| 00:00.02 | *** join/#asterisk Oatmeal (~Suzeanne@75-103-145-152.ccrtc.com) |
| 00:05.33 | *** join/#asterisk shootbird (~quassel@beepbeep.serverpit.com) |
| 00:12.28 | *** join/#asterisk klow (~textual@c-98-247-49-57.hsd1.wa.comcast.net) |
| 00:50.21 | *** join/#asterisk RahaiL (~RahaiL@c-73-161-239-35.hsd1.mi.comcast.net) |
| 00:50.47 | RahaiL | hi I need to use agi i have wrongly configure all call i am sending hangup 603 I need to send 503 |
| 00:50.51 | RahaiL | can some one guide me |
| 00:51.09 | RahaiL | !pastebin |
| 01:03.47 | RahaiL | is it safe |
| 01:03.48 | RahaiL | to use this |
| 01:03.48 | RahaiL | <PROTECTED> |
| 01:22.29 | [TK]D-Fender | Not sure if it'd tie up your AGI |
| 01:22.42 | [TK]D-Fender | I usually put a timeout on it like Congestion(5) |
| 01:22.47 | [TK]D-Fender | (as called from dialplan) |
| 01:43.38 | RahaiL | oh ok thank you |
| 01:53.45 | *** join/#asterisk ganbold (~ganbold@173.244.215.173) |
| 01:55.04 | *** join/#asterisk [NC] (~nc@rv1.sabius.net) |
| 02:45.16 | *** join/#asterisk babak (uid19622@gateway/web/irccloud.com/x-ilrwogwovcluwpjf) |
| 03:05.13 | *** join/#asterisk shootbird (~quassel@beepbeep.serverpit.com) |
| 03:38.07 | *** join/#asterisk klow (~textual@c-98-247-49-57.hsd1.wa.comcast.net) |
| 03:40.41 | *** join/#asterisk fstd_ (~fstd@unaffiliated/fisted) |
| 04:06.53 | *** join/#asterisk klow (~textual@c-98-247-49-57.hsd1.wa.comcast.net) |
| 04:11.18 | *** join/#asterisk friedrich (~friedrich@aextron.de) |
| 05:25.15 | *** join/#asterisk iheartlinux (~jwpierce3@173-16-50-64.client.mchsi.com) |
| 05:42.42 | *** join/#asterisk klow (~textual@c-98-247-49-57.hsd1.wa.comcast.net) |
| 05:44.19 | *** join/#asterisk iheartlinux (~jwpierce3@173-16-50-64.client.mchsi.com) |
| 05:47.47 | *** join/#asterisk BakaKuna (~BakaKuna@145.129.205.133) |
| 06:05.22 | *** join/#asterisk evil_gordita (robert@ip70-188-41-127.rn.hr.cox.net) |
| 06:51.48 | *** join/#asterisk miralin (~Thunderbi@194.8.128.120) |
| 07:16.17 | *** join/#asterisk zapata (~zapata@95.129.203.168) |
| 07:25.49 | *** join/#asterisk Jesterboxboy (~Thunderbi@chello080109194026.3.graz.surfer.at) |
| 07:52.02 | *** join/#asterisk davlefou (~davlefou@unaffiliated/davlefou) |
| 07:54.35 | *** join/#asterisk ModFather (~ModFather@unaffiliated/modfather) |
| 08:10.38 | *** join/#asterisk Jesterboxboy (~Thunderbi@chello080109194026.3.graz.surfer.at) |
| 08:10.53 | *** join/#asterisk sikun (~David@67.63.71.166) |
| 08:11.29 | sikun | can I have two AsterisksNOW servers in different locations, both using the same SIP trunk credentials |
| 08:11.45 | sikun | so there would be two connections to the VoIP provider from two different locations |
| 08:12.49 | sikun | I know I could go PBX > PBX but the network infrastructure it'd be a pain in the ass due to the remote location's owner not wanting to pay to upgrade the internet service to get a static IP or get a secondary ISP so I could do site-to-site VPN |
| 08:13.16 | sikun | the owner wants the SIP traffic encrypted so nothing straight over the internet. |
| 08:21.01 | posixninja | sikun: sounds like you need a stun server |
| 08:23.33 | sikun | posixninja, I could google it quick.. but could you give a brief summary of a stun server? (I'm only a month into working with VoIP/SIP/PBX) |
