| 00:09.27 | *** join/#asterisk gartral (~gartral@unaffiliated/gartral) |
| 00:09.42 | *** join/#asterisk jetlag (~jetlag@pool-71-168-196-225.cmdnnj.east.verizon.net) |
| 00:11.38 | *** join/#asterisk gtxcomm (~gtxcomm@72.135.4.232) |
| 00:14.45 | *** join/#asterisk sevin (~sevin@c-50-132-126-144.hsd1.wa.comcast.net) |
| 00:26.41 | *** join/#asterisk CeBe1 (~CeBe@port-92-206-98-123.dynamic.qsc.de) |
| 00:36.00 | *** join/#asterisk jetlag (~jetlag@pool-71-168-196-225.cmdnnj.east.verizon.net) |
| 00:38.30 | *** join/#asterisk admin0 (~admin0@5ED1504D.cm-7-2b.dynamic.ziggo.nl) |
| 00:49.51 | *** join/#asterisk troydm (~troydm@unaffiliated/troydm) |
| 00:52.05 | troydm | so i have a strange behaviour on one of my ip phones, unfortunetly it's remote location so i can't solve the problem, but it's Grandstream HT-701 model and it has problem registering with server, however ppl can make outbound calls from it, the only problem is voice data isn't always working |
| 00:52.23 | troydm | like sometimes when person calls and i pick up the phone i can hear them |
| 00:52.38 | troydm | sometimes voice data isn't coming through |
| 00:53.01 | troydm | it's definitely firewall related problem on that remote location end |
| 00:53.17 | troydm | so i just want to ask u guys if u had previously encountered such problems |
| 00:53.27 | troydm | and what should i do to solve them |
| 00:54.18 | troydm | firewall setup is kinda old one so i doubt it has any sip/voip related helpers that can pass voip traffic through it |
| 00:54.56 | troydm | i've opened sip port there 5060 on udp |
| 00:55.09 | troydm | however that still didn't resolve registering problem |
| 00:55.12 | Juggie | troydm, its a common misconception that you need any special config for voip to work |
| 00:55.19 | Juggie | so common it makes me sad. |
| 00:55.29 | Juggie | you dont need to forward ports, etc. |
| 00:55.43 | Juggie | the problem is simply the UDP timeout on the router in that location is < then the registration time. |
| 00:56.12 | Juggie | so the router blows away the nat UDP mapping prior to the phone reregistering |
| 00:56.17 | WIMPy | There are endless misconceptions about using voip. |
| 00:56.30 | Juggie | so there is a span of time where the phone thinks its registered, but the nat mapping is gone |
| 00:56.37 | troydm | hmm |
| 00:56.44 | WIMPy | But that part doesn't explain rtp issues. |
| 00:57.18 | Juggie | id fix the registration timeout issue first |
| 00:57.36 | Juggie | raise nat timeout or lower reg time |
| 00:57.51 | WIMPy | Enable qualify on Asterisk or better enable keepalives on the phone. |
| 00:58.00 | Juggie | also works too |
| 00:58.07 | Juggie | anything to keep udp traffic moving |
| 00:58.11 | troydm | hmm, k thx i'll try playing with that settings |
| 00:58.36 | *** join/#asterisk Vutral (~ss@mirbsd/special/Vutral) |
| 00:58.39 | Juggie | port forwarding is definitally not needed. |
| 00:58.43 | Juggie | only in a double nat scenario |
| 00:58.55 | sevin | troydm, if you have access to the firewall, you may want to grab pcaps from the firewall and your voice servers |
| 00:59.08 | Juggie | troydm, also make sure asterisk knows the device is behind nat |
| 00:59.20 | Juggie | so it ignores the source ip in SIP and uses the udp source ip |
| 00:59.45 | troydm | hmm, ok |
| 01:00.28 | Juggie | i find those sip/rtp helpers are more of a nusiance then a help |
| 01:00.37 | Juggie | symetrical nat is much better suited to handle this then anything else |
| 01:00.51 | Penguin | than |
| 01:01.10 | WIMPy | Hi Penguin |
| 01:01.21 | Penguin | Yep. |
| 01:01.50 | Juggie | btw, knowing how symetrical nat works will make you much better equiped to handle these issues |
| 01:14.37 | *** join/#asterisk Vutral (~ss@mirbsd/special/Vutral) |
| 01:20.56 | *** join/#asterisk jansiva (~janaki@118.102.128.225) |
| 01:27.15 | *** join/#asterisk jpoz (~jpoz@c-24-22-121-42.hsd1.or.comcast.net) |
| 01:33.15 | *** join/#asterisk Draecos (~Draecos@124-169-108-149.dyn.iinet.net.au) |
| 01:43.41 | *** join/#asterisk vinhdizzo (~vinh@cpe-98-154-220-20.socal.res.rr.com) |
| 01:55.18 | *** join/#asterisk Shawn0228 (~textual@cpe-173-88-209-44.neo.res.rr.com) |
| 01:56.16 | Shawn0228 | hey. really stupid question here. Would anyone know where the google voice configuration files are on a piaf installation? I lost the google email address i set up google voice integration with and i kind of need it. |
| 01:57.03 | Penguin | Under /etc/asterisk/ with all the other asterisk config files? |
| 01:58.36 | Shawn0228 | im looking through there... i haven't come across it yet |
