- h323plus - lists.packetizer.com

GNU Gatekeeper 5.3 released
by Jan Willamowius 26 Jul '19

26 Jul '19

Hi, I have just released GNU Gatekeeper version 5.3. You can download it from https://www.gnugk.org/h323download.html This release has a number of new features as well as some important bug fixes. Whats new ? - LRQ loop detection to optimize calls flows between multiple neighbor gatekeepers This new feature has the potential to significantly reduce the load on all gatekeepers and prevent "LRQ storms". - new routing policy to set call destinations by querying HTTP or REST servers, see [Routing::Http] - much improved support for SNMP - important bug fix for TLS encryption of signaling channels - important bug fixes for H.460.18 (for H.245 tunneling and for multi-homed servers) - performance optimization: this version can handle 5-10% more proxied calls on the same hardware - performance optimization: re-authenticate lightweight, additive registrations only when new aliases differ This significantly reduces the load on password databases. Enjoy! Full change log: - BUGFIX(ProxyChannel.cxx) don't send H.245 address to tunneling H.460.18 endpoint, breaks call when H.245 multiplexing - performance optimization: 5% faster UDP handling - changed default: [SNMP] Implementation=PTlib - remove unfinished Windows-SNMP implementation, use PTLib-SNMP on Windows - support SET and GET-NEXT in PTLib-SNMP - support SNMP sysUpTime when running as standalone agent - BUGFIX(configure.in) LARGE_FDSET defaults to off - new SNMP OID 1.3.6.1.4.1.27938.11.1.9 to query total bandwidth allocated to ongoing calls - BUGFIX(ProxyChannel.cxx) fix hangup when making many TLS calls quickly one after another - BUGFIX(RasSrv.cxx) don't require H.460.22 parameters in ARQs - BUGFIX(ProxyChannel.cxx) fix TLS without LARGE_FDSET - BUGFIX(ProxyChannel.cxx) don't send H.460.22 priority field in SCI - BUGFIX(gkauth.cxx) free memory from cached and expired passwords - re-authenticate lightweight, additive registrations only when new aliases differ - remove switch [Proxy]DisableRTPQueueing, always disabled now - new routing policy: http with config section [Routing::Http] - BUGFIX(ProxyChannel.cxx) fix H.460.18 on multi-homed servers (SCI comes from the correct IP now) - new switch to disable SNMP traps [SNMP] EnableTraps=0 - BUGFIX(ProxyChannel.cxx) don't throw SNMP trap on H.245 connection errors (causes crash under load with Net-SNMP) - BUGFIX(snmp.cxx) shutdown GnuGk when SNMP agent can't be started - BUGFIX(snmp.cxx) protect NetSNMP library calls with mutex - changed default: ForwardResponse now defaults to 1 in [RasSrv::LRQFeatures] and [Neighbor::...] - new feature: loop detection for LRQs [RasSrv::LRQFeatures] LoopDetection=1 - BUGFIX(Neighbor.cxx) some settings in [RasSrv::LRQFeatures] were ignored if not set in [Neighbor::...] -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeer 5.2 released
by Jan Willamowius 18 Mar '19

18 Mar '19

Hi, I have just released GNU Gatekeeper version 5.2. You can download it from https://www.gnugk.org/h323download.html This release that has a rewritten networking implementation (aka "large-fdset") that allows GnuGk to scale to higher numbers of calls per server than previous versions. This new implementation replaces the old hack to extend the select() system call by using poll() which enables GnuGk to handle huge numbers of sockets at the same time. The new implementation also works on Windows, but has been tested mostly on the different Unix versions we support. Please note that the relevant configure option when comping GnuGk source code has changed to --enable-large-fdset. There is no need to specify a maximum number of sockets any more. This release also has a few bug fixes, eg. for using LUA scripts with shared libraries and for memory leaks in the error handling of H.235 password authentication. Whats new ? - re-implement LARGE_FDSET using poll(), enable with configure option --enable-large-fdset - ExternalIP is automatically added to the default domains - support running LUA scripts that require dynamic libraries - change default for [TLS] CipherList= to allow elliptical curve ciphers - BUGFIX(gkauth.h) fix memory leak in H.235 password auth - BUGFIX(gkacct.cxx) set known, but unavailable accounting parameters to empty string - BUGFIX(ProxyChannel.cxx) fix setting UDP source IP on Windows when compiled for Vista or higher Enjoy! -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

