| 00:33.32 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 01:08.10 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 01:18.57 | *** join/#asterisk robink (~quassel@unaffilated/robink) |
| 01:40.04 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 01:43.45 | *** join/#asterisk nickvsnetworking (~nickvsnet@203.176.184.10) |
| 02:20.54 | *** join/#asterisk leftleg__ (sid291906@gateway/web/irccloud.com/x-ppdinkgygzcfqdoh) |
| 02:20.56 | *** join/#asterisk drmessano_ (drmessano@pdpc/supporter/active/drmessano) |
| 02:31.30 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 02:32.59 | *** join/#asterisk drc (~drc@stratum0/entity/drc) |
| 02:55.18 | *** join/#asterisk drathir_tor (~drathir@gateway/tor-sasl/drathir) |
| 03:03.45 | *** join/#asterisk miralin1 (~Thunderbi@178.34.161.83) |
| 03:21.50 | *** join/#asterisk pabe (pabematrix@gateway/shell/matrix.org/x-awvresgoetcvcngl) |
| 03:24.07 | *** join/#asterisk gavlee (~gav@unaffiliated/gavlee) |
| 03:26.03 | *** join/#asterisk miralin1 (~Thunderbi@178.34.161.83) |
| 04:13.05 | *** join/#asterisk LiuYan (~NiHola@unaffiliated/liuyan) |
| 04:13.51 | *** part/#asterisk LiuYan (~NiHola@unaffiliated/liuyan) |
| 04:20.27 | *** join/#asterisk nickvsnetworking (~nickvsnet@203.176.184.10) |
| 04:35.40 | *** join/#asterisk nickvsnetworking (~nickvsnet@203.176.184.10) |
| 04:40.25 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 05:26.50 | *** join/#asterisk eharris (~eharris@unaffiliated/eharris) |
| 05:34.06 | *** join/#asterisk gerhard7 (~gerhard7@ip5657ee30.direct-adsl.nl) |
| 05:41.13 | *** join/#asterisk tomaluca95 (~quassel@kde/developer/tomaluca) |
| 05:46.20 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 06:07.22 | *** join/#asterisk miralin1 (~Thunderbi@178.34.161.83) |
| 06:09.07 | *** join/#asterisk gavlee (~gav@unaffiliated/gavlee) |
| 06:11.41 | *** join/#asterisk miralin (~Thunderbi@195.209.246.194) |
| 06:14.37 | *** join/#asterisk evil_gordita (~evilgordi@ip24-254-23-39.rn.hr.cox.net) |
| 06:22.08 | *** join/#asterisk fstd_ (~fstd@unaffiliated/fisted) |
| 07:12.57 | *** join/#asterisk nickvsnetworking (~nickvsnet@203.176.184.10) |
| 07:51.19 | *** join/#asterisk tomaluca95_ (~quassel@kde/developer/tomaluca) |
| 08:05.29 | *** join/#asterisk lankanmon (~LKNnet@CPEb4fbe4e331bd-CM64777d632380.cpe.net.cable.rogers.com) |
| 09:00.22 | *** join/#asterisk luckman212 (luckman212@unaffiliated/luckman212) |
| 09:33.22 | *** join/#asterisk tomaluca95 (~quassel@kde/developer/tomaluca) |
| 09:38.01 | *** join/#asterisk koltrast_ (8da08e59@h77-53-57-114.cust.a3fiber.se) |
| 09:42.52 | *** join/#asterisk sibiria (~sibiria@unaffiliated/sibiria) |
| 09:44.36 | *** join/#asterisk jkroon (~jkroon@165.16.203.102) |
| 10:02.27 | *** join/#asterisk sa02irc (~mbax@155-079-043-212.ip-addr.inexio.net) |
| 10:02.53 | *** join/#asterisk tomaluca95 (~quassel@kde/developer/tomaluca) |
| 10:29.57 | *** join/#asterisk tomaluca95 (~quassel@kde/developer/tomaluca) |
| 11:19.36 | *** join/#asterisk bford (uid283514@gateway/web/irccloud.com/x-xtatmuzzdnrbtlno) |
| 11:19.36 | *** mode/#asterisk [+o bford] by ChanServ |
| 12:31.27 | *** join/#asterisk dacod (~dacod@170.247.5.85) |
| 12:39.30 | *** join/#asterisk rpifan (~rpifan@p200300d2671236940529cf9ad75e3a18.dip0.t-ipconnect.de) |
| 13:06.36 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 13:22.27 | *** join/#asterisk MLC (~MLC@63.249.40.11) |
