and I compiled almost everything what I could get
from CVS, it is not working anymore.

I tried to have a look at the differences in order to find out why it
changed and what was changed. I could identify that in Version 1.28 of
the Router.cxx the Feature:

Router.cxx: * Added feature to rewrite the FROM domain to a specific
domain in the B2BUA routes

was added.

At the moment I' m unable to find a good starting point - if you could
give me a small hint please...

Andre

Andre Mamitzsch schrieb:

Hello Joegen,

thanks for your reply. I'm with you regarding the 50/50 - I checked the
RFC3261 this morning.

Never the less, I'll find time to make the domain rewrite for from
configurable via B2BUA Route as well.

joegen@opensipstack.org schrieb:

-------- ------- ---------
+ SIP UA ------------------ oSBC ------------------- SIP Net +
-------- ------- ---------
192.168.10.3 10.70.3.200 10.70.5.85
123456@sip.xyz.net sip.abc.net

No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.173 / Virus Database: 270.7.5/1702 - Release Date: 10/1/2008 9:05 AM

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFI61SIQKZIuVrbkWoRAmYkAJ499q3C8J94fe6kOO3nM0fVr46IiwCfcnW+
cRvR/59pqaqnzhqiilg0B84=
=WEQ/
-----END PGP SIGNATURE-----

Guest

4. Oct 7, 2008 9:44 PM

in response to: Guest

Re: [OpenSIPStack] domain rewriting question

Andre

I will try to back-track the changes. That revision was checked in by
another developer. I need to confer with him before I conuld confirm
what really changed since then.

Joegen

André Mamitzsch wrote:

Andre Mamitzsch schrieb:

Hello Joegen,

thanks for your reply. I'm with you regarding the 50/50 - I checked the
RFC3261 this morning.

Never the less, I'll find time to make the domain rewrite for from
configurable via B2BUA Route as well.

joegen@opensipstack.org schrieb:

-------- ------- ---------
+ SIP UA ------------------ oSBC ------------------- SIP Net +
-------- ------- ---------
192.168.10.3 10.70.3.200 10.70.5.85
123456@sip.xyz.net sip.abc.net

No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.173 / Virus Database: 270.7.5/1702 - Release Date: 10/1/2008 9:05 AM

No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.173 / Virus Database: 270.7.6/1711 - Release Date: 10/6/2008 5:37 PM

Guest

5. Oct 18, 2008 1:04 PM

in response to: Guest

Re: [OpenSIPStack] domain rewriting question

Hello Joegen,

did you find some time to back-track the changes ? An update on that
would be highly appreciated.

Regards,

Andre

Joegen E. Baclor schrieb:

Andre Mamitzsch schrieb:

Hello Joegen,

thanks for your reply. I'm with you regarding the 50/50 - I checked the
RFC3261 this morning.

Never the less, I'll find time to make the domain rewrite for from
configurable via B2BUA Route as well.

joegen@opensipstack.org schrieb:

-------- ------- ---------
+ SIP UA ------------------ oSBC ------------------- SIP Net +
-------- ------- ---------
192.168.10.3 10.70.3.200 10.70.5.85
123456@sip.xyz.net sip.abc.net

No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.173 / Virus Database: 270.7.5/1702 - Release Date: 10/1/2008 9:05 AM

No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.173 / Virus Database: 270.7.6/1711 - Release Date: 10/6/2008 5:37 PM

Guest

6. Oct 20, 2008 6:23 AM

in response to: Guest

Re: [OpenSIPStack] domain rewriting question

Andre,

Sorry for the late response. I fired up an instance opensbc just a while ago. Added ~~sip:*;from=sipphone.com~~ sip:proxy01.sipphone.com and the from rewrite worked. So I am not sure what you are reporting here. I can't reproduce it. I have attached the log for my test call. You will see the the call went in with

From: joegen ;tag=fc663e5c

and went out as

From: joegen ;tag=fc663e5c

Joegen

Andre Mamitzsch wrote:

Hello Joegen,

did you find some time to back-track the changes ? An update on that
would be highly appreciated.