How to enable H323_VIDEO on h323plus
by prateek gupta 01 Mar '19

01 Mar '19

Hi Team, I am new to h323plus and currently I am struggling to enable Video on the H323plus module. . I installed h323plus,code download and install from https://www.h323plus.org/source/. Steps to Follow : ./configure CXXFLAGS=-D_SIGNAL_ONLY & then I got the issue : Here x264 static linking library and h.264 support disabled. ( Although I have already installed x264 module ) checking for X264... yes checking filename of libx264 library... configure: x264 static linking disabled . . . configure: h264 support disabled due to disabled dependency HAVE_H264_DECODER checking enable H.264 support... no . . . =================== Plugin configuration ====================== prefix : /usr/local exec_prefix : ${prefix} libdir : ${exec_prefix}/lib Audio Codec plugin install dir : ${libdir}/opal-1.27.0/codecs/audio Video Codec plugin install prefix: ${libdir}/opal-1.27.0/codecs/video LID plugin install prefix : ${libdir}/opal-1.27.0/lid FAX plugin install prefix : ${libdir}/opal-1.27.0/fax GSM : yes (internal) gsm-amr : yes iLBC : yes (internal) Speex : yes (internal, version 1.1.11.1) LPC10 : yes G.726 : yes IMA_ADPCM : yes SBC : no H.261 : yes H.263 : no (ffmpeg version) H.263/H.263+ : no H.264 : no THEORA : no MPEG4 Part 2 : no CELT : no SpanDSP FAX : no CAPI : no Quicknet xJACK support : no Voicetronics VPB support : yes OS Type : linux-gnu Machine Type : x86_64 If all settings are OK, type make and make install Kindly, let me know how can I check my H323_VIDEO is enabled or not. Thank you so much. Regards, Prateek

2 1

New release of Callgen323
by Jan Willamowius 06 Feb '19

06 Feb '19

Hi, I'm happy to announce a new release of the H.323 call generator appication Callgen323. It now supports load testing with video, H.239 and H.460 NAT traversal incl. RTP multiplexing. It also supports RTP fuzzing to test codecs. You can use it to test your H323Plus endpoints as well as any commercial H.323 device. Download it at https://github.com/willamowius/callgen323 Enjoy! -- Jan Willamowius, H323Plus maintainer EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/h323plus-support.html Relaxed Communications GmbH Frahmredder 91, 22393 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeer 5.1 is out
by Jan Willamowius 07 Jan '19

07 Jan '19

Hi, I have released GNU Gatekeeper version 5.1. You can download it from https://www.gnugk.org/h323download.html The main new feature in this release is H.245 multiplexing. Together with the long supported RTP multiplexing it allows GnuGk to handle a large amount of calls from H.460 endpoints using just 5 ports total. Whats new ? - support for H.245 multiplexing with H.460.18: [RoutedMode] EnableH245Multiplexing=1, H245MultiplexPort=1722 - improved interop with Lifesize Icon (H.235), Scopia VC240 (H.460.18) and Yealink Mobile (H.460.19) - improved detection of neighbor gatekeeper availability - public IP detection for Google Cloud - new feature to let GnuGk send an event if port detection fails There were also a number of bug fixes, please see changes.txt or the blog post: https://blog.gnugk.org/2019/01/gnu-gatekeeper-5-1.html Enjoy! -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeer 5.0 released
by Jan Willamowius 18 Aug '18

18 Aug '18

Hi, I'm happy to announce the release of GNU Gatekeeper version 5.0. This version has new features and a few bug fixes. You can download it from https://www.gnugk.org/h323download.html Whats new ? - support for Azure and Alibaba Cloud in addition to AWS - performance optimizations, especially for multiplexed RTP and LUA - compatible with OpenSSL 1.1.x - switch to translate Facility transfers into gatekeeper TCS0 reroutes There were also a number of bug fixes, please see changes.txt for details. Enjoy! -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

How to add the hareware codec
by lewei zhuang 18 Aug '18

18 Aug '18

Thanks you for your hep that I can compiling the H.264 plugin now. But I want to do a embedded device that I need the chip codec.But I don't know how to change the codec by the chip.Because I don't know what should I do? Thanks you for your help.

