Re: Dial-by-ip inbound from unregistered systemsfailure

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

In this case, calls inbound to my customer from off-net
internet-connected systems come in through the customer's firewall
directly to their GnuGK-registered system, so the gatekeeper never sees
Q.931 setup/alert/connect or H.245 messages for the call.  For those
calls , the GK only sees the ARQ from the called system.

With the switch that Jan mentioned in my .ini, the GK sends an ACF and
the endpoint connects the incoming call fine.  The problem now is that
after about half a minute the GK sends a DRQ message to the registered
system, and the registered system disconnects the call.

I assume the GK sends the DRQ in an effort to "clean up" after what it
perceives as a failed call attempt--since it doesn't see the consequent
Q.931/H.2X5 messages after sending the ACF.

I need the GK configured in routed mode to accomplish CAC and
accounting, so using direct mode for all calls won't work for me.  Is
there a way to configure the GK to behave as follows:

1) For all calls outbound from registered systems to all
registered/unregisterd systems, use routed mode.
2) For all calls inbound from neighbor systems, use routed mode.
3) For all calls inbound from unregistered, non-neighbor systems, allow
direct mode.


--
Mike Ockenga
Network Engineer II -- Product Innovations Group
Onvoy, Inc.
952/230-4673
 

> -----Original Message-----
> From: openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx 
> [mailto:openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx] On 
> Behalf Of Jan Willamowius
> Sent: Tuesday, November 06, 2007 11:26 PM
> To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> Subject: Re:  Dial-by-ip inbound from 
> unregistered systemsfailure
> 
> Hi,
> 
> unregistered calls usually start right with the Setup, not 
> with an ARQ.
> 
> We generate a routeCallToGatekeeper error code when one of the
> registered endpoints is called directly. It will the ask 
> permission for
> that call with an ARQ and GnuGk will deny it. Take a lookt at
> ArjReasonRouteCallToGatekeeper=1 switch.
> 
> Regards,
> Jan
> 
> Mike Ockenga wrote:
> > Okay, Thanks to tcpdump/Wireshark, I've got my rejectReason figured
> > out..."routeCallToGatekeeper".  
> > 
> > Now, why is /that/ happening?
> > 
> > --
> > Mike 
> >  
> > 
> > > -----Original Message-----
> > > From: openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx 
> > > [mailto:openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx] On 
> > > Behalf Of Mike Ockenga
> > > Sent: Tuesday, November 06, 2007 11:18 AM
> > > To: GNU Gatekeeper Users
> > > Subject:  Dial-by-ip inbound from 
> > > unregistered systemsfailure
> > > 
> > > Greetings,
> > >  
> > > I'm having trouble with inbound calls from unregistered 
> > > systems.  These
> > > calls are sourced from various reachable internet-connected 
> > > systems and
> > > the remote party dials into the registered system using the 
> > > IP address.
> > > I process the ARQ from the registered system using SQLAuth 
> > > and return a
> > > "check okay".  Immediately after that, the server sends 
> an ARJ to the
> > > called system with RejectionReason "<5>".
> > > 
> > > I've looked for an enumerated list of rejectionReasons, 
> but could not
> > > find one.  I realize it may well be right under my nose, but 
> > > if someone
> > > could point me the right way that would be very helpful.
> > > 
> > > Also, the "Caller_IP:Port" field of the ARJ confuses me.  Why 
> > > would the
> > > "Called Party" IP:Port pair appear there?  
> > > 
> > > Below is the log, config and version info I'm dealing with.
> > > 
> > > Thanks!
> > > 
> > > --
> > > Mike
> > > 
> > > 
> > > (Note that I'ved edited the IP address in the log excerpt to 