| 01:59.02 | Shawn0228 | which file would inbound routes be in? |
| 01:59.11 | Penguin | Never heard of it. |
| 02:00.08 | Shawn0228 | hmm... |
| 02:00.11 | Penguin | If you're just trying to find the email address, it could be in gtalk.conf or in extensions.conf. |
| 02:01.25 | Shawn0228 | sadly it's not |
| 02:01.30 | Penguin | or jabber.conf |
| 02:01.52 | Shawn0228 | that was it! |
| 02:01.56 | Penguin | My gtalk.conf doesn't have the email address either. |
| 02:01.59 | Shawn0228 | i forgot that google voice was based on jabber |
| 02:02.06 | Shawn0228 | awesome! Thanks! :D |
| 02:03.05 | Shawn0228 | {hugs} Penguin |
| 02:03.22 | Penguin | Some people don't use the email address in the extension, but I do. |
| 02:04.31 | Shawn0228 | my old pbx committed suicide, so i just reinstalled piaf on a esxi vm |
| 02:04.52 | Penguin | Sounds horrible. |
| 02:05.02 | Penguin | And the suicide was probably bad, too. |
| 02:05.27 | Shawn0228 | actually, ive been using esxi for a while. i love it |
| 02:05.39 | Penguin | No problem with ESXi... |
| 02:05.44 | Penguin | I use it as well. |
| 02:06.03 | Shawn0228 | oh. piaf? |
| 02:06.10 | Shawn0228 | yeah the installation sucks but its quick and dirty |
| 02:06.15 | Shawn0228 | im not going for anything too special |
| 02:06.20 | Penguin | I tested it out a while back, and it was terrible. |
| 02:06.52 | Penguin | It would have been easier to use AsteriskNOW. |
| 02:07.16 | Shawn0228 | i might mess with it in a separate vm |
| 02:07.29 | Penguin | Pop in the CD, push a couple buttons, wait 15 minutes, reboot into your new system with a working asterisk installation. |
| 02:07.36 | Shawn0228 | im really just using it to compensate for the shitty signal that sprint has around here |
| 02:08.02 | Penguin | When I tested PiaF, you had to run all these stupid commands and scripts to get anything usable. |
| 02:11.06 | Penguin | Maybe they improved it since I tested it, but I doubt I'll ever give it another chance since AsteriskNOW exists. |
| 02:34.55 | *** join/#asterisk darkbasic (~quassel@host37-245-static.119-2-b.business.telecomitalia.it) |
| 02:54.32 | *** join/#asterisk sevin (~sevin@c-50-132-126-144.hsd1.wa.comcast.net) |
| 03:29.39 | *** join/#asterisk lvlinux (~n1gg@adsl-98-86-121-21.tys.bellsouth.net) |
| 03:32.51 | *** join/#asterisk saint_ (~saint@c-50-166-85-78.hsd1.nj.comcast.net) |
| 03:35.48 | saint_ | hi all - anyone using fail2ban around here ? |
| 03:36.58 | *** join/#asterisk LiuYan (~LiuYan@222.125.137.217) |
| 03:38.22 | Penguin | Yep. |
| 03:39.51 | saint_ | Penguin: hey, is there any way for it NOT TO rewrite the whote IP TABLE rules when it starts ? |
| 03:40.32 | Penguin | Describe the problem in detail. I'm not clear on what you're trying to do. |
| 03:40.44 | saint_ | I have iptable rules already |
| 03:40.59 | Penguin | Understand. |
| 03:41.03 | saint_ | I did start fail2ban, and it just removed my whole iptable rules, and did its own stuff |
| 03:41.18 | Penguin | That part sounds like a misconfiguration. |
| 03:41.49 | saint_ | I did not find anywhere an option to keep the current iptables and just add to it. |
| 03:42.30 | Penguin | fail2ban should only add rules to the INPUT chain and create new chains for each jail. |
| 03:42.58 | saint_ | it flushed my INPUT chain and added whatever IP address was trying to register |
| 03:43.11 | Penguin | Let's say you have only a jail for asterisk. It would only create a single rule in the INPUT chain and add the fail2ban-asterisk chain. |
| 03:43.46 | Penguin | Look at your jail.conf at the asterisk jail. |
| 03:44.11 | Penguin | What is the action that is configured there? |
| 03:45.01 | saint_ | stand by |
| 03:45.49 | Penguin | And also, do you have other jails enabled? |
| 03:46.59 | saint_ | Penguin: I took the jail for asterisk in here : http://www.fail2ban.org/wiki/index.php/Asterisk |
| 03:47.07 | saint_ | Penguin: yes, and I am disabling them now |
| 03:48.26 | saint_ | Penguin: ok, so I had only 1 jail enabled. the one for asterisk that I took from the wiki above, and the one that comes by default which is for ssh. |
| 03:48.52 | Penguin | Okay, so you are using the iptables-allports action. That's the same as mine. Let's go look at /etc/fail2ban/action.d/iptables-allports.conf |
| 03:50.16 | saint_ | ok.. i did not touch any of those files.. what do you want to know ? |
| 03:50.51 | Penguin | Back in the jail.conf, you have name=ASTERISK in the action... |
| 03:51.35 | Penguin | So in the iptables-allports.conf, where it shows fail2ban-<name> in commands, that is going to turn into a chain name of fail2ban-ASTERISK. |