2 1

Help
by lewei zhuang 29 Jul '18

29 Jul '18

Dear H323plus Team: I think I need some help that when I use the simph323,it can't use the H.264 in my ubuntu 16.04,and the sound device is NO Audio . I wanted to found the solutions by Google ,but I can only found I need to install libavcodec and alsa .so I do it. And the sound output device can be found ,but the sound input device still NO Aduio. In my ubuntu 16.04 ,I had install all about alsa ,and I install libavcodec-dev and ffmpeg ,but it doesn't work. The error message is as follows Sound output device: "alsa_output.pci-0000_02_02.0.analog-stereo" Sound input device: "Null Audio" checking for LIBAVCODEC... yes configure: libavcodec stack align hack disabled checking for h263p_encoder in -lavcodec... no checking for h263p_encoder in -lavcodec... (cached) no checking for mpeg4_encoder in -lavcodec... no checking for h264_decoder in -lavcodec... no

2 2

H.239 bug fixes and improved test tools
by Jan Willamowius 25 Jul '18

25 Jul '18

Hi, if you are using H.239, you should update to the latest code from Github. A number of bugs have been fixed in the H.239 code recently. If you still see issues, please let me know. https://github.com/willamowius/h323plus As part of the H.239 testing, I also added H.239 support to the call generator (--h239enable) as well as RTP fuzzing (--fuzzing). Its amazing how many commercial H.323 endpoints crash when you apply some RTP or RTCP fuzzing. ;-) https://github.com/willamowius/callgen323 Regards, Jan -- Jan Willamowius, H323Plus maintainer EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/h323plus-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

H323Plus 1.27.0 released
by Jan Willamowius 11 Jun '18

11 Jun '18

Hi, I have just published the 1.27.0 release which fixes a number of bugs and is finally compatible with OpenSSL 1.1.x. Please download it from https://www.h323plus.org/source/ I have also updated the API documentation at https://www.h323plus.org/api/ Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/h323plus-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper Survey 2018
by Jan Willamowius 31 May '18

31 May '18

Dear GnuGk community, its important that the GNU Gatekeepers stays relevant to your needs, so please give us some feedback what might be missing or what needs to be fixed. I have compiled a poll with 9 quick questions. Please feel free to add any other suggestions you may have. Don't be too kind, we really want to know what to improve. ;-) https://www.gnugk.org/survey-2018.html In the past, these surveys have always been a great inspiration. Please keep the feedback coming. If you want me to respond to questions or suggestions, please remember to add an email address. Thanks for your time! Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

OpenSSL 1.1
by Jan Willamowius 27 Apr '18

27 Apr '18

Dear community, currently H323Plus depends on OpenSSL 1.0 to enable the full functionality. Adapting password checksums to the OpenSSL 1.1 API was easy and is already in the repository, but moving the media encryption code to 1.1 is very hard. Many Linux distributions are moving to OpenSSL 1.1 and its starting to get complicated to build GnuGk with media encryption since other shared libraries depend on OpenSSL 1.1 now. I'm looking for sponsors to help fund the development work to fully move H323Plus and all the applications that depend on it (GnuGk etc.) to OpenSSL 1.1. If you or your company can help. Please send me an email. Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeer 4.9 released
by Jan Willamowius 05 Apr '18

05 Apr '18

Hi, I have just released GNU Gatekeeper version 4.9. This version has new features and a few bug fixes. You can download it from https://www.gnugk.org/h323download.html Whats new ? We have 2 new accounting modules: HtttpAcct and AMQPAcct that allow you to send accounting events via HTTP GET or POST to a web service or push them into a RabbitMQ queue. There are also many new accounting placeholders that you can use with any of the accounting modules and there is a new accounting event 'reject' to track calls rejected with ARJ that went unnoticed before. The new RTP inactivity checking allows you to drop calls if there wasn't any RTP activity for a defined amount of time. GeoIP authentication has been significantly updated to support all RAS and all Q.931 messages and to support the new Maxmind database format (GeoIP2). There were also a few bug fixes: - BUGFIX(ProxyChannel.cxx) fix crash while handling RTP packets - BUGFIX(RasTbl.cxx) fix disconnecting unregistered endpoints - BUGFIX(RasSrv.cxx) fix crash in some Avaya endpoints when receiving GCF with a gatekeeperIdentifier - BUGFIX(RasSrv.cxx) fix crash when using IPv6 - BUGFIX(ProxyChannel.cxx) fix handling of CloseLogicalChannel Enjoy! -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 4.8 released
by Jan Willamowius 17 Jan '18