| 13:25.16 | *** join/#asterisk brad_mssw (~brad@66.129.88.50) |
| 13:26.02 | *** join/#asterisk gerhard7 (~gerhard7@ip5657ee30.direct-adsl.nl) |
| 13:32.19 | *** join/#asterisk matrix1233 (~matrix123@185.13.106.106) |
| 13:35.00 | MLC | Uggh, Mondays. Sometime over the weekend all my phones using transport=tls stopped working. They are complaining about an invalid certificate. Cert has not expired. Did a compare from a backup a week ago and the cert files have not changed. Restarted asterisk. Any ideas? |
| 13:35.48 | file | where is your certificate from? |
| 13:36.27 | MLC | Sectigo |
| 13:36.30 | file | https://sectigo.com/resource-library/sectigos-addtrust-root-is-soon-to-expire-what-you-need-to-know |
| 13:37.00 | MLC | Seriously. |
| 13:43.45 | Samot | NOTIFICATION | FEB 18, 2020 |
| 13:43.56 | Samot | It's been in the pipeline for some time |
| 13:44.14 | MLC | I never saw it. :( |
| 13:44.20 | MLC | \ |
| 13:44.41 | Samot | They aren't the only ones. |
| 13:44.48 | *** join/#asterisk drathir_tor (~drathir@gateway/tor-sasl/drathir) |
| 13:44.56 | Samot | The changes to TLS support has been in the works for some time. |
| 13:45.41 | Samot | There is no longer going to be support for anything less than TLS1.2 |
| 13:46.19 | Samot | Just another FYI: Flash is dead this year too. |
| 13:46.25 | Samot | In case anyone has missed that. |
| 13:46.26 | MLC | lol |
| 13:46.57 | MLC | sings "flash" from queen (movie Flash Gordon) in his head |
| 13:47.23 | Samot | The novelty of the Internet is over. |
| 13:47.56 | Samot | The days of running 10 yo devices/systems that can't support modern requirements is over. |
| 13:49.33 | MLC | I got that cert in April, after they already knew the root was expiring soon. Wonder why they chained mine to the old root??!! |
| 13:50.52 | Samot | Shrug, I don't do TLS based SIP but I use them for my certs and all my certs are good. |
| 13:53.26 | MLC | thanks for the help. I'm back in business. |
| 13:53.40 | Samot | Ahh I see the issue. |
| 13:54.26 | Samot | For business processes that depend on very old systems, Sectigo has made available a new legacy root for cross-signing, the âAAA Certificate Servicesâ root. However, please use extreme caution about any process that depends on very old legacy systems. Systems that have not received the updates necessary to support newer roots such as Sectigoâs COMODO root will inevitably be missing other essential security updates |
| 13:54.26 | Samot | and should be considered insecure. |
| 13:54.49 | Samot | Basically, I didn't see any issues because it automatically moved to the modern root. |
| 13:54.57 | Samot | And I don't have anything that is old. |
| 13:55.13 | MLC | My Digium phones must be "old" then |
| 13:55.23 | Samot | Or doesn't have current updates. |
| 13:55.46 | Samot | When was the last time it saw a firmware update? |
| 13:55.49 | MLC | I'll check for firmware updates. It's only been a couple of months. |
| 13:59.11 | craigify | hahah |
| 13:59.12 | MLC | There is one FW release newer than mine, doesn't mention anything about this in the notes |
| 13:59.51 | craigify | The phones I've deployed don't even trust the new Sectigo root/intermediary certs |
| 13:59.59 | craigify | I just went through this |
| 14:02.04 | Samot | I've used those certs for TLS testing, haven't had an issue. Guess I should check again this week. |