| 08:23.54 | sikun | never had to deal with any of this stuff before, but I have been deemed the phone system admin |
| 08:23.56 | posixninja | usually used to get around NAT |
| 08:24.02 | posixninja | lack of static IP |
| 08:24.05 | sikun | ahh |
| 08:25.19 | posixninja | I'm a n00b also, but I get around ;-P |
| 08:27.51 | sikun | haha |
| 08:48.53 | *** join/#asterisk Tiffon (~name@unaffiliated/tiff0n) |
| 08:49.40 | *** join/#asterisk Tiffon (~name@unaffiliated/tiff0n) |
| 08:50.54 | *** join/#asterisk Tiffon (~name@unaffiliated/tiff0n) |
| 08:51.53 | *** join/#asterisk klow (~textual@c-98-247-49-57.hsd1.wa.comcast.net) |
| 08:53.08 | *** join/#asterisk Tiffon (~name@unaffiliated/tiff0n) |
| 08:54.15 | *** join/#asterisk Oatmeal (~Suzeanne@75-103-145-152.ccrtc.com) |
| 08:56.03 | *** join/#asterisk bmg505 (~leon@165.255.234.30) |
| 08:56.57 | *** join/#asterisk babak (uid19622@gateway/web/irccloud.com/x-kisrotrmnfebvhli) |
| 09:10.41 | sikun | hmm |
| 10:08.34 | *** join/#asterisk UncleKiwi (~UncleKiwi@unaffiliated/unclekiwi) |
| 10:37.31 | *** join/#asterisk eofster (~eofster@ip5b405da0.dynamic.kabel-deutschland.de) |
| 10:43.58 | UncleKiwi | hello i want to install a digital cert on my asterisk 11.6 box i have found a guide for self-signed but no other info can someone point me in the right direction |
| 10:45.07 | *** join/#asterisk obelixBE (~obelix@2a02:1811:c52c:1700:8593:edf4:8d6d:7c28) |
| 11:12.47 | *** join/#asterisk davlefou (~davlefou@unaffiliated/davlefou) |
| 11:40.47 | *** join/#asterisk rrittgarn (~rrittgarn@75-150-221-205-Illinois.hfc.comcastbusiness.net) |
| 11:53.34 | *** join/#asterisk jr220 (~jamesruss@c-68-35-221-115.hsd1.fl.comcast.net) |
| 11:54.42 | *** join/#asterisk pa (~pa@unaffiliated/pa) |
| 12:25.15 | *** join/#asterisk luckman212 (~luckman21@unaffiliated/luckman212) |
| 13:08.39 | *** join/#asterisk luckman212 (~luckman21@unaffiliated/luckman212) |
| 13:22.10 | *** part/#asterisk ttaylor_ (~ttaylor@vpn.duh.net) |
| 13:24.51 | *** join/#asterisk ttaylor (~ttaylor@vpn.duh.net) |
| 13:30.44 | ketas | hmm, i have this problem, i want to log sip call info (packets rx/tx, loss, jitter, rtt, ...) for debug but can't find right way for this |
| 13:47.30 | UncleKiwi | hey people, i purchased a comodo ssl cert and im trying to use it with asterisk |
| 13:47.40 | UncleKiwi | ERROR[20463]: tcptls.c:616 handle_tcptls_connection: Certificate did not verify: unable to get local issuer certificate |
| 13:53.48 | UncleKiwi | SSL error loading private key file |
| 13:54.12 | UncleKiwi | i would really like to get thsi working :) |
| 13:54.14 | UncleKiwi | please |
| 13:56.46 | Samot | What are you TLS settings in sip.conf? |
| 13:56.57 | Samot | What are your TLS settings in sip.conf? |
| 13:57.02 | UncleKiwi | I cat'd the chain into a single file |
| 13:57.12 | UncleKiwi | sorry |
| 13:57.33 | Samot | What? |
| 13:57.41 | Samot | You didn't create the PEM in a proper manner? |
| 13:57.44 | UncleKiwi | tlsenable=yes |
| 13:57.44 | UncleKiwi | tlsbindaddr=0.0.0.0 |
| 13:58.00 | UncleKiwi | tlscipher=ALL |
| 13:58.01 | UncleKiwi | tlsclientmethod=tlsv1 ; |
| 13:58.22 | Samot | No semicolon. |
