Sponsor: VoiceMeUp - Corporate & Wholesale VoIP Services

VoIP Mailing List Archives
Mailing list archives for the VoIP community
 SearchSearch 

[Freeswitch-users] Security - How can I prevent these calls?


 
Post new topic   Reply to topic    VoIP Mailing List Archives Forum Index -> freeSWITCH Users
View previous topic :: View next topic  
Author Message
adam at steffannicarpe...
Guest





PostPosted: Mon Mar 14, 2016 12:17 pm    Post subject: [Freeswitch-users] Security - How can I prevent these calls? Reply with quote

I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log:



<configuration name="acl.conf" description="Network Lists">
  <network-lists>


    <list name="lan" default="allow">
      <node type="allow" cidr="192.168.0.0/24"/>
      <!--<node type="deny" cidr="192.168.42.42/32"/> -->
    </list>




    <list name="domains" default="deny">
      <!-- domain= is special it scans the domain from the directory to build the ACL -->
      <node type="allow" domain="$${domain}"/>
      <node type="allow" cidr="192.168.0.0/24"/>
 <node type="allow" cidr="107.20.251.237/32" />
 <node type="allow" cidr="107.20.176.37/32" />
 <node type="allow" cidr="184.169.138.133/32" />
 <node type="allow" cidr="54.215.5.82/32" />
    </list>


  </network-lists>
</configuration>



3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_NEW
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0  64bit
2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth.
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/10000000@192.168.0.10:5060) State NEW
2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/10000000@192.168.0.10:5060 Abandoned
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Locked, Waiting on external entities
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Ended
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/10000000@192.168.0.10:5060 [CS_DESTROY]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/10000000@192.168.0.10:5060 Standard DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/7070@76.188.116.163 (7070@76.188.116.163)]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_EXECUTE] [NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already)
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State EXECUTE going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Callstate Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Overriding SIP cause 480 with 480 from the other leg
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) hanging up, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard HANGUP, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_HANGUP -> CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard REPORTING, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_REPORTING -> CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Locked, Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Ended
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA DESTROY
2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574
2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep
2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [7070@76.188.116.163 (7070@76.188.116.163)] from 104.245.99.71
You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute
and you must configure your device to use the proper domain in it's authentication credentials.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [351981a2-a412-49bb-a554-0df34a002f86]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) receiving invite from 104.245.99.71:6688 version: 1.7.0  64bit
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) entering state [received][100]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP:
351981a2-a412-49bb-a554-0df34a002f86 v=0
351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam
351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 t=0 0
351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000
351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15
351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690
351981a2-a412-49bb-a554-0df34a002f86 
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_NEW -> CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_INIT -> CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State INIT going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Callstate Change DOWN -> RINGING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->Calls to Plivo] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [Calls to Plivo] destination_number(004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->unloop] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->outside_call] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Absolute Condition [outside_call]
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Action set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)})
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->call_debug] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->public_extensions] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [public_extensions] destination_number(004721935380) =~ /^(10[01][0-9])$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->group_dial_standard] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [group_dial_standard] destination_number(004721935380) =~ /^2000$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->public_did] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [public_did] destination_number(004721935380) =~ /^(5551212)$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_ROUTING -> CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State ROUTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 (7070@76.188.116.163) set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [outside_call]=[true]
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 (7070@76.188.116.163) export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) has executed the last dialplan instruction, hanging up.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_EXECUTE] [NORMAL_CLEARING]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State EXECUTE going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Callstate Change RINGING -> HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) hanging up, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard HANGUP, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_HANGUP -> CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard REPORTING, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_REPORTING -> CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Locked, Waiting on external entities
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Ended
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_DESTROY]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY going to sleep
Back to top
jurijs.ivolga at gmail...
Guest





PostPosted: Mon Mar 14, 2016 3:46 pm    Post subject: [Freeswitch-users] Security - How can I prevent these calls? Reply with quote

Hi Samuel,


Your problem has 2 solutions - easy one and not so easy:



Easy way:

If you are facing such issues this mean that you very new to VoIP and Freeswitch particularly and in my opinion it is worth to find professional who will configure and secure your PBX, otherwise you can end up loosing much more then 30$.


Hard way:

If you still think that you can handle it, then first and most simple way is to use iptables for blocking unwanted traffic. Below you can find my manual:
http://blog.volunge.net/jekyll/update/2016/02/27/how-to-secure-freeswitch-with-iptables.html


Additionally to this you can find Freeswitch official documentation regarding Firewall configuration:
https://freeswitch.org/confluence/display/FREESWITCH/Firewall



Keep in mind that proper FW configuration will not fix all your issues and you should understand how Freeswitch work and what each configuration file do to secure your installation properly.