| 14:09.59 | drmessano | Seems like they clearly marked the SHA1 and SHA2 certs |
| 14:10.07 | drmessano | craigify: How old are your phones? |
| 14:14.19 | *** join/#asterisk cresl1n (uid299068@asterisk/libpri-and-libss7-expert/Cresl1n) |
| 14:14.19 | *** mode/#asterisk [+o cresl1n] by ChanServ |
| 14:18.33 | *** join/#asterisk drathir_tor (~drathir@gateway/tor-sasl/drathir) |
| 14:21.17 | *** join/#asterisk kharwell (uid358942@gateway/web/irccloud.com/x-atltvdjtmofpdwzi) |
| 14:21.17 | *** mode/#asterisk [+o kharwell] by ChanServ |
| 14:33.32 | craigify | within the last 2 years, up until very recently |
| 14:38.06 | Samot | What models? |
| 14:38.16 | craigify | lots of Yealink 48 and 52 series mostly |
| 14:40.10 | *** join/#asterisk Janos (~textual@201.204.94.76) |
| 14:41.57 | Samot | 48G or 48S? |
| 14:44.01 | craigify | S |
| 14:44.11 | Samot | What is the firmware it is on? |
| 14:44.17 | craigify | not sure, probably older |
| 14:45.00 | Samot | OK well a slew of Yealink models had firmware updates in March/April this year. |
| 14:45.21 | Samot | The T-48S was one of them. However, the T-52S hasn't seen a firmware update since last Oct. |
| 14:45.55 | Samot | So it is very possible that the current firmware updates could have solve your issues with the T-48S |
| 14:47.02 | craigify | I did a quick fix over the weekend and got a LetsEncrypt cert |
| 14:47.10 | Samot | I understand that |
| 14:47.18 | craigify | they all support LE's root |
| 14:47.47 | *** join/#asterisk eXistenZ (~pectic@bzq-79-180-212-75.red.bezeqint.net) |
| 14:48.15 | Samot | Again, you just said you're on old firmware. |
| 14:48.20 | *** part/#asterisk MLC (~MLC@63.249.40.11) |
| 14:48.30 | Samot | Without actually testing that theory against current firmware, it's hard to say. |
| 14:51.14 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 14:51.23 | craigify | I'd rather LE anyway, and plan on a bigger rollout. I'll automate it will ansible. I'm suprised how well supported LE is... |
| 14:52.36 | Samot | More power to you. |
| 14:52.43 | craigify | but yeah, hard to tell and I had to get it up and running for this morning. |
| 15:04.49 | *** join/#asterisk matrix1233 (~matrix123@185.13.106.234) |
| 15:06.40 | *** join/#asterisk mahlon (~mahlon@martini.nu) |
| 15:18.04 | *** join/#asterisk miralin (~Thunderbi@195.209.246.194) |
| 15:33.08 | Ryushin | I migrated from 13 LTS to 16.8 certified yesterday and converted to pjsip. Found something odd with incoming calls from Magicjack while they are in the auto attendant. If there is a pause for longer than a second, then the Magicjack callers will only have silence from that point on. |
| 15:33.50 | igcewieling | probably should not have done both at the same time. |
| 15:35.55 | *** join/#asterisk hfb (~hfb@47.139.17.87) |
| 15:36.32 | Ryushin | My flowroute pjsip.conf and an extensions.conf that can show the problem. http://ix.io/2o1Z |
| 15:36.55 | Ryushin | igcewieling: Well, the problem is occurring using pjsip or sip. |
| 15:37.07 | Ryushin | I tested with both. |
| 15:37.40 | Ryushin | Worked fine on 13 LTS. |
| 15:40.17 | Samot | Wait. |
| 15:40.29 | Samot | How does MagicJack fit into this? |
| 15:41.02 | Ryushin | Incoming calls from a MagicJack service cause this. Calls from mobile phones and through Googlevoice work fine. |
| 15:41.34 | Samot | You mean calls that come in over Flowroute? |
