Unathorized IP Address

[Aly BERRY]

All calls are rejected with " Unathorized IP Address"  Error. 

Even Own Ingress.

Statistic=> Media IP Blocking

I also Notice that Media Ip Adress Blocking  panel   Auto Block is  unselectable

the system sets it to "False" once validated.

Statistics =>Loop Detection   still not Working.

Trunk Count  remains at 0 after adding an Ingress Trunk

Regards

[Ashu Patidar]

Pls use the new updated RPM install

we have made modifications, media ip block - auto block will be false if added manually and if added by system it will be true

to fix the unauthorized ip issue, pls restart api server using below command

systemctl start dnl_api_core

[Aly BERRY]

Already done !!!

New RPM doesn't change anything

[Ashu Patidar]

To update Web component, you use the following commands:

yum install dnlv6_webbackend (for the api )

yum install dnlv6_webui (for the web ui)

To update Switch backend component, you use the following commands:

yum install dnlv6_softswitch

[Aly BERRY]

<<<to fix the unauthorized ip issue, pls restart api server using below command

systemctl start dnl_api_core>>>

Even if api process is  active???

On Tuesday, November 8, 2022 at 4:08:14 PM UTC+1 ashu.se...@gmail.com wrote:

[Aly BERRY]

To update Web component, you use the following commands:

yum install dnlv6_webbackend (for the api )

yum install dnlv6_webui (for the web ui)

To update Switch backend component, you use the following commands:

yum install dnlv6_softswitch



Why do i need to update web Component?

[JJ Xtreme]

Raymon we are having the same issue, it's been an ongoing issue for weeks the only one who can solve the issue is Anne.

[Aly BERRY]

@jon.jj

That's what I think.
I do not see the link between a SIP issue and the proposed solution.

For "Fraud detection", it looks like database issue..

[Ashu Patidar]

Raymon you are on the old version, you can reinstall the new version or update it, i have shared the commands above.

[Aly BERRY]

Is the update recent?

Here is our last exchange on this subject:

ashu.se...     Oct 27, 2022, 10:27:48 PM (11 days ago)
to dnl-class4-user
We have fixed the RPM, Pls reinstall and check


Aly BERRY Oct 28, 2022, 4:26:06 PM (11 days ago)
to dnl-class4-user
Thanks a lot. I will install it then test.
I will get back to you as soon as possible

Have you made any other updates since our exchanges?
Because I reinstalled the system as promised

[JJ Xtreme]

Ashu you keep saying to update but that's not the issue I am running the latest version and the issue still persist.  My softswitch is still not loading do to the last update the only way to resolve the issue is to complete a fresh install with the latest version but then you still end up with the same result of unauthorized calls.

[Ashu Patidar]

Fraud Detection option has been removed in the new version as all the options are added on trunks section with better features

also unauthorized issue will get solved when you restart the dnl_softswitch

[Aly BERRY]

Ok ill install again if Verson in more recent 

[Aly BERRY]

As I presented the solution you proposed does not work. i still have "Unauthorized IP Address".
Have you tried the proposed solution before?
I've been trying to test CLASS4 V6 for about 2 months in order to migrate my production there. Nothing works.
Has anyone managed to properly install this softswitch?

[JJ Xtreme]

Like I said Raymon same result with the new version, I would assume older version worked without issues, when we first deployed V6 4 weeks ago it was doing this and Anne fixed it very quickly but since then a yum update with the latest version broke the instance that Anne fixed so we did a brand-new instance with the latest version, and we are back to square one unfortunately. Ashu has not been able to resolve our issues or yours unfortunately and I'm not sure where Anne has been I think she only comes in the forums from time to time. It's really unfortunate because this is a great SBC platform, and we really liked it.

[Aly BERRY]

Hello

Any update?

On Tuesday, November 8, 2022 at 5:39:48 PM UTC+1 ashu.se...@gmail.com wrote:

[Ashu Patidar]

Raymon pls share your switch IP, you have not included IP in the ssh details

[Aly BERRY]

Hello ashu

Any update ???

[Ashu Patidar]

We have fixed the issues, pls update the community edition switch

command -  yum install dnlv6_softswitch

[Aly BERRY]

Hello
I updated as recommended.
But I have another concern.
As you can see, the call simulation shows "Normal"

But the call is rejected as soon as " SIP INVITE " from Client

 in addition we do not see it in the CDR
I think the problem comes from the configuration of the file
  dnl_softswitch.conf.

2) I can't simulate call from, (authorized by sip registratio)  Ingress trunk. got "Host non Found"

3) the CDR does not work correctly. it is necessary to insist to display a recent call.
4) Active call report doesn't seem to work.

