Re: gnugk 3.02 call limit

mauro arduini <mauroo@xxxxxxxxx> · Thu, 2 Aug 2012 17:32:48 +0200

hi,
i've change my config

[RoutingPolicy]
default=internal,parent,dns,srv,neighbor

[RasSrv::PermanentEndpoints]
10.9.23.10=mcu@xxxxxxxxxx;90021

[EP::mcu@xxxxxxxxxx]
PrefixCapacities=^9:=2
Capacity=2

[EP::90021]
Capacity=2

but not work
you can see also this log in status windows

PrintAllRegistrations

AllRegistrations
RCF|10.9.23.10:1720|mcu@xxxxxxxxxx:h323_ID=90000:dialedDigits=90011:dialedDigits=90022:dialedDigits=90021:dialedDigits=90012:dialedDigits=8100:dialedDigits=8000:dialedDigits=9002:dialedDigits=9001:dialedDigits=9000:dialedDigits|gateway|1050_endp

RCF|172.16.53.201:1720|051904:dialedDigits=ls_ut.bo@xxxxxxxxxx:h323_ID|terminal|7435740e-d00c-11e1-8e99-0010f31ecdf4_22
RCF|172.16.52.195:1720|jhfu<:h323_ID=876576:dialedDigits|terminal|1051_endp
Number of Endpoints: 3

;

PrintPrefixCapacities
PrefixCapacities
-- Endpoint: mcu@xxxxxxxxxx=90000=90011=90022=90021=90012=8100=8000=9002=9001=9000 (10.9.23.10:1720) --

Total calls = 0
prefix/capacity/curr: ^9/2/0
-- Endpoint: 051904=ls_ut.bo@xxxxxxxxxx (172.16.53.201:1720) --

Total calls = 0
-- Endpoint: jhfu<=876576 (172.16.52.195:1720) --

Total calls = 0

PrintPrefixCapacities (in call from 3 endpoint not registered to 90021)

PrefixCapacities
-- Endpoint: mcu@xxxxxxxxxx=90000=90011=90022=90021=90012=8100=8000=9002=9001=9000 (10.9.23.10:1720) --

Total calls = 3
prefix/capacity/curr: ^9/2/2
-- Endpoint: 051904=ls_ut.bo@xxxxxxxxxx (172.16.53.201:1720) --

Total calls = 0
-- Endpoint: jhfu<=876576 (172.16.52.195:1720) --

Total calls = 0
;

PrintCurrentCalls
CurrentCalls
Call No. 1 | CallID 2a d3 61 89 aa 07 19 10 9a 3d c8 9c dc 27 a8 68 | 150 | 0
Dial h323:90021:h323_ID=90021:dialedDigits
ACF|172.16.52.49:4008| |26160|h323:90021:h323_ID=90021:dialedDigits|1234:h323_ID=1234:dialedDigits|false;

ACF|10.9.23.10:1720|1050_endp|58928|h323:90021:h323_ID=90021:dialedDigits|1234:h323_ID=1234:dialedDigits|true;
Call No. 2 | CallID ab bb c0 36 2b 4d 11 da b3 eb 00 13 fa 03 46 98 | 143 | 0
Dial 90021:dialedDigits

ACF|10.9.23.212:62110| |28925|90021:dialedDigits|utpub@xxxxxxxxxx:h323_ID=0522702:dialedDigits=ip$10.9.23.212:1720:transportID|false;
ACF|10.9.23.10:1720|1050_endp|61693|90021:dialedDigits|utpub@xxxxxxxxxx:h323_ID=0522702:dialedDigits=ip$10.9.23.212:1720:transportID|true;

Call No. 3 | CallID 02 b2 8b a7 86 cb 15 5f 1a b1 00 50 60 83 58 98 | 141 | 0
Dial 90021:dialedDigits
ACF|10.9.23.214:11204| |26316|90021:dialedDigits|0522904:dialedDigits|false;
ACF|10.9.23.10:1720|1050_endp|59084|90021:dialedDigits|0522904:dialedDigits|true;

Number of Calls: 3 Active: 3 From Neighbor: 3 From Parent: 0

from unregistered endpoint i call with this format 90021@ip_gnugk or ip_gnugk##90021

bye

		Re:  gnugk 3.02 call limit
		From: Jan Willamowius <jan@wi...> -	2012-08-01 21:41

                        Hi Mauro,

the capacity limits also apply to calls from unregistered endpoints, but
they only apply to calls that are routed to that endpoint based on its
alias or E.164.

My guess is that you are bypassing the limit by having calls to the MCU
IP (plus room number) that are routed by the 'explicit' policy which
only looks at IPs and doesn't know or care about endpoints.

If you disable the 'explicit' policy, assign a prefix or the list of
rooms to the permanent MCU endpoint and make your unregistered
endpoints call 90xxx@..., the capacity limiting should work.

Regards,
Jan

-- 
Jan Willamowius, Founder of the GNU Gatekeeper Project
EMail  : jan@...
Website: http://www.gnugk.org
Support: http://www.willamowius.com/gnugk-support.html

mauro arduini wrote:
> hi,
> i have a gnugk in proxy mode...
> eth0 public ip
> eth1 my dmz
> 
> at the gnugk i've registered varius endpoint and 1 mcu codian
> 
> can i limit the call from endpoint to mcu virtual room...?
> i've tested to limit the virtual room that start with code 90 and
> limitation works correctly only with registered endpoint.
> if i call from endpoint (es: public endpoint) that is not registered to
> gnugk the limitation not work!!!
> 
> do you know that is a gnugk limitation?
> there is no way to restrict calls from unregistered endpoint?
> 
> follow my config
> 
> [Gatekeeper::Main]
> Fortytwo=42
> TimeToLive=600
> Home=x.x.x.x
> ExternalIP=x.x.x.x
> 
> [RoutedMode]
> GKRouted=1
> H245Routed=0
> CallSignalPort=1720
> RemoveH245AddressOnTunneling=1
> DropCallsByReleaseComplete=1
> SupportNATedEndpoints=1
> Q931PortRange=60000-60100
> H245PortRange=60101-60199
> AcceptUnregisteredCalls=1
> 
> [Proxy]
> Enable=1
> #ProxyForNAT=1
> InternalNetwork=10.0.0.0/255.0.0.0,172.16.0.0/255.255.0.0
> T120PortRange=60200-60299
> RTPPortRange=60300-60399
> #ProxyForSameNAT=1
> #ProxyAlways=1
> 
> [RasSrv::PermanentEndpoints]
> 10.9.23.10=mcu@...
> 
> [EP::mcu@...]
> PrefixCapacities=^90:=2
> Capacity=2
> 
> [GkStatus::Auth]
> rule=allow
> 
> 
> gnugk 3.02
> debian 6.0.5
> 
> 
> bye
> 
> 
> -- 
> *Mauro*

-- 
Mauro

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________________

Posting: mailto:Openh323gk-users@xxxxxxxxxxxxxxxxxxxxx
Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=openh323gk-users
Unsubscribe: http://lists.sourceforge.net/lists/listinfo/openh323gk-users
Homepage: http://www.gnugk.org/