Regards,

Andre

Joegen E. Baclor schrieb:

Andre Mamitzsch schrieb:

Hello Joegen,

thanks for your reply. I'm with you regarding the 50/50 - I checked the
RFC3261 this morning.

Never the less, I'll find time to make the domain rewrite for from
configurable via B2BUA Route as well.

joegen@opensipstack.org schrieb:

-------- ------- ---------
+ SIP UA ------------------ oSBC ------------------- SIP Net +
-------- ------- ---------
192.168.10.3 10.70.3.200 10.70.5.85
123456@sip.xyz.net sip.abc.net

No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.173 / Virus Database: 270.7.5/1702 - Release Date: 10/1/2008 9:05 AM

No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.173 / Virus Database: 270.7.6/1711 - Release Date: 10/6/2008 5:37 PM

No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.173 / Virus Database: 270.8.1/1733 - Release Date: 10/19/2008 6:02 PM

2008/10/20 18:17:21.328 INF: CID=0x0000 SIP Stack CREATED
2008/10/20 18:17:21.343 PWL: CID=0x0000 Running in Back To Back with Upper Registration Mode
2008/10/20 18:17:21.375 PWL: CID=0x0000 OpalMan Created manager.
2008/10/20 18:17:21.375 PWL: CID=0x0000 Backdoor Trunk is starting
2008/10/20 18:17:21.375 INF: CID=0x0000 SIP Stack CREATED
2008/10/20 18:17:21.390 PWL: CID=0x0000 CALEA Trunk is starting
2008/10/20 18:17:21.390 INF: CID=0x0000 SIP Stack CREATED
2008/10/20 18:17:21.421 PWL: CID=0x0000 SIP Trunk is starting
2008/10/20 18:17:21.421 INF: CID=0x0000 SIP Stack CREATED
2008/10/20 18:17:21.437 PWL: CID=0x0000 OpenSBC STARTED
2008/10/20 18:17:21.437 PWL: CID=0x0000 Opened master socket for HTTP: 9999
2008/10/20 18:17:21.437 PWL: CID=0x0000 Configuration change detected
2008/10/20 18:17:21.453 PWL: CID=0x0000 SBCTrunkProcess::OnExternalConfigChanged() - PSimpleThread:00f46b40
2008/10/20 18:17:21.453 PWL: CID=0x0000 SBCTrunkProcess::OnExternalConfigChanged() - PSimpleThread:00f46780
2008/10/20 18:17:21.468 PWL: CID=0x0000 Setting SIP Log Level to 5
2008/10/20 18:17:21.468 PWL: CID=0x0000 Setting PTRACE Log Level to 5
2008/10/20 18:17:21.484 PWL: CID=0x0000 OpalMan Created manager.
2008/10/20 18:17:21.500 PWL: CID=0x0000 UA Thread 4196 Started
2008/10/20 18:17:21.500 DTL: CID=0x0000 Starting UDP Transport on *:15064
2008/10/20 18:17:21.500 PWL: CID=0x0000 Found 5 interfaces
2008/10/20 18:17:21.500 PWL: CID=0x0000 Found Interface Intel(R) 82566DC Gigabit Network Connection - Packet Scheduler Miniport addr=0.0.0.0
2008/10/20 18:17:21.500 PWL: CID=0x0000 Found Interface MS TCP Loopback interface addr=127.0.0.1
2008/10/20 18:17:21.500 PWL: CID=0x0000 Opening Listener at 127.0.0.1:15064
2008/10/20 18:17:21.500 PWL: CID=0x0000 *** LISTENER STARTED *** CALEA Trunk 127.0.0.1:15064