| 13:58.55 | UncleKiwi | tlscertfile=/etc/asterisk/keys/mycert.crt |
| 13:58.55 | UncleKiwi | tlscafile=/etc/asterisk/keys/ssl-bundle.crt |
| 13:59.28 | UncleKiwi | how do you mean proper manner |
| 13:59.33 | UncleKiwi | ? |
| 13:59.54 | Samot | You just can't cat a .ca into the .crt file |
| 14:00.00 | Samot | You have to create a PEM |
| 14:00.16 | UncleKiwi | i did do that |
| 14:00.19 | UncleKiwi | but |
| 14:00.49 | UncleKiwi | cat COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt > ssl-bundle.crt |
| 14:01.01 | UncleKiwi | these files what do I do with them |
| 14:01.11 | Samot | That's not how it works. |
| 14:01.29 | UncleKiwi | they are the trusted chain |
| 14:02.25 | UncleKiwi | ok so i downloaded 4 files when i was issued the cert |
| 14:02.53 | UncleKiwi | the three above and one that is the cert |
| 14:03.21 | UncleKiwi | can you tell me how it works |
| 14:03.43 | UncleKiwi | it looks like asterisk is expecting 2 files |
| 14:04.18 | Samot | It's expecting three. |
| 14:04.21 | UncleKiwi | tlscafile and tlscertfile |
| 14:04.42 | Samot | You're missing the tlsprivatekey |
| 14:05.06 | UncleKiwi | oh is that the private key |
| 14:05.15 | UncleKiwi | lol |
| 14:05.19 | UncleKiwi | its late here |
| 14:05.44 | UncleKiwi | thank you |
| 14:06.09 | Samot | Yeah the key file you generated for the cert. |
| 14:06.13 | Samot | You need to point to it. |
| 14:06.38 | UncleKiwi | and the 3 files do i cat them into a single file ? |
| 14:06.54 | UncleKiwi | for the tlscafile |
| 14:10.53 | UncleKiwi | yay it worked, thank you |
| 14:12.34 | UncleKiwi | but because I had tsldontverifyserver=yes it worked |
| 14:13.58 | UncleKiwi | but I want it to verify the server right ? |
| 14:25.14 | *** join/#asterisk luckman212 (~luckman21@unaffiliated/luckman212) |
| 14:34.54 | *** join/#asterisk shootbird (~quassel@beepbeep.serverpit.com) |
| 14:40.11 | UncleKiwi | Samot: can you tell me what is ciphers are secure after this tlscipher= I dont think I should be using ALL |
| 14:46.41 | *** join/#asterisk piling (~piling@unaffiliated/piling) |
| 14:50.13 | *** join/#asterisk MaliutaLap (nikolai@unaffiliated/maliuta) |
| 14:56.48 | *** join/#asterisk luckman212 (~luckman21@unaffiliated/luckman212) |
| 15:10.58 | UncleKiwi | can i see the ciphers inuse for a call using the asterisk console |
| 15:25.06 | *** join/#asterisk luckman212 (~luckman21@unaffiliated/luckman212) |
| 15:46.46 | *** join/#asterisk Faustov (~fst@095160154232.dynamic-ww-11.vectranet.pl) |
| 15:47.59 | Faustov | Hello, is the "User Agent:" field present in all SIP packets for a client registering with my asterisk? Or is it mandatory? Asking because I'm looking to use iptables to only allow my user agent |
| 15:48.24 | Faustov | after enabling sip debug it seems to be always present, but thought I'd ask here to be sure |
| 15:49.08 | WIMPy | Is there somethign like a SIP standard? |
| 15:50.07 | Faustov | oh are you going to send me to read the whole RFC? |
| 15:50.53 | WIMPy | Which one? |
| 15:51.33 | Faustov | oh, I somewhat assumed... |
| 15:52.00 | WIMPy | There are a lot of them. |
| 15:52.31 | WIMPy | You can chose yourself which one(s) you like to be compatible with. |