With kind regards,


Jurijs

2016-03-14 19:15 GMT+02:00 Samuel Reamer <adam@steffannicarpet.com (adam@steffannicarpet.com)>:
Quote:
I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log:



<configuration name="acl.conf" description="Network Lists">
  <network-lists>


    <list name="lan" default="allow">
      <node type="allow" cidr="192.168.0.0/24"/>
      <!--<node type="deny" cidr="192.168.42.42/32"/> -->
    </list>




    <list name="domains" default="deny">
      <!-- domain= is special it scans the domain from the directory to build the ACL -->
      <node type="allow" domain="$${domain}"/>
      <node type="allow" cidr="192.168.0.0/24"/>
 <node type="allow" cidr="107.20.251.237/32" />
 <node type="allow" cidr="107.20.176.37/32" />
 <node type="allow" cidr="184.169.138.133/32" />
 <node type="allow" cidr="54.215.5.82/32" />
    </list>


  </network-lists>
</configuration>



3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_NEW
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0  64bit
2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth.
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/10000000@192.168.0.10:5060) State NEW
2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/10000000@192.168.0.10:5060 Abandoned
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Locked, Waiting on external entities
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Ended
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/10000000@192.168.0.10:5060 [CS_DESTROY]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/10000000@192.168.0.10:5060 Standard DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/7070@76.188.116.163 (7070@76.188.116.163)]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_EXECUTE] [NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already)
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State EXECUTE going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Callstate Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Overriding SIP cause 480 with 480 from the other leg
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) hanging up, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard HANGUP, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_HANGUP -> CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard REPORTING, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_REPORTING -> CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Locked, Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Ended
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA DESTROY
2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574
2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep
2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [7070@76.188.116.163 (7070@76.188.116.163)] from 104.245.99.71
You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute
and you must configure your device to use the proper domain in it's authentication credentials.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [351981a2-a412-49bb-a554-0df34a002f86]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) receiving invite from 104.245.99.71:6688 version: 1.7.0  64bit
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) entering state [received][100]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP:
351981a2-a412-49bb-a554-0df34a002f86 v=0
351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam
351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 t=0 0
351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000
351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15
351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690
351981a2-a412-49bb-a554-0df34a002f86 
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_NEW -> CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_INIT -> CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State INIT going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Callstate Change DOWN -> RINGING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->Calls to Plivo] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [Calls to Plivo] destination_number(004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->unloop] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->outside_call] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Absolute Condition [outside_call]
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Action set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)})
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->call_debug] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->public_extensions] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [public_extensions] destination_number(004721935380) =~ /^(10[01][0-9])$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->group_dial_standard] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [group_dial_standard] destination_number(004721935380) =~ /^2000$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->public_did] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [public_did] destination_number(004721935380) =~ /^(5551212)$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_ROUTING -> CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State ROUTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 (7070@76.188.116.163) set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [outside_call]=[true]
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 (7070@76.188.116.163) export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) has executed the last dialplan instruction, hanging up.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_EXECUTE] [NORMAL_CLEARING]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State EXECUTE going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Callstate Change RINGING -> HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) hanging up, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard HANGUP, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_HANGUP -> CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard REPORTING, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_REPORTING -> CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Locked, Waiting on external entities
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Ended
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_DESTROY]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY going to sleep





_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org (consulting@freeswitch.org)
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org)
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
Back to top
lconroy at insensate.c...
Guest





PostPosted: Mon Mar 14, 2016 4:10 pm    Post subject: [Freeswitch-users] Security - How can I prevent these calls? Reply with quote

Hi there,
I guess you're running fS without fail2ban.
Welcome to our world.
BEFORE you bother trying firewall rules manually (or employing a consultant), read up on the freeswitch web for fail2ban, and install f2b.
See <https://freeswitch.org/confluence/display/FREESWITCH/Fail2Ban>

Do it BEFORE you run freeSwitch "in anger".

Then secure your profiles & dialplan.

Then run freeSwitch.

Then ask Smile.

all the best
Lawrence
(who, like most of us, has had exactly this sort of problem)

On 14 Mar 2016, at 20:38, Jurijs Ivolga <jurijs.ivolga@gmail.com> wrote:
Quote:
Hi Samuel,

Your problem has 2 solutions - easy one and not so easy:

Easy way:
If you are facing such issues this mean that you very new to VoIP and Freeswitch particularly and in my opinion it is worth to find professional who will configure and secure your PBX, otherwise you can end up loosing much more then 30$.

Hard way:
If you still think that you can handle it, then first and most simple way is to use iptables for blocking unwanted traffic. Below you can find my manual:
http://blog.volunge.net/jekyll/update/2016/02/27/how-to-secure-freeswitch-with-iptables.html

Additionally to this you can find Freeswitch official documentation regarding Firewall configuration:
https://freeswitch.org/confluence/display/FREESWITCH/Firewall

Keep in mind that proper FW configuration will not fix all your issues and you should understand how Freeswitch work and what each configuration file do to secure your installation properly.