2008/10/20 18:17:21.500 PWL: CID=0x0000 Found Interface D-Link AirPlus G DWL-G122 Wireless USB Adapter(rev.C) - Packet Scheduler Miniport addr=192.168.0.253
2008/10/20 18:17:21.500 PWL: CID=0x0000 Opening Listener at 192.168.0.253:15064
2008/10/20 18:17:21.500 PWL: CID=0x0000 *** LISTENER STARTED *** CALEA Trunk 192.168.0.253:15064 *** DEFAULT LISTENER ***
2008/10/20 18:17:21.500 PWL: CID=0x0000 Found Interface VMware Virtual Ethernet Adapter for VMnet8 addr=192.168.6.1
2008/10/20 18:17:21.500 PWL: CID=0x0000 Opening Listener at 192.168.6.1:15064
2008/10/20 18:17:21.500 PWL: CID=0x0000 *** LISTENER STARTED *** CALEA Trunk 192.168.6.1:15064
2008/10/20 18:17:21.500 PWL: CID=0x0000 Found Interface VMware Virtual Ethernet Adapter for VMnet1 addr=192.168.179.1
2008/10/20 18:17:21.500 PWL: CID=0x0000 Opening Listener at 192.168.179.1:15064
2008/10/20 18:17:21.500 PWL: CID=0x0000 *** LISTENER STARTED *** CALEA Trunk 192.168.179.1:15064
2008/10/20 18:17:21.500 DTL: CID=0x0000 *** TRANSPORT STARTED *** Listener: *:15064
2008/10/20 18:17:21.562 PWL: CID=0x0000 Appending route: sip:192.168.6.130;domain=192.168.6.130
2008/10/20 18:17:21.625 PWL: CID=0x0000 OpalMan Created manager.
2008/10/20 18:17:21.640 PWL: CID=0x0000 UA Thread 1600 Started
2008/10/20 18:17:21.640 PWL: CID=0x0000 UA Thread 3012 Started
2008/10/20 18:17:21.640 PWL: CID=0x0000 UA Thread 4048 Started
2008/10/20 18:17:21.640 PWL: CID=0x0000 UA Thread 3540 Started
2008/10/20 18:17:21.640 PWL: CID=0x0000 UA Thread 3980 Started
2008/10/20 18:17:21.640 PWL: CID=0x0000 UA Thread 5216 Started
2008/10/20 18:17:21.640 PWL: CID=0x0000 UA Thread 2708 Started
2008/10/20 18:17:21.640 PWL: CID=0x0000 UA Thread 4904 Started
2008/10/20 18:17:21.640 PWL: CID=0x0000 UA Thread 516 Started
2008/10/20 18:17:21.640 PWL: CID=0x0000 UA Thread 3788 Started
2008/10/20 18:17:21.640 DTL: CID=0x0000 Starting UDP Transport on *:15060
2008/10/20 18:17:21.640 PWL: CID=0x0000 Found 5 interfaces
2008/10/20 18:17:21.640 PWL: CID=0x0000 Found Interface Intel(R) 82566DC Gigabit Network Connection - Packet Scheduler Miniport addr=0.0.0.0
2008/10/20 18:17:21.640 PWL: CID=0x0000 Found Interface MS TCP Loopback interface addr=127.0.0.1
2008/10/20 18:17:21.640 PWL: CID=0x0000 Opening Listener at 127.0.0.1:15060
2008/10/20 18:17:21.640 PWL: CID=0x0000 *** LISTENER STARTED *** OpenSBC Main Trunk 127.0.0.1:15060
2008/10/20 18:17:21.640 PWL: CID=0x0000 Found Interface D-Link AirPlus G DWL-G122 Wireless USB Adapter(rev.C) - Packet Scheduler Miniport addr=192.168.0.253
2008/10/20 18:17:21.640 PWL: CID=0x0000 Opening Listener at 192.168.0.253:15060