> > > reflect an
> > > RFC1918 address for privacy's sake.  The actual IP is public, 
> > > routed and
> > > reachable.)
> > > 
> > > >From the logfile (trace level 6): 
> > > 
> > > 2007/11/05 13:10:51.853 5                job.cxx(180)   JOB   
> > >   Starting
> > > Job ARQ at Worker thread 4137417632
> > > 2007/11/05 13:10:51.853 1             RasSrv.cxx(368)   
> RAS     ARQ
> > > Received
> > > 2007/11/05 13:10:51.853 5              gksql.cxx(387)   SQLAuth
> > > Executing query: SELECT updatebw("", "XXXXXX0047", "7680", "1");
> > > 2007/11/05 13:10:51.856 3             gkauth.cxx(964)   
> > > GKAUTH  SQLAuth
> > > ARQ check ok
> > > 2007/11/05 13:10:51.856 2             RasSrv.cxx(413)
> > > 
> ARJ|192.168.176.193:1720|192.168.176.193:1720|XXX1003:<0>=SH Broadcast
> > > 1:<1>|true|<5>|02-87-8d-bd-69-6e-9f-15-27-04-d1-36-37-a4-0d-c3;
> > >  
> > > 
> > > Version:
> > > 
> > > Gatekeeper(GNU) Version(2.2.6)
> > > Ext(pthreads=1,radius=1,mysql=1,pgsql=0,firebird=0,large_fdset
> > > =4096,cryp
> > > to/ssl=0) Build(Sep 20 2007, 15:37:18) Sys(Linux sparc64
> > > 2.6.21-gentoo-r4)
> > > GkStatus: Version(2.0) Ext()
> > > Toolkit: Version(1.0) Ext(basic)
> > > Startup: Wed, 24 Oct 2007 08:01:22 -0600   Running: 13 
> days 02:54:51
> > > 
> > > 
> > > 
> > > .ini file excerpt:
> > > 
> > > [RoutedMode]
> > > ; Accept calls from neighbors and other 
> > > non-locally-registered systems.
> > > AcceptNeighborCalls=1
> > > AcceptUnregisteredCalls=1
> > > 
> > > [RoutingPolicy]
> > > default=explicit,internal,neighbor
> > >  
> > > 
> > > --------------------------------------------------------------
> > > -----------
> > > This SF.net email is sponsored by: Splunk Inc.
> > > Still grepping through log files to find problems?  Stop.
> > > Now Search log events and configuration files using AJAX and 
> > > a browser.
> > > Download your FREE copy of Splunk now >> http://get.splunk.com/
> > > _______________________________________________________
> > > 
> > > Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> > > Archive: 
> > > http://sourceforge.net/mailarchive/forum.php?forum_name=openh3
> > > 23gk-users
> > > Unsubscribe: 
> > > http://lists.sourceforge.net/lists/listinfo/openh323gk-users
> > > Homepage: http://www.gnugk.org/
> > > 
> > 
> > 
> --------------------------------------------------------------
> -----------
> > This SF.net email is sponsored by: Splunk Inc.
> > Still grepping through log files to find problems?  Stop.
> > Now Search log events and configuration files using AJAX 
> and a browser.
> > Download your FREE copy of Splunk now >> http://get.splunk.com/
> > _______________________________________________________
> > 
> > Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> > Archive: 
> http://sourceforge.net/mailarchive/forum.php?forum_name=openh3
> 23gk-users
> > Unsubscribe: 
> http://lists.sourceforge.net/lists/listinfo/openh323gk-users
> > Homepage: http://www.gnugk.org/
> > 
> 
> 
> -- 
> Jan Willamowius, jan@xxxxxxxxxxxxxx, http://www.gnugk.org/
> 
> --------------------------------------------------------------
> -----------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and 
> a browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> _______________________________________________________
> 
> Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
> Archive: 
> http://sourceforge.net/mailarchive/forum.php?forum_name=openh3
> 23gk-users
> Unsubscribe: 
> http://lists.sourceforge.net/lists/listinfo/openh323gk-users
> Homepage: http://www.gnugk.org/
> 

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/

[Index of Archives]     [SIP]     [Open H.323]     [Gnu Gatekeeper]     [Asterisk PBX]     [ISDN Cause Codes]     [Yosemite News]

  Powered by Linux