| 15:42.19 | Ryushin | I have a MagicJack for my home phone and when I call the asterisk system to do testing is when I encountered this. Funny thing is, faxes work from coming from MagicJack. Yes, my SIP provider is Flowroute and all calls come in over that. |
| 15:43.16 | Samot | Why are you registering to all their PoPs? |
| 15:43.40 | Ryushin | If I change the wait time in the auto attendant in my example to 1 second, everything plays through. Change it to 2 seconds of wait, and no more audio over the Magicjack. |
| 15:43.57 | Samot | You mean calls that come in over Flowroute? |
| 15:44.02 | Samot | Why are you registering to all their PoPs? |
| 15:44.09 | Samot | ^^ that one |
| 15:44.29 | Ryushin | Flowroutes config says I need to register all of them to have load balancing and such. |
| 15:44.44 | Ryushin | Yes, all calls come in over Flowroute. |
| 15:45.09 | *** join/#asterisk ilius (~ilius@2620:53:2000:22::222) |
| 15:45.50 | igcewieling | MagicJack is some sort of hardware card or usb dongle? |
| 15:46.39 | Ryushin | USB Dongle that is programmed from a PC and then plugged into my house line. So it rings all the phones in the house. |
| 15:46.55 | igcewieling | How does it get to Asterisk? |
| 15:47.08 | Ryushin | It's programmed on the PC and then disconnected and plugged into my house. |
| 15:47.29 | igcewieling | When you mean "programmed on the PC" you mean "plugged into Asterisk?" |
| 15:47.30 | Samot | That's quite interesting. |
| 15:47.40 | Samot | Flowroute wants you to select your primary PoP |
| 15:47.46 | Ryushin | MagicJack is not hooked to the asterisk system. I'm just calling to the asterisk system using MagicJack. |
| 15:47.54 | Samot | It only lists that PoP as the registration host. |
| 15:48.09 | Samot | It even says, "If you change this you need to update your server config" |
| 15:48.20 | Samot | So no, you do not have to register to ALL the PoPs for failover. |
| 15:48.25 | drmessano | Yeah you can't put all the Flowroute POPs on the box |
| 15:48.35 | Samot | That is not how it is done or documented. |
| 15:49.17 | Ryushin | Well, that is one of things I was going to talk to them about. The documentation seemed to show that. I can remove the other registration ones except for my primary pop. |
| 15:49.27 | Samot | As you should. |
| 15:50.03 | Samot | 11:44:29 AM <Ryushin> Flowroutes config says I need to register all of them to have load balancing and such. <-- Because this is a highly incorrect statement. |
| 15:50.16 | drmessano | No, it doesnt |
| 15:50.18 | drmessano | https://support.flowroute.com/523626-Interconnection-with-Flowroute-PoPs |
| 15:50.49 | drmessano | Their documentation states to WHITELIST their IPs within the POP for load balancing, which means ALLOWING calls from any of the IPs they would send from |
| 15:50.56 | drmessano | Not registering to all POPs |
| 15:51.02 | drmessano | Not even whitelisting all POPs |
| 15:52.24 | Samot | exten => 2799,2,Dial(PJSIP/${EXTEN},14,tr) |
| 15:52.24 | Samot | exten => 2799,3,Dial(PJSIP/${EXTEN},1,tr) |
| 15:52.31 | Samot | That is not even going to work. |
| 15:52.56 | Samot | Well for answered calls at least. |
| 15:53.20 | Samot | Why would you dial the extension for 14 seconds, then redial for 1 second if not answered? |
| 15:53.53 | Ryushin | I can decline the call on my yates softphone that goes to 2799. If I don't have it registers, it just skips past lines 2 and 3. |