With kind regards,

Jurijs

2016-03-14 19:15 GMT+02:00 Samuel Reamer <adam@steffannicarpet.com>:
I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log:


<configuration name="acl.conf" description="Network Lists">
<network-lists>

<list name="lan" default="allow">
<node type="allow" cidr="192.168.0.0/24"/>
<!--<node type="deny" cidr="192.168.42.42/32"/> -->
</list>


<list name="domains" default="deny">
<!-- domain= is special it scans the domain from the directory to build the ACL -->
<node type="allow" domain="$${domain}"/>
<node type="allow" cidr="192.168.0.0/24"/>
<node type="allow" cidr="107.20.251.237/32" />
<node type="allow" cidr="107.20.176.37/32" />
<node type="allow" cidr="184.169.138.133/32" />
<node type="allow" cidr="54.215.5.82/32" />
</list>

</network-lists>
</configuration>

3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_NEW
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0 64bit
2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth.
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/10000000@192.168.0.10:5060) State NEW
2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/10000000@192.168.0.10:5060 Abandoned
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Locked, Waiting on external entities
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Ended
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/10000000@192.168.0.10:5060 [CS_DESTROY]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/10000000@192.168.0.10:5060 Standard DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/7070@76.188.116.163]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already)
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 Overriding SIP cause 480 with 480 from the other leg
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/7070@76.188.116.163) Ended
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 [CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY
2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574
2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep
2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [7070@76.188.116.163] from 104.245.99.71
You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute
and you must configure your device to use the proper domain in it's authentication credentials.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/7070@76.188.116.163 [351981a2-a412-49bb-a554-0df34a002f86]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 receiving invite from 104.245.99.71:6688 version: 1.7.0 64bit
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 entering state [received][100]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP:
351981a2-a412-49bb-a554-0df34a002f86 v=0
351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam
351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 t=0 0
351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000
351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15
351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690
351981a2-a412-49bb-a554-0df34a002f86
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163) State Change CS_NEW -> CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/7070@76.188.116.163) State NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 SOFIA INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 Standard INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163) State Change CS_INIT -> CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163) Callstate Change DOWN -> RINGING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 SOFIA ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 Standard ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->Calls to Plivo] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [Calls to Plivo] destination_number(004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->unloop] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->outside_call] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Absolute Condition [outside_call]
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Action set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)})
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->call_debug] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->public_extensions] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [public_extensions] destination_number(004721935380) =~ /^(10[01][0-9])$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->group_dial_standard] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [group_dial_standard] destination_number(004721935380) =~ /^2000$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->public_did] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [public_did] destination_number(004721935380) =~ /^(5551212)$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/7070@76.188.116.163) State Change CS_ROUTING -> CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 SOFIA EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 Standard EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 [outside_call]=[true]
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/7070@76.188.116.163 has executed the last dialplan instruction, hanging up.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change RINGING -> HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/7070@76.188.116.163) Ended
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 [CS_DESTROY]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
Back to top
jsun at junsun.net
Guest





PostPosted: Mon Mar 14, 2016 6:21 pm    Post subject: [Freeswitch-users] Security - How can I prevent these calls? Reply with quote

Or simply run a prebuilt AMI image from aws.  It comes with fail2ban, firewall, etc.

https://aws.amazon.com/marketplace/pp/B015ZTS2XM



https://aws.amazon.com/marketplace/pp/B0191S5CU4/



Jun


On Mon, Mar 14, 2016 at 2:08 PM, Lawrence Conroy <lconroy@insensate.co.uk (lconroy@insensate.co.uk)> wrote:
Quote:
Hi there,
 I guess you're running fS without fail2ban.
Welcome to our world.
BEFORE you bother trying firewall rules manually (or employing a consultant), read up on the freeswitch web for fail2ban, and install f2b.
See <https://freeswitch.org/confluence/display/FREESWITCH/Fail2Ban>

Do it BEFORE you run freeSwitch "in anger".

Then secure your profiles & dialplan.

Then run freeSwitch.

Then ask Smile.

all the best
  Lawrence
 (who, like most of us, has had exactly this sort of problem)

On 14 Mar 2016, at 20:38, Jurijs Ivolga <jurijs.ivolga@gmail.com (jurijs.ivolga@gmail.com)> wrote:
Quote:
Hi Samuel,

Your problem has 2 solutions - easy one and not so easy:

Easy way:
If you are facing such issues this mean that you very new to VoIP and Freeswitch particularly and in my opinion it is worth to find professional who will configure and secure your PBX, otherwise you can end up loosing much more then 30$.

Hard way:
If you still think that you can handle it, then first and most simple way is to use iptables for blocking unwanted traffic. Below you can find my manual:
http://blog.volunge.net/jekyll/update/2016/02/27/how-to-secure-freeswitch-with-iptables.html

Additionally to this you can find Freeswitch official documentation regarding Firewall configuration:
https://freeswitch.org/confluence/display/FREESWITCH/Firewall

Keep in mind that proper FW configuration will not fix all your issues and you should understand how Freeswitch work and what each configuration file do to secure your installation properly.

With kind regards,

Jurijs

2016-03-14 19:15 GMT+02:00 Samuel Reamer <adam@steffannicarpet.com (adam@steffannicarpet.com)>:
I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log:


<configuration name="acl.conf" description="Network Lists">
   <network-lists>

     <list name="lan" default="allow">
       <node type="allow" cidr="192.168.0.0/24"/>
       <!--<node type="deny" cidr="192.168.42.42/32"/> -->
     </list>


     <list name="domains" default="deny">
       <!-- domain= is special it scans the domain from the directory to build the ACL -->
       <node type="allow" domain="$${domain}"/>
       <node type="allow" cidr="192.168.0.0/24"/>
         <node type="allow" cidr="107.20.251.237/32" />
         <node type="allow" cidr="107.20.176.37/32" />
         <node type="allow" cidr="184.169.138.133/32" />
         <node type="allow" cidr="54.215.5.82/32" />
     </list>

   </network-lists>
</configuration>

3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_NEW
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0  64bit
2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth.
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/10000000@192.168.0.10:5060) State NEW
2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/10000000@192.168.0.10:5060 Abandoned
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Locked, Waiting on external entities
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Ended
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/10000000@192.168.0.10:5060 [CS_DESTROY]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/10000000@192.168.0.10:5060 Standard DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/7070@76.188.116.163 (7070@76.188.116.163)]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_EXECUTE] [NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already)
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State EXECUTE going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Callstate Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Overriding SIP cause 480 with 480 from the other leg
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) hanging up, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard HANGUP, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_HANGUP -> CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard REPORTING, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_REPORTING -> CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Locked, Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Ended
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA DESTROY
2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574
2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep
2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [7070@76.188.116.163 (7070@76.188.116.163)] from 104.245.99.71
You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute
and you must configure your device to use the proper domain in it's authentication credentials.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [351981a2-a412-49bb-a554-0df34a002f86]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) receiving invite from 104.245.99.71:6688 version: 1.7.0  64bit
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) entering state [received][100]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP:
351981a2-a412-49bb-a554-0df34a002f86 v=0
351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam
351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 t=0 0
351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000
351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15
351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690
351981a2-a412-49bb-a554-0df34a002f86
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_NEW -> CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_INIT -> CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State INIT going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Callstate Change DOWN -> RINGING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->Calls to Plivo] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [Calls to Plivo] destination_number(004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->unloop] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->outside_call] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Absolute Condition [outside_call]
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Action set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)})
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->call_debug] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->public_extensions] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [public_extensions] destination_number(004721935380) =~ /^(10[01][0-9])$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->group_dial_standard] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [group_dial_standard] destination_number(004721935380) =~ /^2000$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->public_did] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [public_did] destination_number(004721935380) =~ /^(5551212)$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_ROUTING -> CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State ROUTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 (7070@76.188.116.163) set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [outside_call]=[true]
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 (7070@76.188.116.163) export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) has executed the last dialplan instruction, hanging up.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_EXECUTE] [NORMAL_CLEARING]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State EXECUTE going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Callstate Change RINGING -> HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) hanging up, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard HANGUP, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_HANGUP -> CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard REPORTING, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_REPORTING -> CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Locked, Waiting on external entities
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Ended
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_DESTROY]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY going to sleep


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org (consulting@freeswitch.org)
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org)
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org (consulting@freeswitch.org)
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org)
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org (consulting@freeswitch.org)
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org)
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


Back to top
ssinyagin at gmail.com
Guest





PostPosted: Mon Mar 14, 2016 7:37 pm    Post subject: [Freeswitch-users] Security - How can I prevent these calls? Reply with quote

But what does fail2ban have to do with security? If a stranger from the internet is able to make calls to PSTN through your PBX, you need to prevent such access in the first place. It's a matter of dialplan planning, and not the firewall or fail2ban. On 15 Mar 2016 00:20, "Jun Sun" <jsun@junsun.net (jsun@junsun.net)> wrote:
Quote:
Or simply run a prebuilt AMI image from aws.  It comes with fail2ban, firewall, etc.

https://aws.amazon.com/marketplace/pp/B015ZTS2XM



https://aws.amazon.com/marketplace/pp/B0191S5CU4/



Jun


On Mon, Mar 14, 2016 at 2:08 PM, Lawrence Conroy <lconroy@insensate.co.uk (lconroy@insensate.co.uk)> wrote:
Quote:
Hi there,
 I guess you're running fS without fail2ban.
Welcome to our world.
BEFORE you bother trying firewall rules manually (or employing a consultant), read up on the freeswitch web for fail2ban, and install f2b.
See <https://freeswitch.org/confluence/display/FREESWITCH/Fail2Ban>

Do it BEFORE you run freeSwitch "in anger".

Then secure your profiles & dialplan.

Then run freeSwitch.

Then ask Smile.

all the best
  Lawrence
 (who, like most of us, has had exactly this sort of problem)

On 14 Mar 2016, at 20:38, Jurijs Ivolga <jurijs.ivolga@gmail.com (jurijs.ivolga@gmail.com)> wrote:
Quote:
Hi Samuel,

Your problem has 2 solutions - easy one and not so easy:

Easy way:
If you are facing such issues this mean that you very new to VoIP and Freeswitch particularly and in my opinion it is worth to find professional who will configure and secure your PBX, otherwise you can end up loosing much more then 30$.

Hard way:
If you still think that you can handle it, then first and most simple way is to use iptables for blocking unwanted traffic. Below you can find my manual:
http://blog.volunge.net/jekyll/update/2016/02/27/how-to-secure-freeswitch-with-iptables.html

Additionally to this you can find Freeswitch official documentation regarding Firewall configuration:
https://freeswitch.org/confluence/display/FREESWITCH/Firewall

Keep in mind that proper FW configuration will not fix all your issues and you should understand how Freeswitch work and what each configuration file do to secure your installation properly.

With kind regards,

Jurijs

2016-03-14 19:15 GMT+02:00 Samuel Reamer <adam@steffannicarpet.com (adam@steffannicarpet.com)>:
I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log:


<configuration name="acl.conf" description="Network Lists">
   <network-lists>

     <list name="lan" default="allow">
       <node type="allow" cidr="192.168.0.0/24"/>
       <!--<node type="deny" cidr="192.168.42.42/32"/> -->
     </list>


     <list name="domains" default="deny">
       <!-- domain= is special it scans the domain from the directory to build the ACL -->
       <node type="allow" domain="$${domain}"/>
       <node type="allow" cidr="192.168.0.0/24"/>
         <node type="allow" cidr="107.20.251.237/32" />
         <node type="allow" cidr="107.20.176.37/32" />
         <node type="allow" cidr="184.169.138.133/32" />
         <node type="allow" cidr="54.215.5.82/32" />
     </list>

   </network-lists>
</configuration>

3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_NEW
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0  64bit
2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth.
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/10000000@192.168.0.10:5060) State NEW
2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/10000000@192.168.0.10:5060 Abandoned
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Locked, Waiting on external entities
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Ended
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/10000000@192.168.0.10:5060 [CS_DESTROY]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/10000000@192.168.0.10:5060 Standard DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/7070@76.188.116.163 (7070@76.188.116.163)]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_EXECUTE] [NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already)
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State EXECUTE going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Callstate Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Overriding SIP cause 480 with 480 from the other leg
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) hanging up, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard HANGUP, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_HANGUP -> CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard REPORTING, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_REPORTING -> CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Locked, Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Ended
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA DESTROY
2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574
2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep
2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [7070@76.188.116.163 (7070@76.188.116.163)] from 104.245.99.71
You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute
and you must configure your device to use the proper domain in it's authentication credentials.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [351981a2-a412-49bb-a554-0df34a002f86]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) receiving invite from 104.245.99.71:6688 version: 1.7.0  64bit
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) entering state [received][100]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP:
351981a2-a412-49bb-a554-0df34a002f86 v=0
351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam
351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 t=0 0
351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000
351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15
351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690
351981a2-a412-49bb-a554-0df34a002f86
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_NEW -> CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_INIT -> CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State INIT going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Callstate Change DOWN -> RINGING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->Calls to Plivo] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [Calls to Plivo] destination_number[url=tel:%28004721935380](004721935380[/url]) =~ /^(1{0,1}\d{10})$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->unloop] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->outside_call] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Absolute Condition [outside_call]
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Action set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)})
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->call_debug] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->public_extensions] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [public_extensions] destination_number[url=tel:%28004721935380](004721935380[/url]) =~ /^(10[01][0-9])$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->group_dial_standard] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [group_dial_standard] destination_number[url=tel:%28004721935380](004721935380[/url]) =~ /^2000$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) parsing [public->public_did] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Regex (FAIL) [public_did] destination_number[url=tel:%28004721935380](004721935380[/url]) =~ /^(5551212)$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_ROUTING -> CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State ROUTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 (7070@76.188.116.163) set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [outside_call]=[true]
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 (7070@76.188.116.163) export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) has executed the last dialplan instruction, hanging up.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_EXECUTE] [NORMAL_CLEARING]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State EXECUTE going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Callstate Change RINGING -> HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) hanging up, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard HANGUP, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State HANGUP going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_HANGUP -> CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard REPORTING, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State REPORTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State Change CS_REPORTING -> CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Locked, Waiting on external entities
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Ended
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 (7070@76.188.116.163) [CS_DESTROY]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) Running State Change CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) SOFIA DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 (7070@76.188.116.163) Standard DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163 (7070@76.188.116.163)) State DESTROY going to sleep


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org (consulting@freeswitch.org)
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org)
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org (consulting@freeswitch.org)
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org)
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org (consulting@freeswitch.org)
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org)
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org






_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org (consulting@freeswitch.org)
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org)
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
Back to top
lconroy at insensate.c...
Guest





PostPosted: Mon Mar 14, 2016 8:17 pm    Post subject: [Freeswitch-users] Security - How can I prevent these calls? Reply with quote

Hi again,
true, but f2b sure does cut down on wasted traffic and vast numbers of log entries, even with a secured dialplan.
That's why I said put in f2b, secure dialplan, and only then run fS "in anger".
f2b simplifies/automates the firewall block/unblocking. That cuts traffic, and in so doing, it also slows down brute force attacks to the point where they're not really feasible unless you are a target for APT.
So, I'd argue you need both (as suggested).

all the best,
Lawrence

On 15 Mar 2016, at 00:35, Stanislav Sinyagin <ssinyagin@gmail.com> wrote:
Quote:
But what does fail2ban have to do with security? If a stranger from the internet is able to make calls to PSTN through your PBX, you need to prevent such access in the first place. It's a matter of dialplan planning, and not the firewall or fail2ban.