| 03:51.52 | saint_ | yes |
| 03:52.02 | Penguin | You know iptables? |
| 03:52.15 | saint_ | yes.. the basics .. add a chain, insert, delete.. |
| 03:53.57 | Penguin | In actionstart, it should show a command to create a new chain with the appropriate name, add a RETURN in it, and a rule for your INPUT chain with a target of the new fail2ban-ASTERISK chain. |
| 03:54.16 | Penguin | That assumes that the chain configured later in that file is in fact INPUT. |
| 03:55.34 | saint_ | yes. I see the -N, -A xxx -j RETURN , and -I with the ip that would be denied |
| 03:55.38 | Penguin | And then the actionban like will put the rules into your new fail2ban-ASTERISK chain with a target of DROP. |
| 03:56.00 | Penguin | s/like/line/ |
| 03:56.45 | Penguin | The actionban line might be where your problem lies. |
| 03:56.53 | Penguin | actionban = iptables -I fail2ban-<name> 1 -s <ip> -j DROP |
| 03:57.02 | Penguin | That's what is in mine. I use the default. |
| 03:57.18 | Penguin | I realize the 1 is superfluous. |
| 03:58.12 | Penguin | Now that I am here, I might change it to -A instead of -I chain 1. |
| 03:58.22 | saint_ | my actioncheck is iptables -n -L <chain> | grep -q 'fail2ban-<name>[ \t]' |
| 03:58.33 | Penguin | actionban |
| 03:58.49 | saint_ | iptables -I fail2ban-<name> 1 -s <ip> -j <blocktype> |
| 03:59.42 | Penguin | That all seems to be in good shape. |
| 03:59.43 | saint_ | but I dont see any FLUSH command in there . |
| 03:59.53 | saint_ | why would it get ride of my whole INPUT list ? |
| 03:59.59 | Penguin | I'm not sure yet. |
| 04:00.39 | Penguin | Oh, I just realized I can't change that -I to a -A because the RETURN needs to be last. |
| 04:01.20 | Penguin | How are you starting fail2ban? |
| 04:01.45 | saint_ | <PROTECTED> |
| 04:01.48 | saint_ | oh .. hold on .. |
| 04:01.58 | saint_ | i just restarted it and now my rules are in it still |
| 04:02.17 | saint_ | and its rules are still in |
| 04:03.44 | saint_ | oh yeah.. i restarted again, and it is still in there. |
| 04:03.48 | saint_ | weird |
| 04:03.52 | saint_ | i did not change anything |
| 04:03.59 | saint_ | it was just the very very first start that deleted it all |
| 04:04.23 | saint_ | oh.. i disabled ssh jail rule though. i wonder if this is it ? |
| 04:04.56 | Penguin | Could be! You'd have to follow the same steps to see what that jail does. |
| 04:08.03 | Penguin | I'd look to see what action the ssh jail is supposed to take and check the name. |
| 04:08.24 | Penguin | Then I'd go to the action file that is uses, if it's different from the one you already checked. |
| 04:08.32 | saint_ | i need to do the dishes before my wife cuts my balls.. but i will certainly check this out later during the week.. thanks for the help .. |
| 04:08.36 | Penguin | See what the start and ban commands do. |
| 04:09.04 | saint_ | i have this script kiddie from 192.96.206.72 that was trying brute force attack on a box I just set up.. |
| 04:09.13 | Penguin | Let me know if you need any additional help with it. |
| 04:09.59 | saint_ | i wish denyhosts could work with asterisk log.. maybe i will look into it. |
| 04:11.13 | Penguin | I don't know why you'd care about it. iptables seems like a better line of defense. |
| 04:11.52 | saint_ | because denyhost has a centralized database. have you ever used it ? |
| 04:12.23 | Penguin | It seems like I played with it in the past. I thought it just writes to your hosts.allow and hosts.deny files. |
| 04:13.02 | *** join/#asterisk timahvo1 (~rogue@197.237.174.93) |
| 04:13.16 | saint_ | yeah. what i love about it is that if you and me send an update to the main database, saying that 192.96.206.72 tried to get into your box and my box, then anyone else who use debyhosts will automatically block this ip |
| 04:13.37 | saint_ | of course, you can tweak on the number of reports, time, etc etc.. |
| 04:13.56 | Penguin | bruteforceblocker does that, too, and it should work with the firewall instead of your wrappers files. |
| 04:14.45 | saint_ | I have denyhosts and afc or something like that. blocking 50k+ hosts as of now . not too bad. |
| 04:15.35 | Penguin | I do all my firewalling at the firewall, no matter if it's iptables on a Linux box or pf on a BSD box. |
| 04:16.42 | *** join/#asterisk jasonwert (~w3rt@71.89.137.28) |
| 04:27.47 | *** join/#asterisk LiuYan (~LiuYan@222.125.137.217) |
| 05:02.20 | *** join/#asterisk mjordan (~matt@75.76.55.191) |
| 05:02.20 | *** mode/#asterisk [+o mjordan] by ChanServ |
| 05:45.32 | *** part/#asterisk w9sh (~sph@50-79-224-193-static.hfc.comcastbusiness.net) |