2008/10/20 18:17:21.656 PWL: CID=0x0000 *** LISTENER STARTED *** OpenSBC Main Trunk 192.168.0.253:15060 *** DEFAULT LISTENER ***
2008/10/20 18:17:21.656 PWL: CID=0x0000 Found Interface VMware Virtual Ethernet Adapter for VMnet8 addr=192.168.6.1
2008/10/20 18:17:21.656 PWL: CID=0x0000 Opening Listener at 192.168.6.1:15060
2008/10/20 18:17:21.656 PWL: CID=0x0000 *** LISTENER STARTED *** OpenSBC Main Trunk 192.168.6.1:15060
2008/10/20 18:17:21.656 PWL: CID=0x0000 Found Interface VMware Virtual Ethernet Adapter for VMnet1 addr=192.168.179.1
2008/10/20 18:17:21.656 PWL: CID=0x0000 Opening Listener at 192.168.179.1:15060
2008/10/20 18:17:21.656 PWL: CID=0x0000 *** LISTENER STARTED *** OpenSBC Main Trunk 192.168.179.1:15060
2008/10/20 18:17:21.656 DTL: CID=0x0000 *** TRANSPORT STARTED *** Listener: *:15060
2008/10/20 18:17:21.656 INF: CID=0x0000 Media Server SIP Stack Initialization Started
2008/10/20 18:17:21.656 PWL: CID=0x0000 OpalEP Created endpoint: ivr
2008/10/20 18:17:21.656 PWL: CID=0x0000 IVR Created endpoint.
2008/10/20 18:17:21.656 PWL: CID=0x0000 OpalEP Created endpoint: sip
2008/10/20 18:17:21.656 PWL: CID=0x0000 Transaction Thread 6052 Started
2008/10/20 18:17:21.656 INF: CID=0x0000 SIP Stack CREATED
2008/10/20 18:17:21.656 PWL: CID=0x0000 Transaction Cleaner Thread 5316 Started
2008/10/20 18:17:21.656 PWL: CID=0x0000 Transaction Cleaner Thread 5296 Started
2008/10/20 18:17:21.687 PWL: CID=0x0000 OpalMan Added route "ivr:.*=sip:"
2008/10/20 18:17:21.687 PWL: CID=0x0000 OpalMan Added route "sip:.*=ivr:"
2008/10/20 18:17:21.703 PWL: CID=0x0000 UA Thread 4464 Started
2008/10/20 18:17:21.703 DTL: CID=0x0000 Starting UDP Transport on *:15068
2008/10/20 18:17:21.703 PWL: CID=0x0000 Found 5 interfaces
2008/10/20 18:17:21.703 PWL: CID=0x0000 Found Interface Intel(R) 82566DC Gigabit Network Connection - Packet Scheduler Miniport addr=0.0.0.0
2008/10/20 18:17:21.703 PWL: CID=0x0000 Found Interface MS TCP Loopback interface addr=127.0.0.1
2008/10/20 18:17:21.703 PWL: CID=0x0000 Opening Listener at 127.0.0.1:15068
2008/10/20 18:17:21.703 PWL: CID=0x0000 *** LISTENER STARTED *** Media Server 127.0.0.1:15068
2008/10/20 18:17:21.703 PWL: CID=0x0000 Found Interface D-Link AirPlus G DWL-G122 Wireless USB Adapter(rev.C) - Packet Scheduler Miniport addr=192.168.0.253
2008/10/20 18:17:21.703 PWL: CID=0x0000 Opening Listener at 192.168.0.253:15068
2008/10/20 18:17:21.703 PWL: CID=0x0000 *** LISTENER STARTED *** Media Server 192.168.0.253:15068 *** DEFAULT LISTENER ***
2008/10/20 18:17:21.703 PWL: CID=0x0000 Found Interface VMware Virtual Ethernet Adapter for VMnet8 addr=192.168.6.1
2008/10/20 18:17:21.703 PWL: CID=0x0000 Opening Listener at 192.168.6.1:15068
2008/10/20 18:17:21.703 PWL: