After a bit more due diligence... ;-) In RasTbl.h, the variable m_timeout is type "long", so I could theoretically set SignalTimeout=14400000 (4 hours) in my *.ini to support calls from unregistered endpoints as defined in my last post. What havoc could that cause for legitimately failing calls between two registered endpoints? RasPDU.h -- Mike Ockenga > -----Original Message----- > From: openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx > [mailto:openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx] On > Behalf Of Mike Ockenga > Sent: Friday, November 16, 2007 10:30 AM > To: GNU Gatekeeper Users > Subject: Re: Dial-by-ip inbound from > unregisteredsystemsfailure > > Hi, > > In this case, calls inbound to my customer from off-net > internet-connected systems come in through the customer's firewall > directly to their GnuGK-registered system, so the gatekeeper > never sees > Q.931 setup/alert/connect or H.245 messages for the call. For those > calls , the GK only sees the ARQ from the called system. > > With the switch that Jan mentioned in my .ini, the GK sends an ACF and > the endpoint connects the incoming call fine. The problem now is that > after about half a minute the GK sends a DRQ message to the registered > system, and the registered system disconnects the call. > > I assume the GK sends the DRQ in an effort to "clean up" after what it > perceives as a failed call attempt--since it doesn't see the > consequent > Q.931/H.2X5 messages after sending the ACF. > > I need the GK configured in routed mode to accomplish CAC and > accounting, so using direct mode for all calls won't work for me. Is > there a way to configure the GK to behave as follows: > > 1) For all calls outbound from registered systems to all > registered/unregisterd systems, use routed mode. > 2) For all calls inbound from neighbor systems, use routed mode. > 3) For all calls inbound from unregistered, non-neighbor > systems, allow > direct mode. > > > -- > Mike Ockenga > Network Engineer II -- Product Innovations Group > Onvoy, Inc. > 952/230-4673 > > > > -----Original Message----- > > From: openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx > > [mailto:openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx] On > > Behalf Of Jan Willamowius > > Sent: Tuesday, November 06, 2007 11:26 PM > > To: openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > > Subject: Re: Dial-by-ip inbound from > > unregistered systemsfailure > > > > Hi, > > > > unregistered calls usually start right with the Setup, not > > with an ARQ. > > > > We generate a routeCallToGatekeeper error code when one of the > > registered endpoints is called directly. It will the ask > > permission for > > that call with an ARQ and GnuGk will deny it. Take a lookt at > > ArjReasonRouteCallToGatekeeper=1 switch. > > > > Regards, > > Jan > > > > Mike Ockenga wrote: > > > Okay, Thanks to tcpdump/Wireshark, I've got my > rejectReason figured > > > out..."routeCallToGatekeeper". > > > > > > Now, why is /that/ happening? > > > > > > -- > > > Mike > > > > > > > > > > -----Original Message----- > > > > From: openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx > > > > [mailto:openh323gk-users-bounces@xxxxxxxxxxxxxxxxxxxxx] On > > > > Behalf Of Mike Ockenga > > > > Sent: Tuesday, November 06, 2007 11:18 AM > > > > To: GNU Gatekeeper Users > > > > Subject: Dial-by-ip inbound from > > > > unregistered systemsfailure > > > > > > > > Greetings, > > > > > > > > I'm having trouble with inbound calls from unregistered > > > > systems. These > > > > calls are sourced from various reachable internet-connected > > > > systems and > > > > the remote party dials into the registered system using the > > > > IP address. > > > > I process the ARQ from the registered system using SQLAuth > > > > and return a > > > > "check okay". Immediately after that, the server sends > > an ARJ to the > > > > called system with RejectionReason "<5>". > > > > > > > > I've looked for an enumerated list of rejectionReasons, > > but could not > > > > find one. I realize it may well be right under my nose, but > > > > if someone > > > > could point me the right way that would be very helpful. > > > > > > > > Also, the "Caller_IP:Port" field of the ARJ confuses me. Why > > > > would the > > > > "Called Party" IP:Port pair appear there? > > > > > > > > Below is the log, config and version info I'm dealing with. > > > > > > > > Thanks! > > > > > > > > -- > > > > Mike > > > > > > > > > > > > (Note that I'ved edited the IP address in the log excerpt to > > > > reflect an > > > > RFC1918 address for privacy's sake. The actual IP is public, > > > > routed and > > > > reachable.) > > > > > > > > >From the logfile (trace level 6): > > > > > > > > 2007/11/05 13:10:51.853 5 job.cxx(180) JOB > > > > Starting > > > > Job ARQ at Worker thread 4137417632 > > > > 2007/11/05 13:10:51.853 1 RasSrv.cxx(368) > > RAS ARQ > > > > Received > > > > 2007/11/05 13:10:51.853 5 gksql.cxx(387) SQLAuth > > > > Executing query: SELECT updatebw("", "XXXXXX0047", "7680", "1"); > > > > 2007/11/05 13:10:51.856 3 gkauth.cxx(964) > > > > GKAUTH SQLAuth > > > > ARQ check ok > > > > 2007/11/05 13:10:51.856 2 RasSrv.cxx(413) > > > > > > > ARJ|192.168.176.193:1720|192.168.176.193:1720|XXX1003:<0>=SH Broadcast > > > > 1:<1>|true|<5>|02-87-8d-bd-69-6e-9f-15-27-04-d1-36-37-a4-0d-c3; > > > > > > > > > > > > Version: > > > > > > > > Gatekeeper(GNU) Version(2.2.6) > > > > Ext(pthreads=1,radius=1,mysql=1,pgsql=0,firebird=0,large_fdset > > > > =4096,cryp > > > > to/ssl=0) Build(Sep 20 2007, 15:37:18) Sys(Linux sparc64 > > > > 2.6.21-gentoo-r4) > > > > GkStatus: Version(2.0) Ext() > > > > Toolkit: Version(1.0) Ext(basic) > > > > Startup: Wed, 24 Oct 2007 08:01:22 -0600 Running: 13 > > days 02:54:51 > > > > > > > > > > > > > > > > .ini file excerpt: > > > > > > > > [RoutedMode] > > > > ; Accept calls from neighbors and other > > > > non-locally-registered systems. > > > > AcceptNeighborCalls=1 > > > > AcceptUnregisteredCalls=1 > > > > > > > > [RoutingPolicy] > > > > default=explicit,internal,neighbor > > > > > > > > > > > > -------------------------------------------------------------- > > > > ----------- > > > > This SF.net email is sponsored by: Splunk Inc. > > > > Still grepping through log files to find problems? Stop. > > > > Now Search log events and configuration files using AJAX and > > > > a browser. > > > > Download your FREE copy of Splunk now >> http://get.splunk.com/ > > > > _______________________________________________________ > > > > > > > > Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > > > > Archive: > > > > http://sourceforge.net/mailarchive/forum.php?forum_name=openh3 > > > > 23gk-users > > > > Unsubscribe: > > > > http://lists.sourceforge.net/lists/listinfo/openh323gk-users > > > > Homepage: http://www.gnugk.org/ > > > > > > > > > > > > -------------------------------------------------------------- > > ----------- > > > This SF.net email is sponsored by: Splunk Inc. > > > Still grepping through log files to find problems? Stop. > > > Now Search log events and configuration files using AJAX > > and a browser. > > > Download your FREE copy of Splunk now >> http://get.splunk.com/ > > > _______________________________________________________ > > > > > > Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > > > Archive: > > http://sourceforge.net/mailarchive/forum.php?forum_name=openh3 > > 23gk-users > > > Unsubscribe: > > http://lists.sourceforge.net/lists/listinfo/openh323gk-users > > > Homepage: http://www.gnugk.org/ > > > > > > > > > -- > > Jan Willamowius, jan@xxxxxxxxxxxxxx, http://www.gnugk.org/ > > > > -------------------------------------------------------------- > > ----------- > > This SF.net email is sponsored by: Splunk Inc. > > Still grepping through log files to find problems? Stop. > > Now Search log events and configuration files using AJAX and > > a browser. > > Download your FREE copy of Splunk now >> http://get.splunk.com/ > > _______________________________________________________ > > > > Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > > Archive: > > http://sourceforge.net/mailarchive/forum.php?forum_name=openh3 > > 23gk-users > > Unsubscribe: > > http://lists.sourceforge.net/lists/listinfo/openh323gk-users > > Homepage: http://www.gnugk.org/ > > > > -------------------------------------------------------------- > ----------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2005. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________________ > > Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx > Archive: > http://sourceforge.net/mailarchive/forum.php?forum_name=openh3 23gk-users > Unsubscribe: > http://lists.sourceforge.net/lists/listinfo/openh323gk-users > Homepage: http://www.gnugk.org/ > ------------------------------------------------------------------------- SF.Net email is sponsored by: The Future of Linux Business White Paper from Novell. From the desktop to the data center, Linux is going mainstream. Let it simplify your IT future. http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4 _______________________________________________________ Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users Homepage: http://www.gnugk.org/