| 06:03.43 | *** join/#asterisk vinhdizzo (~vinh@cpe-98-154-220-20.socal.res.rr.com) |
| 06:20.25 | *** join/#asterisk amizraa (~amizraa@gateway/tor-sasl/amizraa) |
| 06:43.56 | *** join/#asterisk michael_work (~michael@bzq-112-168-31-118.red.bezeqint.net) |
| 06:56.08 | *** join/#asterisk LiuYan (~LiuYan@222.125.137.217) |
| 06:57.33 | *** join/#asterisk [TK]D-Fender (~chatzilla@64.235.216.2) |
| 07:04.53 | *** join/#asterisk hos7ein (~chatzilla@2.191.243.136) |
| 07:28.33 | *** join/#asterisk amizraa (~amizraa@gateway/tor-sasl/amizraa) |
| 07:40.27 | *** join/#asterisk amizraa (~amizraa@gateway/tor-sasl/amizraa) |
| 08:05.52 | *** join/#asterisk LiuYan (~LiuYan@222.125.137.217) |
| 08:14.13 | *** join/#asterisk amizraa (~amizraa@gateway/tor-sasl/amizraa) |
| 08:21.42 | *** join/#asterisk CeBe (~CeBe@port-92-206-98-123.dynamic.qsc.de) |
| 08:23.39 | *** join/#asterisk hos7ein (~chatzilla@91.98.33.208) |
| 08:26.25 | *** join/#asterisk bjornts (~BTS@it010226.klientdrift.uib.no) |
| 08:39.04 | *** join/#asterisk bjornts (~BTS@it010226.klientdrift.uib.no) |
| 08:44.19 | *** join/#asterisk admin0 (~admin0@5ED1504D.cm-7-2b.dynamic.ziggo.nl) |
| 08:44.32 | *** part/#asterisk admin0 (~admin0@5ED1504D.cm-7-2b.dynamic.ziggo.nl) |
| 09:00.36 | *** join/#asterisk vlad_starkov (~vlad_star@83.220.239.107) |
| 09:01.37 | *** join/#asterisk raub (~raub@ip70-171-22-39.ga.at.cox.net) |
| 09:01.53 | *** join/#asterisk jpoz (~jpoz@c-24-22-121-42.hsd1.or.comcast.net) |
| 09:20.22 | *** join/#asterisk jetlag (~jetlag@pool-71-168-196-225.cmdnnj.east.verizon.net) |
| 09:25.31 | *** join/#asterisk jetlag (~jetlag@pool-71-168-196-225.cmdnnj.east.verizon.net) |
| 09:31.56 | *** join/#asterisk evilman_home (kvirc@89-179-77-66.broadband.corbina.ru) |
| 09:49.12 | *** join/#asterisk xytis (~xytis@88-223-36-62.meganet.lt) |
| 09:52.47 | *** join/#asterisk jetlag (~jetlag@pool-71-168-196-225.cmdnnj.east.verizon.net) |
| 09:59.13 | *** join/#asterisk threesome (~threesome@ip-94-113-13-143.net.upcbroadband.cz) |
| 09:59.33 | *** join/#asterisk moy_ (~moy@173.239.155.74) |
| 10:03.37 | *** join/#asterisk Neoti (~Thunderbi@cpc5-nott16-2-0-cust33.12-2.cable.virginm.net) |
| 10:06.50 | *** join/#asterisk qdel (~Rholk@bny92-1-82-67-178-101.fbx.proxad.net) |
| 10:41.36 | *** join/#asterisk vlad_starkov (~vlad_star@83.220.239.107) |
| 10:42.26 | *** join/#asterisk vlad_starkov (~vlad_star@83.220.239.107) |
| 10:44.16 | *** join/#asterisk gerhard7 (~gerhard7@77-172-47-159.ip.telfort.nl) |
| 10:57.24 | *** join/#asterisk Neoti (~Thunderbi@cpc5-nott16-2-0-cust33.12-2.cable.virginm.net) |
| 10:57.42 | *** part/#asterisk troydm (~troydm@unaffiliated/troydm) |
| 11:03.33 | *** join/#asterisk xytis (~xytis@88-223-36-62.meganet.lt) |
| 11:03.48 | *** join/#asterisk Neoti (~Thunderbi@cpc5-nott16-2-0-cust33.12-2.cable.virginm.net) |
| 11:04.44 | *** join/#asterisk xytis (~xytis@88-223-36-62.meganet.lt) |
| 11:08.06 | *** join/#asterisk xytis (~xytis@88-223-36-62.meganet.lt) |
| 11:10.09 | *** join/#asterisk dxd828 (~dxd828@88-105-208-194.dynamic.dsl.as9105.com) |
| 11:15.01 | *** join/#asterisk xytis (~xytis@88-223-36-62.meganet.lt) |
| 11:16.57 | *** join/#asterisk dxd828 (~dxd828@88-105-208-194.dynamic.dsl.as9105.com) |
| 11:20.32 | *** join/#asterisk Neoti (~Thunderbi@cpc5-nott16-2-0-cust33.12-2.cable.virginm.net) |
| 11:22.07 | *** join/#asterisk xytis (~xytis@88-223-36-62.meganet.lt) |
| 11:24.52 | *** join/#asterisk vlad_starkov (~vlad_star@83.220.239.107) |
| 11:32.03 | *** join/#asterisk moy (~moy@UNVLON55-1176057127.sdsl.bell.ca) |
| 11:32.46 | *** join/#asterisk af_ (~af@93-43-36-38.ip90.fastwebnet.it) |
| 11:55.35 | *** join/#asterisk tzafrir (~tzafrir@local.xorcom.com) |
| 11:59.05 | *** join/#asterisk CeBe (~CeBe@port-92-206-98-123.dynamic.qsc.de) |
| 12:03.57 | *** join/#asterisk CeBe1 (~CeBe@port-92-206-98-123.dynamic.qsc.de) |
| 12:05.56 | *** join/#asterisk vlad_starkov (~vlad_star@83.220.239.107) |
| 12:08.35 | *** join/#asterisk LinoSP (~LinoSP@201.240.245.207) |
| 12:11.20 | *** join/#asterisk Neoti (~Thunderbi@cpc5-nott16-2-0-cust33.12-2.cable.virginm.net) |
| 12:21.45 | *** join/#asterisk Neoti (~Thunderbi@cpc5-nott16-2-0-cust33.12-2.cable.virginm.net) |
| 13:06.32 | *** join/#asterisk Neoti (~Thunderbi@cpc5-nott16-2-0-cust33.12-2.cable.virginm.net) |
| 13:17.00 | *** join/#asterisk gerhard7 (~gerhard7@77-172-47-159.ip.telfort.nl) |
| 13:19.46 | *** join/#asterisk LinoSP (~LinoSP@201.240.245.207) |
| 13:43.27 | *** join/#asterisk dxd828 (~dxd828@88-105-208-194.dynamic.dsl.as9105.com) |
| 14:24.03 | *** join/#asterisk Draecos (~Draecos@124-169-108-149.dyn.iinet.net.au) |