| 15:54.01 | Faustov | ok, but practically thinking - any comments? |
| 15:54.23 | Faustov | goal is to have a more secure solution for asterisk-on-vps + voip client on my mobile |
| 15:55.14 | Faustov | the latter implies I pretty much have to allow ANY into 5060 |
| 15:56.16 | WIMPy | If you found that it should work for you, then try it. |
| 15:57.11 | Faustov | To be honest, I was googling on this and wondered why no one uses this idea ;) |
| 15:57.22 | Faustov | I guess I'll post it somewhere if it works |
| 15:57.34 | Faustov | much better than blacklisting a million scripts |
| 15:57.59 | WIMPy | I think most do, just the other way round, not allowing certain UAs. |
| 16:00.15 | Faustov | but that's insane |
| 16:00.31 | Faustov | keep your tables growing any time a script kiddie changes the UA |
| 16:00.59 | WIMPy | Yes, but do you have a list of all valid UAs? |
| 16:02.48 | Faustov | yep, if I can come up with a funny string and configure my client to use it |
| 16:03.19 | Faustov | my use case is to only let my mobile register (from anywhere) |
| 16:04.33 | WIMPy | Yes, but that's a very special case if you have only one single device. |
| 16:05.51 | Faustov | true |
| 16:05.58 | Faustov | but it seems quite commoon |
| 16:06.06 | Faustov | anyway, works well |
| 16:06.58 | *** join/#asterisk clopez (~tau@neutrino.es) |
| 16:07.14 | Faustov | I'll have to pay attention if this string matching in iptables doesn't cause resource issues when exercised 100 times per second (according to last night logs) |
| 16:07.42 | WIMPy | Order does matter. |
| 16:24.08 | robmal | There was one guy who said the best people have blue eyes and blonde hair. He put numbers on the rest. Didn't work that well. |
| 16:26.35 | Faustov | I guess one could associate the holocaust with iptables -j DROP |
| 16:28.13 | robmal | Droping UAs is asking for trouble, i.e. once the softphone updates it'll have a new UA and you'll drop it. |
| 16:28.27 | robmal | There are better ways. |
| 16:28.58 | Faustov | what would you recommend? |
| 16:29.09 | robmal | I don't know the problem. |
| 16:30.09 | Faustov | [17:54:23] <Faustov> goal is to have a more secure solution for asterisk-on-vps + voip client on my mobile |
| 16:30.09 | Faustov | [17:55:13] <Faustov> the latter implies I pretty much have to allow ANY into 5060 |
| 16:32.34 | robmal | Isn't sip tls enough? |
| 16:33.54 | Faustov | I'm concerned it'd badly impact the call quality if the mobile carrier gets bad signal |
| 16:34.21 | Faustov | plus, I'd still be seeing all those bruteforce attempts |
| 16:36.08 | robmal | Be concerned after you try it. |
| 16:36.19 | robmal | To stop bruteforces use fail2ban. |
| 16:37.15 | Faustov | I did consider f2b but to be honest, the idea of having something change iptables based on my log entries is not appealing |
| 16:38.54 | robmal | I see you're not familiar with linux on public ips and firewalls ;-) |
| 16:39.04 | robmal | Trust me, fail2ban is the way to go. |
| 16:40.20 | *** join/#asterisk [TK]D-Fender (~joe@64.235.216.2) |
| 16:43.10 | robmal | Faustov: Ask [TK]D-Fender what he would use to solve your problems. |
| 16:43.34 | [TK]D-Fender | Xanax <- |
| 16:46.03 | robmal | :-D |