On 15 Mar 2016 00:20, "Jun Sun" <jsun@junsun.net> wrote:
Or simply run a prebuilt AMI image from aws. It comes with fail2ban, firewall, etc.

https://aws.amazon.com/marketplace/pp/B015ZTS2XM

https://aws.amazon.com/marketplace/pp/B0191S5CU4/

Jun

On Mon, Mar 14, 2016 at 2:08 PM, Lawrence Conroy <lconroy@insensate.co.uk> wrote:
Hi there,
I guess you're running fS without fail2ban.
Welcome to our world.
BEFORE you bother trying firewall rules manually (or employing a consultant), read up on the freeswitch web for fail2ban, and install f2b.
See <https://freeswitch.org/confluence/display/FREESWITCH/Fail2Ban>

Do it BEFORE you run freeSwitch "in anger".

Then secure your profiles & dialplan.

Then run freeSwitch.

Then ask Smile.

all the best
Lawrence
(who, like most of us, has had exactly this sort of problem)

On 14 Mar 2016, at 20:38, Jurijs Ivolga <jurijs.ivolga@gmail.com> wrote:
Quote:
Hi Samuel,

Your problem has 2 solutions - easy one and not so easy:

Easy way:
If you are facing such issues this mean that you very new to VoIP and Freeswitch particularly and in my opinion it is worth to find professional who will configure and secure your PBX, otherwise you can end up loosing much more then 30$.

Hard way:
If you still think that you can handle it, then first and most simple way is to use iptables for blocking unwanted traffic. Below you can find my manual:
http://blog.volunge.net/jekyll/update/2016/02/27/how-to-secure-freeswitch-with-iptables.html

Additionally to this you can find Freeswitch official documentation regarding Firewall configuration:
https://freeswitch.org/confluence/display/FREESWITCH/Firewall

Keep in mind that proper FW configuration will not fix all your issues and you should understand how Freeswitch work and what each configuration file do to secure your installation properly.

With kind regards,

Jurijs

2016-03-14 19:15 GMT+02:00 Samuel Reamer <adam@steffannicarpet.com>:
I have a small setup for a small business that I've been testing; however, it appears that someone has hacked there way into making calls ($30 worth in just a few minutes). Can anyone provide me guidance on how to prevent these calls? Below is my ACL and a partial log:


<configuration name="acl.conf" description="Network Lists">
<network-lists>

<list name="lan" default="allow">
<node type="allow" cidr="192.168.0.0/24"/>
<!--<node type="deny" cidr="192.168.42.42/32"/> -->
</list>


<list name="domains" default="deny">
<!-- domain= is special it scans the domain from the directory to build the ACL -->
<node type="allow" domain="$${domain}"/>
<node type="allow" cidr="192.168.0.0/24"/>
<node type="allow" cidr="107.20.251.237/32" />
<node type="allow" cidr="107.20.176.37/32" />
<node type="allow" cidr="184.169.138.133/32" />
<node type="allow" cidr="54.215.5.82/32" />
</list>