| 15:54.11 | Ryushin | It was for something else. Just ignore that. :) |
| 16:03.43 | *** join/#asterisk Janos (~textual@201.204.94.76) |
| 16:05.25 | Ryushin | From here: https://developer.flowroute.com/docs/inbound-and-outbound-calling-with-flowroute-new-pops/#utilizing-new-pops-for-outbound-calls At the end of the page under "Utilizing Current PoPs for Inbound Calls", it says "For customers that use SIP registration, calls will only ever originate from PoPs that you register with. You will need to configure your gateways to register with one or more of the following to utilize the current PoPs |
| 16:05.25 | Ryushin | for inbound calling" So that is why I registered to each of those pops. |
| 16:08.20 | ilius | Why not have your MagicJack talk to Asterisk, and Asterisk register with the PoPs? Are you just using Asterisk to test the MagicJack? |
| 16:10.01 | Ryushin | I'm just calling over a magicjack line to POTS, to Flowroute, to the Asterisk server. |
| 16:11.02 | ilius | Oh. Feh. Not too magic to me... https://wp.magicjack.com/features/does-magicjack-work-with-pbxs-such-as-asterisk/ |
| 16:13.11 | ilius | I used a card like this for all of my analog phones at home (before I migrated to full-on-sip-everywhere) https://www.sangoma.com/telephony-cards/analog/ |
| 16:19.30 | Ryushin | My customer also used to have a PRI card along with a four port Analog card for faxes. Now everything is SIP for them as well. |
| 16:20.32 | Ryushin | The magicjack is just for my home phone. It plugged into the wiring of the house and rings the house phones. |
| 16:22.02 | Ryushin | It could happen with other SIP providers, such as Magicjack that I want to track this down and fix it. |
| 16:33.01 | *** join/#asterisk rmudgett (~rmudgett@170.249.191.178) |
| 16:33.02 | *** mode/#asterisk [+o rmudgett] by ChanServ |
| 16:39.15 | *** join/#asterisk miralin1 (~Thunderbi@195.209.246.194) |
| 16:39.56 | *** join/#asterisk rmudgett (~rmudgett@170.249.191.178) |
| 16:39.57 | *** mode/#asterisk [+o rmudgett] by ChanServ |
| 16:46.23 | *** join/#asterisk cybrNaut (~cybrNaut@unaffiliated/cybrnaut) |
| 16:48.25 | igcewieling | This is one hell of a persistent scammer: 13152748329 |
| 16:48.43 | file | that sounds familiar |
| 16:48.56 | *** join/#asterisk Janos (~textual@201.204.94.76) |
| 17:10.53 | *** join/#asterisk forgotmynick (uid24625@gateway/web/irccloud.com/x-emizhmcvhmurnhvl) |
| 17:37.24 | *** join/#asterisk Janos (~textual@201.204.94.76) |
| 18:22.27 | *** join/#asterisk drathir_tor (~drathir@gateway/tor-sasl/drathir) |
| 18:38.13 | *** join/#asterisk driz (~driz@joinsg.net) |
| 18:45.02 | *** join/#asterisk koltrast_ (8da08e59@h77-53-57-114.cust.a3fiber.se) |
| 18:54.50 | *** join/#asterisk driz (~driz@joinsg.net) |
| 19:15.13 | *** join/#asterisk Iamnacho (~Iamnacho@ip68-110-234-244.ks.ks.cox.net) |
| 19:18.01 | *** join/#asterisk pabe (pabematrix@gateway/shell/matrix.org/x-ehrbtwaekwhtpaqe) |
| 19:56.38 | *** join/#asterisk rpifan_ (~rpifan@p4fca235b.dip0.t-ipconnect.de) |
| 19:57.20 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 20:24.31 | *** join/#asterisk CatCow97 (~mine9@c-73-96-109-206.hsd1.or.comcast.net) |
| 20:25.54 | joako | How do I debug pjsip TLS? Right now the client does not register, and the console shows nothing even with verbosity turned up |