17 Jan '18

Hi, I have just released GNU Gatekeeper version 4.8. This version has many new features. You can download the new version from https://www.gnugk.org/h323download.html Overview: New maintenance mode: When you need to take down your GnuGk server (eg. for an OS update), you can switch GnuGk to maintenance mode where it will only allow ongoing calls to finish and automatically redirects all idle endpoints to an alternate GnuGk server. The status port command is "MaintenanceMode <alternate IP>". Detailed information about ongoing calls: You can now display lots of information about each ongoing call (codecs, bandwidth used, IPs etc.). The web interface has been extended to to show this information. See https://www.gnugk.org/images/web7.jpg Easier installation on AWS and inside docker containers. You can now let GnuGk automatically detect the public IP of your AWS server, even from within a docker container. You can also automatically insert your public/external IP into your trace file names to store logs from many servers in the same directory. Extended API: Call routing with external applications has been expanded. You can now set the display names for participants and desired reject codes on the status port. You can also access the vendor information of all registered endpoints. The web interface has been extended to provide this information, too. HttpPasswordAuth has been greatly extended to fetch password information from backend servers. We now use curl to support https and you can add many new placeholders in your queries. Extended screening and rewriting of display names and calling party names. Important bug fixes: Multiplexed RTP is now much more robust and password authentication to parent gatekeepers has been fixed. There are also interop fixes for TCP keep-alives. Please see the full change log below for more details. Changes from 4.7 to 4.8 ======================= - HttpPasswordAuth: support https and add new placeholders - PrintAllRegistrationsVerbose now also shows the endpoint vendor - new status port command: MaintenanceMode - new status port command: PrintCallInfo - allow placeholder %{gkip} and %{external-ip} in [LogFile] Filename= - fetch AWS public/elastic IP if ExternalIP=AWSPublicIP - new commandline switch: -e / --externalip - extend status port command RouteReject to set reject reason - extend status port commands RouteToAlias, RouteToGateway etc. to set display IE for calling and called - new switch: [LogFile] DeleteOnRotation=1 to delete the old logfile when rotating instead of renaming it - new switches: [RoutedMode] AppendToCallingPartyNumberIE= / PrependToCallingPartyNumberIE= to add any string before or after the calling party number IE when ScreenCallingPartyNumberIE=RegisteredAlias - when [RoutedMode] ScreenCallingPartyNumberIE= is set to RegisteredAlias, GnuGk sets calling party number IE to the registered alias (forced screening) - delete DisplayIE when [RoutedMode] ScreenDisplayIE=Delete - new switch [Endpoint] Authenicators= - new default: [RoutedMode] GnuGkTcpKeepAliveMethodH225=EmptyFacility - new default: [RoutedMode] H460KeepAliveMethodH225=EmptyFacility for Cisco interop - new setting "None" for keep-alive methods - BUGFIX(ProxyChannel.cxx) fix bugs in H.460.19 RTP multiplexing - BUGFIX(ProxyChannel.cxx) don't send H.460 keep-alive to non-H.460 party when calling H.460 party - BUGFIX(Routing.cxx) show called port in RouteRequests (as documented) - BUGFIX(GkClient.*) fix password authentication with parent - BUGFIX(Routing.cxx) remove semicolon and pipe chars from vendor string in RouteRequests - better handling of IPv6 GRQ without RAS address - BUGFIX(ProxyChannel.cxx) turn off encryption proxy if DH key is negotiated, but TCS doesn't contain any H.235 entries - BUGFIX(ProxyChannel.cxx) fix running in proxy mode on FreeBSD when one Home IP is set - BUGFIX(ProxyChannel.cxx) fix DisableSettingUDPSourceIP=1 for Windows, NetBSD, OpenBSD and Solaris - BUGFIX(yasocket.cxx) fix LARGE_FDSET for NetBSD, OpenBSD and Solaris -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