[Aly BERRY]

Can you fix the installation issues?
I've been in termination for years and this is the first time I've come across a softswitch with such difficulty just for installation.

 usually one day is enough. there I am at least 3 months without convincing result.

On Monday, November 21, 2022 at 4:20:19 PM UTC+1 ashu.se...@gmail.com wrote:

[Ashu Patidar]

1. Call Simulation shows Normal means the call is passing out from the switch, you need to check the reason of INVITE getting failed

    Pls share PCAP file so we can check.

2. When Trunk is registered on SIP, switch will not allow to check call simulation, you need to have it with Host to check Call Simulation.

3. The switch will show the CDRs if the calls are properly sent out from the system, we have tested the switch and when calls correctly goes out, it will show

     in CDRs.

4. Active Call Reports will show calls when there are connected calls on the switch

I can check it more thoroughly but i cannot login into the switch.

[Aly BERRY]

I sent you Private Message please Check

[Ashu Patidar]

The calls went correctly out from the switch and also showing under CDRs, 

Issue is from your vendor side, they are rejecting the calls

you need to first browse the user manual to check how to find cdrs correctly.

[Aly BERRY]

<<<<The calls went correctly out from the switch and also showing under CDRs, 

Issue is from your vendor side, they are rejecting the calls>>>

Dear

I know that vendor side reject the calls 

Because DNL send Bad IP adresse

Device response is " Authentification Faill"

There is no issue on vendor side.

Vendor side is my Own device.  

 The same device Work correctly with an other softswitch.

i only need to put server IP address  inside device.

Work with Astpp, Mor , M2  but fail with DNL 

The rejection of the call by the hardware has nothing to do with its configuration. 

It's DNL sending the wrong IP Address information. I've been configuring this hardware for over 10 years.

<<<< you need to first browse the user manual to check how to find cdrs correctly>>>.

I know Manual.

It is not complicated to search for a CDR.

It is not complicated to search for a CDR. Did you find the CDR of the registered trunk?

i said i can see  CDR from authenticated Trunk .

Given CDR is for Sip registered Trunk 

You can configure Trunks (Ingress and Egress) and test. i gave you credential

You will see that the problem comes from DNL.

--
Useful Links:
Get Help - http://support.denovolab.com
Tutorial - http://cookbook.denovolab.com
Video Training - https://www.youtube.com/channel/UCIVrN4OSdY-r4l_FA4ekIBA
User Manual - http://doc.denovolab.com
---
You received this message because you are subscribed to a topic in the Google Groups "dnl-class4-user" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/dnl-class4-user/eXHhLMWnyN4/unsubscribe.
To unsubscribe from this group and all its topics, send an email to dnl-class4-us...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dnl-class4-user/f00ecebd-b2ab-4b0a-9107-ea259bf4142en%40googlegroups.com.

[Ashu Patidar]

you have setup voip gateway incorrectly, ip sending calls through switch should be set on 5060 and  Require Authenication should be disabled

For SIP it should be port 5080 and  Require Authenication should be enabled

also for SIP Registration you need to allow firewall to pass it

[Ashu Patidar]

You can try with Proxy Media in Trunk

[Ashu Patidar]

Rest Anne will check and let you know

[Ashu Patidar]

Call are sending out of the switch correctly but they get failed with  407 Proxy Authentication Required when they reaches the vendor.

PCAP attached

[Ashu Patidar]

Time
Orig/Term Release
Release Cause
Inbound Cost
Inbound Carrier
Inbound Rate
Inbound Trunk
Inbound Dur
Inbound Loc IP
Inbound DNIS
Inbound IP
Inbound ANI
Outbound Trunk
PDD
Response to Ingress
Response from Egress
2022-11-25 16:56:56

T

All egress no confirmed
0.000000
DNL_C
0.06
DNL_C_TEST
0
139.99.208.10
2250170501267
1.187.87.94
11004
AGOIP100
353
503:Service Unavailable
403:Forbidden
2022-11-25 16:56:50

T

All egress no confirmed
0.000000
DNL_C
0.06
DNL_C_TEST
0
139.99.208.10
2250170501267
1.187.87.94
11004
AGOIP100
345
503:Service Unavailable
403:Forbidden

[Ashu Patidar]

Above sent are the CDRs using SIP Phone, i can see them on UI

Response to Ingress -  503:Service Unavailable
Response from Egress - 403:Forbidden

PCAPs also generating fine on switch

[Ashu Patidar]

You can directly test sending calls with IP instead of SIP

[Aly BERRY]

Sure calls reach  vendor (cf screen Copy i sent).

