In my asterisk server i installed all updates available from the repos. After rebooting the server, all my iax2 extensions stopped working.
I also found that there is one more interface virbr0 up with ip address 192.168.122.1. I stopped dnsmasq service which was listening on this ip. Then disabled dnsmasq (chkconfig dnsmasq off). Rebooted the box. Still the interface was present.
Since there is no use of this service in my server i removed dnsmaq along with all the dependencies. Did this:
# rpm -e dnsmasq libvirt-0.3.3-14.el5_3.1.i386 NetworkManager-0.7.0-4.el5_3. i386 NetworkManager-glib-0.7.0-4. el5_3.i386 libvirt-python-0.3.3-14.el5_3. 1.i386
The Virtual Interface went away but still iax2 extensions were not working. Then, found the following error in /var/log/asterisk/full
ERROR[2659] chan_iax2.c: Call rejected, CallToken Support required. If unexpected, resolve by placing address x.x.x.x in the calltokenignore list or setting user yyyy requirecalltoken=no
This is due to the security enhancement done in asterisk recently. IAX2 is now secured by call tokens which my iax2 doesn't support still. So i went ahead disabling this feature for now:
vi /etc/asterisk/iax.conf
Added calltokenoptional = 0.0.0.0/0.0.0.0 to the end. Then did: /usr/sbin/amportal restart
All iax2 extensions started working again. May be i should start looking for upgrading my clients to support call tokens for improved security.
References:
http://www.venturevoip.com/ allnews.php?count=99999
http://downloads.asterisk.org/ pub/security/AST-2009-006.html
Details are available in this pdf: http://svn.digium.com/svn/ asterisk/branches/1.4/doc/ IAX2-security.pdf
I also found that there is one more interface virbr0 up with ip address 192.168.122.1. I stopped dnsmasq service which was listening on this ip. Then disabled dnsmasq (chkconfig dnsmasq off). Rebooted the box. Still the interface was present.
Since there is no use of this service in my server i removed dnsmaq along with all the dependencies. Did this:
# rpm -e dnsmasq libvirt-0.3.3-14.el5_3.1.i386 NetworkManager-0.7.0-4.el5_3.
The Virtual Interface went away but still iax2 extensions were not working. Then, found the following error in /var/log/asterisk/full
ERROR[2659] chan_iax2.c: Call rejected, CallToken Support required. If unexpected, resolve by placing address x.x.x.x in the calltokenignore list or setting user yyyy requirecalltoken=no
This is due to the security enhancement done in asterisk recently. IAX2 is now secured by call tokens which my iax2 doesn't support still. So i went ahead disabling this feature for now:
vi /etc/asterisk/iax.conf
Added calltokenoptional = 0.0.0.0/0.0.0.0 to the end. Then did: /usr/sbin/amportal restart
All iax2 extensions started working again. May be i should start looking for upgrading my clients to support call tokens for improved security.
References:
http://www.venturevoip.com/
http://downloads.asterisk.org/
Details are available in this pdf: http://svn.digium.com/svn/
hi..
ReplyDeletea newbie to asterisk and just try to play around with it.
I just want to initiate a call from an extension to another extension in the same network. I have one Xlite and 2 analog phones. analog phones are connecting to tdm400p. I already makesure it connected to FXS port. after i connect it to port, i receive no dial tone but when i press buttons, i heard the tone.but it doesnt have dial tone. Xlite have no problem. it connected to server. but when i try to call to the analogphone, i'll receive whether voicemail, busy or num not available..
can someone help me? is it i need to doing some command setting to make extension connected to each other?
TQ..
Can you tell me something about Centrex and IAX2 Phone and what are the features of these product.
ReplyDelete