</network-lists>
</configuration>

3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [NOTICE] switch_channel.c:1091 New Channel sofia/internal/10000000@192.168.0.10:5060 [3ff60ad1-2ac7-46e8-b841-03fff79f972e]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_NEW
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9244 sofia/internal/10000000@192.168.0.10:5060 receiving invite from 46.166.160.136:5074 version: 1.7.0 64bit
2016-03-14 11:29:48.850490 [DEBUG] sofia.c:9411 IP 46.166.160.136 Rejected by acl "domains". Falling back to Digest auth.
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:48.870521 [DEBUG] switch_core_state_machine.c:492 (sofia/internal/10000000@192.168.0.10:5060) State NEW
2016-03-14 11:29:48.870521 [DEBUG] sofia.c:2147 detaching session 3ff60ad1-2ac7-46e8-b841-03fff79f972e
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [WARNING] switch_core_state_machine.c:576 3ff60ad1-2ac7-46e8-b841-03fff79f972e sofia/internal/10000000@192.168.0.10:5060 Abandoned
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_state_machine.c:579 Hangup sofia/internal/10000000@192.168.0.10:5060 [CS_NEW] [WRONG_CALL_STATE]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:739 (sofia/internal/10000000@192.168.0.10:5060) Callstate Change DOWN -> HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:431 Channel sofia/internal/10000000@192.168.0.10:5060 hanging up, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:60 sofia/internal/10000000@192.168.0.10:5060 Standard HANGUP, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:741 (sofia/internal/10000000@192.168.0.10:5060) State HANGUP going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:508 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_HANGUP -> CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:473 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:104 sofia/internal/10000000@192.168.0.10:5060 Standard REPORTING, cause: WRONG_CALL_STATE
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:827 (sofia/internal/10000000@192.168.0.10:5060) State REPORTING going to sleep
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:499 (sofia/internal/10000000@192.168.0.10:5060) State Change CS_REPORTING -> CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_session.c:1646 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Locked, Waiting on external entities
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1664 Session 384 (sofia/internal/10000000@192.168.0.10:5060) Ended
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [NOTICE] switch_core_session.c:1668 Close Channel sofia/internal/10000000@192.168.0.10:5060 [CS_DESTROY]
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:630 (sofia/internal/10000000@192.168.0.10:5060) Running State Change CS_DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] mod_sofia.c:341 sofia/internal/10000000@192.168.0.10:5060 SOFIA DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:111 sofia/internal/10000000@192.168.0.10:5060 Standard DESTROY
3ff60ad1-2ac7-46e8-b841-03fff79f972e 2016-03-14 11:29:59.371127 [DEBUG] switch_core_state_machine.c:640 (sofia/internal/10000000@192.168.0.10:5060) State DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:5974 Remote Reason: 16
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] sofia.c:6756 Channel sofia/external/4721935380 entering state [terminated][480]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [NOTICE] sofia.c:7775 Hangup sofia/external/4721935380 [CS_EXCHANGE_MEDIA] [NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:705 sofia/external/4721935380 ending bridge by request from read function
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/4721935380]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:542 (sofia/external/4721935380) State EXCHANGE_MEDIA going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:739 (sofia/external/4721935380) Callstate Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] mod_sofia.c:431 Channel sofia/external/4721935380 hanging up, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:60 sofia/external/4721935380 Standard HANGUP, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:741 (sofia/external/4721935380) State HANGUP going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:508 (sofia/external/4721935380) State Change CS_HANGUP -> CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:473 (sofia/external/4721935380) Running State Change CS_REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:104 sofia/external/4721935380 Standard REPORTING, cause: NORMAL_CLEARING
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:827 (sofia/external/4721935380) State REPORTING going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_state_machine.c:499 (sofia/external/4721935380) State Change CS_REPORTING -> CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.431383 [DEBUG] switch_core_session.c:1646 Session 382 (sofia/external/4721935380) Locked, Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_ivr_bridge.c:778 BRIDGE THREAD DONE [sofia/external/7070@76.188.116.163]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_channel.c:4801 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING]
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 382 (sofia/external/4721935380) Ended
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/4721935380 [CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:2796 sofia/external/7070@76.188.116.163 skip receive message [APPLICATION_EXEC_COMPLETE] (channel is hungup already)
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/4721935380) Running State Change CS_DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change EARLY -> HANGUP
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/4721935380 SOFIA DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:425 sofia/external/7070@76.188.116.163 Overriding SIP cause 480 with 480 from the other leg
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_session.c:1646 Session 381 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1664 Session 381 (sofia/external/7070@76.188.116.163) Ended
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 [CS_DESTROY]
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:04.451379 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY
2016-03-14 11:30:05.530466 [DEBUG] switch_nat.c:568 unmapped public port 23574 protocol UDP to localport 23574
2016-03-14 11:30:06.650545 [DEBUG] switch_nat.c:568 unmapped public port 24394 protocol UDP to localport 24394
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY
773dea0b-4847-4c8b-8fa7-71301ff9f60c 2016-03-14 11:30:06.650545 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:111 sofia/external/4721935380 Standard DESTROY
2fb2983d-bfde-4c22-8813-76d598e74a42 2016-03-14 11:30:06.690512 [DEBUG] switch_core_state_machine.c:640 (sofia/external/4721935380) State DESTROY going to sleep
2016-03-14 11:30:08.970671 [WARNING] sofia_reg.c:2874 Can't find user [7070@76.188.116.163] from 104.245.99.71
You must define a domain called '76.188.116.163' in your directory and add a user with the id="7070" attribute