| 20:34.13 | *** join/#asterisk Heart_And_Chops (~Heart_And@S0106cc2de0099182.no.shawcable.net) |
| 20:42.27 | jsmith | joako: Can you get a packet trace on the network? If nothing shows up on the console (with verbosity turned up), then I would start investigating things before they hit Asterisk. |
| 20:42.38 | jsmith | joako: (I'm assuming you've already tried "pjsip set logger on") |
| 20:49.33 | igcewieling | Does anyone happen to know if you can remove headers with PJSIP_HEADER and/or RDNIS with CALLERID(RDNIS) inside the pre-dial handler? |
| 20:51.34 | Samot | With PJSIP there would be no headers like that on the new channel until you set them in the pre-dial. |
| 20:51.42 | Samot | Or any other channel variables. |
| 20:52.04 | Samot | Well no, probably just headers. |
| 20:52.16 | Samot | What headers are you looking to remove? |
| 20:54.43 | igcewieling | The Diversion header. |
| 20:54.54 | *** join/#asterisk matrix1233 (~matrix123@83.137.1.217) |
| 20:56.34 | file | there's a PJSIP endpoint option to disable it, otherwise you can probably use the REDIRECTING dialplan function to set the number to not be valid |
| 20:57.25 | igcewieling | I need to do it on a per call basis. I tried it and I'll see what happens when get another diversion call. |
| 20:57.27 | Samot | Well that header would exist on the caller channel. |
| 20:58.25 | igcewieling | I want it to stay existing on the caller channel. I only want it gone on the outgoing channel to a screening service, which doesn't like the invalid numbers it sometimes sees in Diversion. |
| 20:58.57 | Samot | The headers only exist on the callers channel. |
| 20:59.18 | igcewieling | This is chan_sip, actually |
| 21:00.05 | igcewieling | I'm adding some dialplan to connect our FreePBX sites with PRI into the new fraud/scam/spam/robo call screening feature I am testing out. |
| 21:01.33 | Samot | SIPRemoveHeader doesn't work? |
| 21:02.19 | igcewieling | That is what I was asking, should I expect it to work. |
| 21:02.54 | Samot | Well I just looked, it just says it removes headers added by SIPAddHeader so maybe.. |
| 21:02.57 | Samot | Not 100% |
| 21:03.18 | Samot | Why don't you just use Chan_PJSIP to the screener? |
| 21:05.44 | igcewieling | Because chan_sip is what this pbx has been running and I don't want to change much. |
| 21:13.39 | igcewieling | I'd actually have to do any SIP stuff on the outgoing channel. The incoming channel is DAHDI |
| 21:21.24 | *** join/#asterisk miralin (~Thunderbi@195.209.246.194) |
| 21:23.11 | *** join/#asterisk Jesterboxboy (~Thunderbi@84-115-150-8.cable.dynamic.surfer.at) |
| 21:23.17 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 22:12.04 | *** join/#asterisk m4rcu5 (~m4rcu5@2001:470:7a1c:20:20c:29ff:fe03:6ea7) |
| 22:43.05 | *** join/#asterisk CatCow97 (~mine9@c-73-96-109-206.hsd1.or.comcast.net) |
| 23:15.40 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 23:30.15 | *** join/#asterisk Cory (~Cory@unaffiliated/cory) |
| 23:32.39 | *** join/#asterisk arcarius (~ilius@2620:53:2000:22::222) |
| 23:40.01 | hardwire | Any gotchas with "noload => chan_sip.so" if using pjsip mainly? |
| 23:57.09 | *** join/#asterisk lembron (~admin@unaffiliated/lembron) |
| 23:58.46 | lembron | outgoing trunk, i want to tcp - my general settings have a tcpenable, the trunk itself also has that + transport=tcp + tcpbindip --- yet i see just UDP traffic... - where to dig? |