| 14:45.53 | *** join/#asterisk vlad_starkov (~vlad_star@83.220.239.107) |
| 14:46.03 | *** join/#asterisk dxd828 (~dxd828@88-105-208-194.dynamic.dsl.as9105.com) |
| 14:51.47 | *** join/#asterisk jhlavacek (~jirka@87.89.218.63) |
| 15:30.29 | *** join/#asterisk ketas- (ketas@ketas6-sixxs.si.pri.ee) |
| 15:34.39 | *** join/#asterisk CeBe (~CeBe@port-92-206-98-123.dynamic.qsc.de) |
| 15:50.43 | *** join/#asterisk vlad_starkov (~vlad_star@83.220.239.107) |
| 16:13.18 | *** join/#asterisk vlad_starkov (~vlad_star@83.220.239.107) |
| 16:13.46 | *** join/#asterisk xytis (~xytis@88-223-36-62.meganet.lt) |
| 16:14.39 | *** join/#asterisk felipealmeida (~user@177.41.225.200) |
| 16:17.32 | *** join/#asterisk Chainsaw (~chainsaw@gentoo/developer/chainsaw) |
| 16:22.04 | *** join/#asterisk dxd828 (~dxd828@88-105-208-194.dynamic.dsl.as9105.com) |
| 16:32.10 | *** join/#asterisk [TK]D-Fender (~chatzilla@64.235.216.2) |
| 16:45.43 | *** join/#asterisk mjordan (~matt@75.76.55.191) |
| 16:45.43 | *** mode/#asterisk [+o mjordan] by ChanServ |
| 16:51.32 | *** join/#asterisk [TK]D-Fender (~chatzilla@64.235.216.2) |
| 16:54.07 | *** join/#asterisk jhlavacek (~jirka@87.89.218.63) |
| 17:09.01 | *** join/#asterisk amizraa (~amizraa@gateway/tor-sasl/amizraa) |
| 17:13.03 | *** join/#asterisk dxd828 (~dxd828@88-105-208-194.dynamic.dsl.as9105.com) |
| 17:14.05 | *** join/#asterisk cyborg-one (~cyborg-on@195-138-69-173.broadband.tenet.odessa.ua) |
| 17:14.45 | *** join/#asterisk amizraa (~amizraa@gateway/tor-sasl/amizraa) |
| 17:17.11 | *** join/#asterisk xytis (~xytis@88-223-36-62.meganet.lt) |
| 17:19.54 | *** join/#asterisk Neoti (~Thunderbi@cpc5-nott16-2-0-cust33.12-2.cable.virginm.net) |
| 17:20.47 | *** join/#asterisk amizraa (~amizraa@gateway/tor-sasl/amizraa) |
| 17:28.17 | *** join/#asterisk xytis (~xytis@88-223-36-62.meganet.lt) |
| 17:30.49 | *** join/#asterisk yago (~kresp0@gateway/tor-sasl/kresp0) |
| 17:38.50 | *** join/#asterisk u0m3 (~u0m3@109.96.176.228) |
| 18:02.43 | *** join/#asterisk dskippy (~mmachenry@209-6-55-158.c3-0.smr-ubr1.sbo-smr.ma.cable.rcn.com) |
| 18:05.24 | dskippy | Hello everyone. I am having trouble locating a problem in an Asterisk installation and I'm looking for some advice. In my /etc/asterisk/server_globals.conf I see "agi://localhost:4573/answer.agi?". I suspect I have a bug with parameters passed to that code so I want to see what it does. I can't find the code for answer.agi. Anyone know where it could be or how one finds it? |
| 18:06.02 | dskippy | I've done a locate for answer.agi and a find for answer_agi.php and other things but still not getting anything. |
| 18:06.21 | [TK]D-Fender | None those files are not * base configs. |
| 18:06.39 | Penguin | I was just wondering what he was talking about. |
| 18:07.41 | [TK]D-Fender | Wow that came out garbled... |
| 18:07.56 | [TK]D-Fender | shouldn't reverse the sentence order midway undercaffienated... |
| 18:08.41 | [TK]D-Fender | dskippy: Your AGI is your own... if you're running someone else's code I recommend contacting the author |
| 18:09.10 | *** join/#asterisk sevin (~drizzt@198.23.251.20) |
| 18:09.19 | dskippy | [TK]D-Fender: Is there a way to find what code is executed when that agi is called? |
| 18:09.49 | dskippy | I can't contact the author at the moment, sadly, and I'm trying to debug something. |
| 18:09.56 | [TK]D-Fender | dskippy: AGI *is* code |
| 18:10.06 | dskippy | Yes I understand that. |
| 18:10.36 | dskippy | My problem is that this agi must be on the system somewhere. I just don't know where or enough about Asterisk to find it. |
| 18:10.57 | [TK]D-Fender | dskippy: If youwant to see what it actually asks * to do then turn on AGI debug |
| 18:11.10 | Penguin | Look at the extension in question. What does the call to AGI() do? |
| 18:11.57 | [TK]D-Fender | "core show settings" <- |
| 18:12.04 | [TK]D-Fender | AGI folder is there if you are calling it without a relative or absolute path |
| 18:12.14 | [TK]D-Fender | <PROTECTED> |
| 18:12.22 | dskippy | Penguin: It's this line: exten => 8991,n,AGI(${ANSWERAGI}action=answer&call_log_id=${call_log_id} |
| 18:12.34 | [TK]D-Fender | this is on mine... yours may vary |
| 18:12.54 | [TK]D-Fender | dskippy: well that's using a variable to come up with a filename... that doesn't help us at all |
| 18:13.07 | Penguin | And the variable ${ANSWERAGI} is what? |
| 18:13.13 | [TK]D-Fender | dskippy: that could be determined at runtime... so go LOOK at how it's getting called |
| 18:14.01 | dskippy | Penguin: ANSWERAGI=agi://localhost:4573/answer.agi? |