and you must configure your device to use the proper domain in it's authentication credentials.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [NOTICE] switch_channel.c:1091 New Channel sofia/external/7070@76.188.116.163 [351981a2-a412-49bb-a554-0df34a002f86]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:9244 sofia/external/7070@76.188.116.163 receiving invite from 104.245.99.71:6688 version: 1.7.0 64bit
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6756 Channel sofia/external/7070@76.188.116.163 entering state [received][100]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:6766 Remote SDP:
351981a2-a412-49bb-a554-0df34a002f86 v=0
351981a2-a412-49bb-a554-0df34a002f86 o=- 21305208 21305221 IN IP4 104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 s=eyeBeam
351981a2-a412-49bb-a554-0df34a002f86 c=IN IP4 104.245.99.71
351981a2-a412-49bb-a554-0df34a002f86 t=0 0
351981a2-a412-49bb-a554-0df34a002f86 m=audio 6690 RTP/AVP 100 6 0 8 3 18 5 101
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:100 speex/16000
351981a2-a412-49bb-a554-0df34a002f86 a=rtpmap:101 telephone-event/8000
351981a2-a412-49bb-a554-0df34a002f86 a=fmtp:101 0-15
351981a2-a412-49bb-a554-0df34a002f86 a=alt:1 1 : 8EB1B249 0000007D 104.245.99.71 6690
351981a2-a412-49bb-a554-0df34a002f86
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] sofia.c:7121 (sofia/external/7070@76.188.116.163) State Change CS_NEW -> CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:492 (sofia/external/7070@76.188.116.163) State NEW
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:88 sofia/external/7070@76.188.116.163 SOFIA INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:40 sofia/external/7070@76.188.116.163 Standard INIT
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:48 (sofia/external/7070@76.188.116.163) State Change CS_INIT -> CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:516 (sofia/external/7070@76.188.116.163) State INIT going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_channel.c:2240 (sofia/external/7070@76.188.116.163) Callstate Change DOWN -> RINGING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] mod_sofia.c:141 sofia/external/7070@76.188.116.163 SOFIA ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:166 sofia/external/7070@76.188.116.163 Standard ROUTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [INFO] mod_dialplan_xml.c:637 Processing 7070 <7070>->004721935380 in context public
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->Calls to Plivo] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [Calls to Plivo] destination_number(004721935380) =~ /^(1{0,1}\d{10})$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->unloop] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->outside_call] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Absolute Condition [outside_call]
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Action set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)})
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->call_debug] continue=true
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->public_extensions] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [public_extensions] destination_number(004721935380) =~ /^(10[01][0-9])$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->group_dial_standard] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [group_dial_standard] destination_number(004721935380) =~ /^2000$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 parsing [public->public_did] continue=false
351981a2-a412-49bb-a554-0df34a002f86 Dialplan: sofia/external/7070@76.188.116.163 Regex (FAIL) [public_did] destination_number(004721935380) =~ /^(5551212)$/ break=on-false
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:216 (sofia/external/7070@76.188.116.163) State Change CS_ROUTING -> CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.430898 [DEBUG] switch_core_state_machine.c:532 (sofia/external/7070@76.188.116.163) State ROUTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:196 sofia/external/7070@76.188.116.163 SOFIA EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:258 sofia/external/7070@76.188.116.163 Standard EXECUTE
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 set(outside_call=true)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_dptools.c:1498 SET sofia/external/7070@76.188.116.163 [outside_call]=[true]
351981a2-a412-49bb-a554-0df34a002f86 EXECUTE sofia/external/7070@76.188.116.163 export(RFC2822_DATE=Mon, 14 Mar 2016 11:30:13 -0400)
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_channel.c:1283 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 14 Mar 2016 11:30:13 -0400]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:315 sofia/external/7070@76.188.116.163 has executed the last dialplan instruction, hanging up.
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_state_machine.c:317 Hangup sofia/external/7070@76.188.116.163 [CS_EXECUTE] [NORMAL_CLEARING]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:539 (sofia/external/7070@76.188.116.163) State EXECUTE going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:739 (sofia/external/7070@76.188.116.163) Callstate Change RINGING -> HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:431 Channel sofia/external/7070@76.188.116.163 hanging up, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:568 Responding to INVITE with: 480
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:60 sofia/external/7070@76.188.116.163 Standard HANGUP, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:741 (sofia/external/7070@76.188.116.163) State HANGUP going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:508 (sofia/external/7070@76.188.116.163) State Change CS_HANGUP -> CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:473 (sofia/external/7070@76.188.116.163) Running State Change CS_REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:104 sofia/external/7070@76.188.116.163 Standard REPORTING, cause: NORMAL_CLEARING
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:827 (sofia/external/7070@76.188.116.163) State REPORTING going to sleep
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:499 (sofia/external/7070@76.188.116.163) State Change CS_REPORTING -> CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_session.c:1646 Session 385 (sofia/external/7070@76.188.116.163) Locked, Waiting on external entities
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1664 Session 385 (sofia/external/7070@76.188.116.163) Ended
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [NOTICE] switch_core_session.c:1668 Close Channel sofia/external/7070@76.188.116.163 [CS_DESTROY]
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:630 (sofia/external/7070@76.188.116.163) Running State Change CS_DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] mod_sofia.c:341 sofia/external/7070@76.188.116.163 SOFIA DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:111 sofia/external/7070@76.188.116.163 Standard DESTROY
351981a2-a412-49bb-a554-0df34a002f86 2016-03-14 11:30:13.450893 [DEBUG] switch_core_state_machine.c:640 (sofia/external/7070@76.188.116.163) State DESTROY going to sleep


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
Back to top
Display posts from previous:   
Post new topic   Reply to topic    VoIP Mailing List Archives Forum Index -> freeSWITCH Users All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group

VoiceMeUp - Corporate & Wholesale VoIP Services