| 16:58.04 | Faustov | I'll look into fail2ban if this causes problems, meanwhile thanks for your input |
| 17:23.32 | *** join/#asterisk evilman_work (~evilman@87.244.6.228) |
| 17:32.19 | *** join/#asterisk babak (uid19622@gateway/web/irccloud.com/x-szzxokpcvyimfrhm) |
| 17:56.08 | *** join/#asterisk SpaceInvaders (~SpaceInva@cpe-172-73-70-53.carolina.res.rr.com) |
| 18:04.30 | WIMPy | If you think filtering by UA is a bad idea, using fail2ban must be insane. |
| 18:22.49 | *** join/#asterisk klow (~textual@c-98-247-49-57.hsd1.wa.comcast.net) |
| 18:39.50 | *** join/#asterisk ModFather (~ModFather@unaffiliated/modfather) |
| 18:45.44 | SpaceInvaders | Does anyone here use KODI with the asterisk addon? I can't find a list of feature/function and am interested in feedback from someone using it. |
| 19:05.46 | *** join/#asterisk chuckf (~chuckf@pool-108-45-91-234.washdc.fios.verizon.net) |
| 19:30.29 | *** join/#asterisk robink_ (~quassel@unaffilated/robink) |
| 19:39.55 | *** join/#asterisk luckman212 (~luckman21@unaffiliated/luckman212) |
| 19:49.40 | *** join/#asterisk luckman212 (~luckman21@unaffiliated/luckman212) |
| 19:57.59 | *** join/#asterisk Oatmeal (~Suzeanne@75-103-145-152.ccrtc.com) |
| 20:48.54 | *** join/#asterisk klow (~textual@c-67-161-106-89.hsd1.wa.comcast.net) |
| 21:12.51 | *** join/#asterisk robink_ (~quassel@unaffilated/robink) |
| 21:16.56 | *** join/#asterisk volga629 (~bendersky@CPE4c5e0cb3c2a0-CM0c473dd46e50.cpe.net.cable.rogers.com) |
| 21:17.40 | volga629 | Hello Everyone, how I can test in dialplan if voicemail left after missed call ? |
| 21:17.52 | robmal | core set verbose 10 |
| 21:18.02 | robmal | Oh, in dialplan. |
| 21:18.14 | scv | lol |
| 21:18.24 | robmal | You can compile odbc voicemail and check on hangup :-) |
| 21:18.25 | volga629 | I need the function name |
| 21:18.33 | volga629 | name |
| 21:18.45 | robmal | https://wiki.asterisk.org/wiki/display/AST/VoiceMail+Channel+Variables |
| 21:18.51 | robmal | Pick one. |
| 21:18.54 | volga629 | exten => s-CHANUNAVAIL |
| 21:20.22 | *** join/#asterisk fling (~fling@fsf/member/fling) |
| 22:27.43 | volga629 | I am trying do "0?voicemail:miss") in new stack |
| 22:28.05 | volga629 | in this case it should go to voicemail |
| 22:28.06 | volga629 | ? |
| 22:28.24 | volga629 | exten => s,n,GotoIf($[0${DIALSTATUS} = "CHANUNAVAIL"]?voicemail:miss) |
| 22:28.30 | robmal | volga629: What exactly do you want to achieve? |
| 22:28.58 | volga629 | if CHANUNAVAIL then go to voicemail |
| 22:29.04 | volga629 | other to miss |
| 22:30.39 | *** join/#asterisk evil_gordita (robert@ip70-188-41-127.rn.hr.cox.net) |
| 22:33.16 | robmal | So GoToIf($["${DIALSTATUS}" !="ANSWER"]?voicemail) maybe? |
| 22:33.37 | volga629 | or 0 |
| 22:35.10 | *** join/#asterisk shootbird (~quassel@beepbeep.serverpit.com) |
| 22:37.02 | volga629 | here are all macro |
| 22:37.05 | volga629 | https://paste.fedoraproject.org/398346/69918209/ |
| 22:37.57 | robmal | I'm too lazy to click and read, brief me. |
| 22:38.55 | volga629 | I am trying send XMPP message if user left voicemail or send message on missed call |
| 22:39.16 | *** join/#asterisk youtmon (~yout@c-73-46-212-142.hsd1.fl.comcast.net) |
| 22:39.29 | volga629 | evaluation of DIALSTATUS alsways return 0 |