| 18:14.44 | [TK]D-Fender | dskippy: if that it is set to then AGI is connecting to a socket process on your server |
| 18:14.59 | [TK]D-Fender | dskippy: You see the port... go check what process it's bound to |
| 18:15.10 | dskippy | Okay |
| 18:16.31 | dskippy | btw [TK]D-Fender where did you enter that "core show settings" command? |
| 18:16.43 | [TK]D-Fender | ASterisk CLI... |
| 18:16.49 | [TK]D-Fender | Not that it matters... |
| 18:17.08 | [TK]D-Fender | it isn't using a file-based AGI |
| 18:17.09 | [TK]D-Fender | it's doing a socket conenction. |
| 18:18.20 | dskippy | I don't have root on this box so my netstat to find the process listening to that port is failing :( |
| 18:18.50 | Penguin | Nothing standard on port 4573 that I know of. Try "lsof -i :4573" to see if you can see what it is. |
| 18:19.08 | Penguin | or "netstat -lnptu|grep 4573" |
| 18:20.45 | dskippy | I don't have lsof on this machine and the netstat is similar output to the other netstat command I ran. It doesn't have the process id |
| 18:21.01 | dskippy | It would work if I were root or the process owner |
| 18:21.07 | Penguin | |
| 18:21.13 | Penguin | How about socklist? |
| 18:21.19 | Penguin | or fuser? |
| 18:21.43 | dskippy | I can try that |
| 18:24.39 | dskippy | Looks like that's not working for the same issue. :-\ |
| 18:25.05 | dskippy | I could try to get the on-call NOC to run the netstat for me but I'm not sure how long that would take. |
| 18:25.22 | Penguin | Can you run the asterisk CLI? |
| 18:27.18 | dskippy | Nope |
| 18:32.00 | Penguin | Maybe there is an init script that is world readable which starts the listening process on that port. Grep the init scripts directory for the port number. |
| 18:32.52 | dskippy | Great idea. |
| 18:34.06 | dskippy | It's not in there though. :( |
| 18:35.30 | *** join/#asterisk xytis (~xytis@88-223-36-62.meganet.lt) |
| 18:36.52 | [TK]D-Fender | ps -aux |
| 18:37.10 | Penguin | ps aux |
| 18:37.11 | Penguin | The - is incorrect. |
| 18:38.21 | [TK]D-Fender | work either way |
| 18:38.49 | Penguin | $ ps -aux |
| 18:38.49 | Penguin | Warning: bad ps syntax, perhaps a bogus '-'? See http://procps.sf.net/faq.html |
| 18:39.10 | [TK]D-Fender | mine And then proceeds to give the same as without |
| 18:39.34 | Penguin | They assumed you messed up and gave you what they thought you meant to type. |
| 18:40.31 | [TK]D-Fender | Never thoroughly read the man page for what it was implying across more options.. some mention "-", others don't and I usually used to run "pas -A" afrom before.... |
| 18:40.36 | [TK]D-Fender | Penguin: Oh well |
| 18:40.52 | dskippy | I see a lot of fagi_daemon but nothing with answer or 4573 |
| 18:40.59 | Penguin | I wish they'd hurry up and remove that safety net already. |
| 18:41.22 | Penguin | As soon as they take it out where it just fails miserably, people will stop doing it wrong. |
| 18:42.46 | Penguin | "ps a" and "ps -a" are different commands with different results. |
| 18:42.52 | [TK]D-Fender | Penguin: I'm sure that's at the top of their priority list. |
| 18:43.21 | Penguin | Yep, that's why it has been left in there for so many years. *grumble* |
| 18:50.24 | *** join/#asterisk resist0r (uid18260@gateway/web/irccloud.com/x-vjsrrkisqcglkrnt) |
| 18:53.22 | *** join/#asterisk vinhdizzo (~vinh@cpe-98-154-220-20.socal.res.rr.com) |
| 19:25.40 | *** join/#asterisk [TK]D-Fender (~chatzilla@64.235.216.2) |
| 19:26.16 | zamba | how can i get rid of these messages in my logs: NOTICE[2511]: chan_sip.c:22546 in handle_request_invite: Sending fake auth rejection for device |
| 19:26.50 | zamba | i have already set allowguest=no |
| 19:26.51 | Penguin | The quickest way is to allow anonymous calls to come in. |
| 19:27.05 | Penguin | allowguest=no is what makes it start showing up. |
| 19:27.33 | mjordan | or just turn off NOTICE messages in your log file |
| 19:27.35 | mjordan | :-D |
| 19:28.22 | Penguin | If you set allowguest=yes, the calls will enter the dialplan... but at that point, you can respond to the attempts however you want to. |
| 19:29.21 | [TK]D-Fender | Because all of the CLI activity for those unwanted calls is so much smaller than a singular notice :) |
| 19:30.14 | Penguin | If you want to use fail2ban to block the attempt, you have to bring it to the dialplan to use Log() to create a string that fail2ban will match. |
| 19:30.46 | Penguin | If you use 10+, then you can just use the security logging mechanism and deal with it that way, but not everyone uses 10 or above. |
| 19:50.04 | *** join/#asterisk johnmilton (~johnmilto@ool-44c5f03d.dyn.optonline.net) |
