I love Kamailio World and cannot properly describe how excited I am to return to Berlin for an in person Kamailio World. I am honored to be presenting in this year’s schedule. My talk, Using APIBan In Productions, will be at 1100 on June 06, 2023. It’s been a few years since we last visited Fraunhofer Forum in Berlin to gather for the conference and I’m very excited to see old friends and meet new people....
Kamailio v5.7.0 is out – a new major release, bringing new features and improvements added during almost twelve months of combined development and testing. It’s always exciting when a new, major Kamailio release launches and I’m sure this release will be talked about during Kamailio World (coming up in just 2 weeks!). Some highlights of this new release: 4 brand new modules (including tls_wolfssl) topos option to mask call-id options for loading modules support for long values instead of int for variables new variables and transformations For more information check out https://www....
We recently made some dramatic enhancements to the APIBAN infrastructure. As I joked on Mastodon, I must be getting older as these improvements were made well before an emergency. If you’re not familiar, APIBAN helps prevent unwanted SIP traffic by identifying addresses of known bad actors before they attack your system. Bad actors are collected through globally deployed honeypots and curated by LOD. You can access this data via API or automatically block the traffic with our open source client....
The wonders of troubleshooting SIP never cease. Ever try to open a pcap with sngrep only to get the following error? Couldn't open pcap file XYZ.pcap: unknown file format And then, even though you hate looking at SIP on wireshark, you are left wondering… Why does this file open in Wireshark, but not in sngrep? Well, most of the time, this is because the pcap file is actually compressed. Easy fix....
Generally, when I deploy Kamailio, I use git. Many reasons for this (including being able to quickly apply a patch or fix), but that’s a discussion for another time. If you’ve installed from git and need to add a new module (that hasn’t already been built/installed), the process is very straight forward (and simple). Step 1: Install Dependencies Some modules require libraries to be installed. For example, the jansson module wants the jansson library to be installed....
The major announcement at ClueCon 2021 was the release of FreeSWITCH 1.10.7. Highlights from this release: fixes for security advisories (upgrade today) support for Debian 11 bug fixes etc There’s a great presentation from Sandro Gauci regarding the story behind some of the vulnerabilities he (and his team) discovered/submitted. Included in his story, is one of my favorite moments from Kamailio World. Read More Enable Security: Killing bugs … one vulnerability report at a time Speaker Deck: Sandro’s slides from ClueCon FreeSWITCH 1....
APIBAN helps prevent unwanted SIP traffic by identifying addresses of known bad actors before they attack your system. Bad actors are collected through globally deployed honeypots and curated by LOD/APIBAN. APIBAN started from discussions at tech conferences (in particular Kamailio World and Astricon). Most of the attendees had seen increases in malicious SIP traffic and we all thought there should be a way to share the active “bad actors.” When I found myself with some downtime, and with the support of LOD, some honeypots were deployed… and API made to share the data, and APIBAN was born....
Recently, I posted about using Kamailio’s PIKE module to help block excessive SIP traffic. This is a great tool for helping your system handle high traffic SIP, such as floods. But, what can you do when someone sends garbage or non-SIP traffic to your system? Kamailio’s SIP parser is handled in the core and was recently upgraded in v5.5 with logging improvements, as well as simplified implementation, static map for header name, and type for parsing....
Well, 2020 is certainly a strange year… Some of us have been working from home for a very long time while others are now just understanding the benefits. Of course, when a drastic change in work environment becomes a forced change, the implementation can be quite daunting. Let’s look at telephony for example. Many small, medium, and even enterprise PBX deployments have been designed to only allow endpoints (aka phones) to connect from within the local network....
I got thrown into VoIP in a sink or swim situation — and thankfully, I’m a strong swimmer. I’ve talked previously about my love of phones. Growing up in New York City, my family would purposely avoid walking on certain blocks to avoid me seeing pay-phones. As a child, I loved phones. I still love phones. My love of phones made me what I am today. I am a Kamailian. ...