Vendor reject  call beacause of IP authentification issue.

as I told you, configuring this device is not complicated, you just have to add the DNL IP Address.
what I did. if the calls are rejected for lack of authentication it is because DNL does not send the IP correctly.

[Aly BERRY]

I saw all that.
How do you explain the rejection of calls by DNL coming from the authenticated trunk "  from SIP invite? 

[Aly BERRY]

iam not talking about PCAP gene ration. iam talking about IP sent by DNL for authentification at vendor side.

I also said there is no CDR and PCAP for  IP authenticated   Ingress.

All CDR you cave is for registered sip trunk. right?

[Aly BERRY]

<<<<<< You can directly test sending calls with IP instead of SIP>>>>



I am testing the functionality of DNL.
So I don't give preference to authentication by IP or SIP.
both don't work.

[Ashu Patidar]

Anne will check and assist you.

[Aly BERRY]

Ok ashu.

Thank you so much for your Help !!!!

Regards

[Ashu Patidar]

Pls share ssh access & switch access for anne to check

[Aly BERRY]

Hello

I solved the problem by sending the calls to another softswitch which communicates well with my hardware. Thanks
I have another concern. the same ANI calls the same number more than 5 times in less than 1 min. How to stop this behavior?
"Loop detection" solves this concern. But unfortunately does not work as you can see. trunk count remain  0 after submission

[Ashu Patidar]

Monitoring -> Loop Detection

http://139.99.208.10/#/monitoring/loop_detection

You can use this option, 

on our new versions we have removed that options though.

[Aly BERRY]

http://139.99.208.10/#/monitoring/loop_detection

<< You can use this option>>>   i know that i can use  but i said doesn't work

Dear i dont understand your Answer.

I Know that i can use  http://139.99.208.10/#/monitoring/loop_detection  (CF  Screen copy)

 , this option still available  . But As you can see on screen Copy  Trunk Count remain 0 after submission.

If you deleted "Loop detection option"  as you say, I guess there are other options that allow you to fight against it .

So my question  ===> " How to stop this behavior?"

[Ashu Patidar]

we are planning to readd the loop detection section, will add once we confirm it is fixed

also if you need any other help please let us know,

pls open a fresh ticket if you have any issue with any other section with the heading of issue in subject so we can keep track on all the issues reported and respond on them particularly.

[Aly BERRY]

Any Update about loop detection???

[Ashu Patidar]

Loop Detection has been fixed,

Please update the dnl_softswitch & dnl_api.

[Aly BERRY]

<<< Please update the dnl_softswitch & dnl_api.>>>

Must i use  those commands for Update?

 

yum install dnlv6_webbackend (Api)

yum install dnlv6_softswitch (Switch backend)

[Aly BERRY]

Good morning
I just updated with the commands
yum install dnlv6_webbackend and yum install dnlv6_softswitch  but nothing changed.

On Thursday, February 9, 2023 at 8:52:46 PM UTC+1 Ashu Patidar wrote:

[Ashu Patidar]

Use the below update commands

Update
yum install dnlv6-webbackend (for the api )
yum install dnlv6-webui (for the web ui)
yum install dnlv6-softswitch (backend component)

[Aly BERRY]

Good morning
After following your recommendations, I can no longer access DNL. API service refuses to start even when typing
"systemctl start dnl_api_core " 

Postgres database is running
Can you check what is wrong with your update please?

Everything was working fine before the update

Regards

Raymond ASSAN

[Aly BERRY]

From the screen below it looks like there is a licensing issue.

[Aly BERRY]

typing    journalctl -xe give

Feb 15 11:38:44 ns562457.ip-139-99-208.net systemd[12664]: Failed at step CHDIR spawning /usr/bin/api_dnl_run: No such file or directory

[Aly BERRY]

Hello

Please can you reply ?

i was in production   before UPDATE.

[Aly BERRY]

I can connect a softphone to DNL and even make calls. the only problem is that the interface does not open.

[Anne Kwong]

Hi Aly

Pls check https://cookbook.denovolab.com/upgrade-an-existing-installation/update-an-existing-installation/update-with-rpm 

for instructions on updating the API server.

Your server is up and the UI should be up also.

You received this message because you are subscribed to the Google Groups "dnl-class4-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dnl-class4-us...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dnl-class4-user/11311cfa-eaf0-4998-a93b-38c9c38e0786n%40googlegroups.com.

[Aly BERRY]

Thank you very much Anne
You are the best!!!!!