| 22:43.38 | robmal | K, dialstatus can't always be 0, add dumpchan to exten => h and use some NoOps to establish it's value after dial() |
| 22:49.25 | volga629 | ok let me test |
| 23:00.41 | [TK]D-Fender | volga629> evaluation of DIALSTATUS alsways return 0 <- because your evaluation is broken. |
| 23:01.46 | volga629 | yes "" |
| 23:02.03 | volga629 | actually I fixed sec a go |
| 23:02.09 | robmal | Yay! |
| 23:02.34 | [TK]D-Fender | Note : don't put charaters that are taken literally on only ONE side of an evaluation |
| 23:03.27 | volga629 | final is here are |
| 23:03.28 | volga629 | https://paste.fedoraproject.org/398367/14699197/ |
| 23:04.57 | [TK]D-Fender | dialplan show macro-jabberd |
| 23:04.58 | [TK]D-Fender | ^ |
| 23:06.33 | volga629 | https://paste.fedoraproject.org/398371/91998614/ |
| 23:10.34 | volga629 | thank you Everyone |
| 23:11.17 | [TK]D-Fender | looks pretty broken |
| 23:11.24 | [TK]D-Fender | You're skipping numbers all over the place |
| 23:12.03 | [TK]D-Fender | s,58 = no way to get there |
| 23:12.08 | [TK]D-Fender | This is very sloppy coding |
| 23:12.26 | [TK]D-Fender | you do NOT go and start other patterns while in the middle of defining another |
| 23:21.23 | *** join/#asterisk pa (~pa@unaffiliated/pa) |
| 23:24.30 | volga629 | This is POC, production code is still far a way |
| 23:24.47 | volga629 | right now just need make work first |
| 23:28.15 | volga629 | but you right 56 is little bit far a way |
| 23:28.33 | [TK]D-Fender | s,58 can't even get executed |
| 23:28.46 | [TK]D-Fender | <[TK]D-Fender> you do NOT go and start other patterns while in the middle of defining another <- |
| 23:34.18 | robmal | volga629: Disregard what [TK]D-Fender said. You're doing fine, trial and error is the best way to learn. |
| 23:35.32 | [TK]D-Fender | You've already made the error. |
| 23:35.35 | [TK]D-Fender | I've pointed it out. |
| 23:35.43 | [TK]D-Fender | Now move those exens out from there |
| 23:37.19 | [TK]D-Fender | learning from trial & error assumes you will eventually stop being blind and actually see. While it is a postive outlook ... people eye's sometimes fail chronically. So ignoring when someone's whose eyes aren't fooled tells you otherwise ignoring their warnings isn't too bright |
| 23:37.35 | [TK]D-Fender | Especially when you're asking about that code in the support channel. |
| 23:41.23 | volga629 | I didn't ignore anybody. I am taking taking in consideration all advises that why I am asking here are in the channel |
| 23:43.42 | volga629 | I change it to 1 and n |
| 23:47.28 | [TK]D-Fender | Lets see what it looks like now... |
| 23:49.46 | volga629 | https://paste.fedoraproject.org/398409/14699225/ |
| 23:51.17 | [TK]D-Fender | the actual code.... |
| 23:53.03 | volga629 | https://paste.fedoraproject.org/398414/99227751/ |
| 23:54.23 | [TK]D-Fender | And are you sure you want your call to end immediately on lines 18, 20, or 22? |
| 23:54.27 | [TK]D-Fender | and line 23 = FAIL |
| 23:54.51 | [TK]D-Fender | Again you are shoving extens in between other extens |
| 23:58.16 | volga629 | yes, because otherwise it will send multiply messages |
| 23:58.44 | volga629 | yes line 23 please ignore it |