H323Plus 1.26.9 released
by Jan Willamowius 16 Jan '18

16 Jan '18

Hi, I have just published the 1.26.9 release with many bug fixes compared to 1.26.8. Please download it from https://www.h323plus.org/source/ or directly from Github: https://github.com/willamowius/h323plus Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/ Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

Size constraints for H225_ArrayOf_EnumeratedParameter
by Denis Kochmashev 29 Oct '17

29 Oct '17

Hello! I have encountered something which looks like a bug. When I add parameters to my custom H460_Feature via H460_FeatureTable table; : table.AddParameter(id, content); : SetCurrentTable(table); H323Plus produces malformed packet with incorrectly encoded size of H225_ArrayOf_EnumeratedParameter. I've found that size constraints for H225_ArrayOf_EnumeratedParameter are not beeing set, however, according to spec, they had to be set. So, if my conclusion is right, I propose a small patch like the following: --- h225_2.cxx.orig 2013-07-23 00:26:59.000000000 +0600 +++ h225_2.cxx 2017-10-23 11:00:27.000000000 +0500 @@ -19,6 +19,7 @@ H225_ArrayOf_EnumeratedParameter::H225_ArrayOf_EnumeratedParameter(unsigned tag, PASN_Object::TagClass tagClass) : PASN_Array(tag, tagClass) { + SetConstraintBounds(PASN_Object::FixedConstraint, 1, 512); } Regards, Denis

3 3

H323Plus source code moving to Github
by Jan Willamowius 13 Oct '17

13 Oct '17

Hi, SourceForge will close down all CVS repositories shortly. The H323Plus source repository is thus moving to Github. Along with it the repositories for GnuGk and our PTLib fork also move to Github. https://github.com/willamowius/h323plus https://github.com/willamowius/gnugk https://github.com/willamowius/ptlib Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/ Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 4.7 has been released (security update)
by Jan Willamowius 21 Sep '17

21 Sep '17

Hi, GNU Gatekeeper version 4.7 has just been released. This version is purely a security update and has no new features. All users are encouraged to update, especially if you use port detection (IgnoreSignaledIPs=1) you should update ASAP. It has been discovered that GnuGk is vulnerable in some configurations for RTP bleed attacks (https://rtpbleed.com/). By updating to version 4.7 only the first packets in each media stream influence the media destination. To further secure your configuration, you can set [Proxy] RestrictRTPSources=Net to only accept RTP from the same class C network that the call signaling came from. Please beware that this may break a few valid calls where this condition isn't met. You can download the new version from https://www.gnugk.org/h323download.html Please see the full change log below. Changes from 4.6 to 4.7 ======================= - fixes for RTP Bleed - new switch [Proxy] RestrictRTPSources=IP or Net to limit accepting RTP from the call signal IPs or the respective class C network - new switch [Proxy] LegacyPortDetection=1 to keep port detection help for some very old and broken endpoints that will make your gatekeeper vulnerable to RTP Bleed attacks - BUGFIX(ProxyChannel.cxx) replace @ip or ip## from aliases when using RedirectCallsToGkIP - BUGFIX(ProxyChannel.cxx) better initialization of sendmsg() structs - new command line option: now you can use -S instead of --strict (needed on BSD systems) -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 4.6 is out
by Jan Willamowius 04 Sep '17