| 20:16.10 | XandriX | odd question for you guys im not sure if i am going to manage to explain properly |
| 20:17.37 | XandriX | say i want to make a bit of a dial plan that does as follows i dial say extension *782 it gives me 2 choices home or office for home 1 office 2 and that later on id have something like an auto attendant that checks if i set it to home or office and could tell people im in the office or not if they wer to press the proper button when they hit my auto attendant ? |
| 20:17.45 | XandriX | is this doable ? |
| 20:17.56 | ChannelZ | yeah |
| 20:18.27 | ChannelZ | use the AstDB to set persistent flag. I do this to forward my calls to my office. |
| 20:18.45 | XandriX | coool |
| 20:18.49 | *** join/#asterisk vlad_starkov (~vlad_star@109.188.127.69) |
| 20:19.05 | ChannelZ | I just have another extension I dial to toggle it on and off |
| 20:19.23 | XandriX | ChannelZ: would you mind showing me an example on pastebin ? |
| 20:19.36 | Penguin | The part that give you the choice of 1 for home and 2 for office is the auto attendant. |
| 20:20.41 | XandriX | Penguin: i guess i wrote it wrong what i meant is i wanted say if when u call my number and hit my autoattendant if u hit option 1 it would tell u if im in office or not |
| 20:21.32 | ChannelZ | http://pastebin.com/Yc9F2mSS |
| 20:22.10 | ChannelZ | Then it's a matter of using GotoIf or however you want to do it to look at the flag and respond appropriately, by looking at ${DB(cfwd/work)} |
| 20:22.32 | XandriX | thx guys |
| 20:23.25 | ChannelZ | mine's not fancy with an IVR of choices, just a simple toggle.. but the important part is knowing the DB function |
| 20:23.27 | XandriX | ima read up again more a bit on auto attendants and astdb |
| 20:24.05 | XandriX | ChannelZ: thats ok i dont want to start messing with IVR yet i am far from in my opinion anyways having enough knoledge and experience to tackle it just yet |
| 20:24.46 | XandriX | learning new stuff everyday and pestering this channel and especialy Penguin and [TK]D-Fender with 1000000000 noob questions :P |
| 20:25.21 | Penguin | You should read the book. |
| 20:25.27 | Penguin | ~book |
| 20:25.27 | infobot | Asterisk: The Definitive Guide, 4th Edition (ISBN 1-4493-3242-0) available at http://oreilly.com/catalog/0636920025894 - Asterisk: The Definitive Guide is released under a Creative Commons License (http://creativecommons.org/licenses/by-nc-nd/3.0/us/) and a version is available for reading online at http://www.asteriskdocs.org/ or see ~buybook |
| 20:26.12 | XandriX | ndeed |
| 20:26.18 | XandriX | *indeed |
| 20:30.17 | Penguin | Here's the same thing using a single extension and priority label: http://pastebin.com/UkZWATmW |
| 20:31.02 | *** join/#asterisk tzafrir (~tzafrir@bzq-218-28-58.cablep.bezeqint.net) |
| 20:31.23 | XandriX | ok and in regards to astdb that cfwd entry do i haveto created it or does it create itsself ? |
| 20:31.37 | Penguin | Set(DB()) will create it. |
| 20:32.06 | XandriX | aaah |
| 20:37.49 | Penguin | Although, now that you have mentioned that... |
| 20:38.17 | XandriX | ? |
| 20:38.46 | Penguin | This would be better: http://pastebin.com/AMynNUq5 |
| 20:40.00 | XandriX | i think i see what you did there |
| 20:41.00 | XandriX | correct me if im wrong but on this paste you made so that there is an "if" if the entry is already set to 1 set it to 0 right ? |
| 20:41.09 | Penguin | If the DB key doesn't exist on the first time you call that extension, there would be a failure because GotoIf() cannot compare a null value to 1. |
| 20:41.23 | XandriX | oh |
| 20:41.42 | Penguin | But with it quoted, "" can be compared to "1" with no problem. |
| 20:42.40 | Penguin | And I prefer to always wrap conditional matching in $[] because $[] will always evaluate to true or false. |
| 20:44.02 | Penguin | But yes, the extension checks if it is 1. If it is 1, set it to 0. If it is 0, set it to 1. |
| 20:45.59 | Penguin | And he's also playing some sounds to let you know what's going on. |
| 20:48.56 | *** join/#asterisk vlad_starkov (~vlad_star@109.188.127.69) |
| 20:52.28 | XandriX | yeah i saw ill need to change them since correct me if im wrong but that seems to be a custom sound |
| 20:53.17 | Penguin | You'd better start recording! |
| 20:54.36 | XandriX | i guess haha |
| 20:54.56 | XandriX | i mean there are a fiew things you can do with the extra sounds |
| 21:08.26 | *** join/#asterisk felipealmeida (~user@177.41.225.200) |
| 21:12.39 | *** join/#asterisk vlad_starkov (~vlad_star@109.188.127.82) |
| 21:20.57 | *** join/#asterisk vlad_starkov (~vlad_star@109.188.127.82) |
| 21:21.03 | *** join/#asterisk xytis (~xytis@88-223-36-62.meganet.lt) |
| 21:49.19 | *** join/#asterisk jetlag (~jetlag@pool-71-168-196-225.cmdnnj.east.verizon.net) |
| 22:04.09 | *** join/#asterisk dxd828 (~dxd828@88-105-208-194.dynamic.dsl.as9105.com) |
| 22:13.56 | *** join/#asterisk LinoSP (~LinoSP@201.240.245.207) |
| 22:20.27 | *** join/#asterisk u0m3 (~u0m3@92.80.83.133) |
| 22:27.28 | *** join/#asterisk xytis (~xytis@88-223-36-62.meganet.lt) |
| 22:37.28 | Kobaz | anyone use https polycom provisioning? |
| 22:39.55 | Penguin | Only you. |
| 22:40.28 | Kobaz | haha |
| 22:40.29 | Kobaz | apparently |
| 22:40.41 | Kobaz | it looks like the way it works is fairly retarded |
| 22:40.57 | Kobaz | so what i gather so far is you need a 'seed' file on http |
| 22:41.07 | Kobaz | which will point to the successive files on https |
| 22:41.23 | Penguin | If that works, that will be amazing. |
| 22:41.31 | Kobaz | it'll pull from http just fine (albiet ignoring username/password that's been set on the phone) |
| 22:42.16 | Kobaz | so far https is epic fail... |
| 22:42.24 | Kobaz | 1) you cannot connect with a user/pass |
| 22:42.37 | *** join/#asterisk vlad_starkov (~vlad_star@109.188.127.102) |
| 22:42.39 | Kobaz | 2) initial files for mac.cfg are sent in the clear (major fail) |
| 22:42.59 | Kobaz | 3) successive files also cannot be pulled via using a user/pass (major fail) |
| 22:44.13 | Kobaz | so the entire point of using https is completely defeated by the ridiculously limited implementation |
| 22:44.30 | WIMPy | No |
| 22:44.50 | WIMPy | They can write https in the sales brochure. What else do you need? |
| 22:45.16 | Kobaz | haha |
| 22:45.21 | Kobaz | it needs to work properly |
| 22:47.22 | WIMPy | Why? |
| 22:47.41 | Kobaz | otherwise there's no point in even having the option |
| 22:47.52 | WIMPy | If you find out it doesn't work the way you want it to work, you already bought it. |
| 22:49.29 | Kobaz | doesn't mean it can't be fixed |
| 23:13.01 | *** join/#asterisk vlad_starkov (~vlad_star@109.188.127.102) |
| 23:14.22 | XandriX | Penguin: hmm i might have paste failed but last example you sent me every time i dial the extension it sets it to 0 from what i see |
| 23:16.09 | XandriX | oh crap i did paste fail |
| 23:17.07 | Chainsaw | Kobaz: Since the boot loader cannot cope with HTTPS, and only the SIP application can... it falls down much earlier then that. |
| 23:19.40 | *** join/#asterisk xytis (~xytis@88-223-36-62.meganet.lt) |
| 23:20.51 | *** join/#asterisk fonewiz (~fonewiz@cpe-173-174-255-129.satx.res.rr.com) |
| 23:22.50 | fonewiz | Hope everyone is doing well. I am a little stuck on atxfer AMI action. I have been using redirect action for over a year but trying to get atxfer working but having no luck. I suspect the problem is that atxfer expects something different for the "Channel" variable than redirect does. |
| 23:23.09 | fonewiz | Any help would be appreciated, I am going blind searching endlessly |
| 23:24.27 | fonewiz | Doing this for redirect and it works great fputs($socket2, "Action: Redirect\r\n"); |
| 23:24.27 | fonewiz | <PROTECTED> |
| 23:24.29 | fonewiz | fputs($socket2, "Context: outbound-patch\r\n"); |
| 23:24.30 | fonewiz | fputs($socket2, "Exten: ".$numtodial."\r\n"); |
| 23:24.30 | fonewiz | fputs($socket2, "Priority: 1\r\n\r\n"); |
| 23:24.41 | fonewiz | Doh! Sorry, guess I shouldn't paste code in here |
| 23:24.51 | Penguin | ~pb |
| 23:24.52 | infobot | A "pastebin" is a web-based service where you should paste anything over 3 lines so you don't flood the channel. Here are links to a few: http://www.pastebin.com, http://pastebin.ca, http://channels.debian.net/paste, http://paste.lisp.org, http://bin.cakephp.org/; or install pastebinit with yum or aptitude. |
| 23:26.12 | fonewiz | Here is the redirect code: http://pastebin.com/sqSbeWFR |
| 23:27.39 | fonewiz | Here is the AtXfer code: http://pastebin.com/sXbV4Uq5 |
| 23:29.05 | fonewiz | I am sending the channel in exactly the same for both but the little documentation I can find on this AMI action describes the channel slightly different |
| 23:29.41 | fonewiz | For Redirect is says Channel - Channel to redirect. |
| 23:30.00 | fonewiz | For atxfer is says: Channel - Transferer's channel. |
| 23:31.06 | fonewiz | When I attempt the atxfer, I just here a bunch of DTMF as the digits are dialed. This is totally different with my redirect setup where it just transfers the call and hangs up my line (the agent line) |
| 23:31.30 | fonewiz | Anyhow, appreciate any help if anyone is aware of how to fix this.. Thanks |