04 Sep '17

Hi, I'm happy to announce that GNU Gatekeeper version 4.6 has just been released. This version has a few new features as well as bug fixes. New features: - least used routing: distribute calls evenly between gateways or MCUs (new switch [RasSrv::ARQFeatures] LeastUsedRouting=1) - ability to log to the Unix syslog instead of the trace file (new switch [LogFile] TraceToSyslog=1) - new authentication module TwoAliasAuth this is not very safe, but you can use it with endpoints that do not support any password transmission - new switch [CTI::MakeCall] Bandwidth= to set the maximum bandwidth for the calls generated by the GnuGk status port API - status port command: UnregisterEP <ep-id> - a number of switches to fine tune TCP keepalives - new switch to remove load balancers from the call path ([RoutedMode] RedirectCallsToGkIP=1) Bug fixes: - fixed TCP keepalive for H.460 calls - fixes to port detection for unregistered calls - audio fix when GnuGk adds encryption to calls - many smaller fixes You can download the new version from https://www.gnugk.org/h323download.html Please see the full change log below. Changes from 4.5 to 4.6 ======================= - new switch: [RoutedMode] RedirectCallsToGkIP=1 - new switches: [RoutedMode] H460KeepAliveMethodH225=, H460KeepAliveMethodH245=, GnuGkTcpKeepAliveMethodH225=, GnuGkTcpKeepAliveMethodH245= - BUGFIX(ProxyChannel.cxx) TCP keep-alives for H.460.18 calls weren't always enabled correctly - don't open a status port listener if [Gatekeeper::Main] StatusPort=0 - BUGFIX(Toolkit.cxx) remove trailing chars before checking for DefaultDomain - add callID to H.245 trace messages for easier debugging - BUGFIX(ProxyChannel.cxx) forward ReleaseComplete from remaining party while doing call reroute - BUGFIX(ProxyChannel.cxx) drop un-en/decryptable RTP packets at end of call when adding encryption - new status port command: UnregisterEP <ep-id> - BUGFIX(RasSrv.cxx) remove IPv6 addresses before processing RRQs when IPv6 is not enabled - send Facility message as as non-H.460.18 keep-alive for H.225 - send non-standard H.245 userIndication as non-H.460.18 keep-alive for H.245 - new switch [RoutedMode] DisableGnuGkH245TcpKeepAlive=1 - new switch [LogFile] TraceToSyslog=1 to send trace output to syslog (Unix only) - BUGFIX(ProxyChannel.cxx) fix port detection for re-opened channels with IgnoreSignaledIPs=1 - new switch [CTI::MakeCall] Bandwidth= to set the maximum bandwidth for the call - new switch [RasSrv::ARQFeatures] LeastUsedRouting=1 to select the least used gateway - new authentication module TwoAliasAuth -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

H323Plus 1.26.8 release and h323plus.org website
by Jan Willamowius 03 Sep '17

03 Sep '17

Hi, I have just released H323Plus 1.26.8. This version contains a number of bug fixes that were only available through the CVS until now. https://www.h323plus.org/source/ I'm also taking over the maintenance of the h323plus.org website. If you run into any issues, please email me. Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

H235 on extended video channel (H239)
by Diego Carvalho Domingos 18 Aug '17

18 Aug '17

Hi, all I'm successfully using both h239 and h235 (for audio and video channels) in my application. Now I also would like to encrypt the content video (extended video channel). It seems that the security capability is not being added to the H.239(H.264{sw} <1>) capability. Is there some way to enable it? Thanks in advance. Diego

1 1

problem about H.235
by gary 13 Aug '17

13 Aug '17

HI Simon and Jan after enabed the H235 media encryption, openmcu and H323 ep in the same network were work well . however , when they were in different networks， 1 . only audio PDU（200bytes）received at MCU , MCU can not receive video pdu（above 1000 bytes）.i am sure the ep had upload the audio and video packages . 2. the threads used for trasmit and receive data had been create , but no data send to H323 ep . some messages hint that PTLIB write Blocking ，but i don‘t know why , use fcntl() to set read/write NONBLOCKING , But not effective . please help thanks gary

2 1

Possible misassumption in HandleFirstSignallingChannelPDU
by Jose Uceda 30 May '17

30 May '17

In our software that we mentioned a few days ago, in addition to the lockups, we observed a problem when we apparently received an incoming call, but CreateConnection is called with a valid PDU that is not a Setup Message one. It happens when the incoming call comes from a Cisco gateway, and the call hangs up at a point where the gateway has sent the Admission Request to the gatekeeper, receives its corresponding admission confirm, but has not sent yet the setup message to our software / destination endpoint. In these circumstances we saw that the gateway has opened the signaling socket with our endpoint, but the first packet it sends is a Release Complete because the call was hung before sending the setup. PDU trace from our Gatekeeper: 2017-05-27 14:46:28.853 5d37 INFO pdu.call.a.ARQ.recv : Received from ip$x.x.x.x:54432. 2017-05-27 14:46:28.855 5d37 INFO pdu.call.a.ACF.send : Sending to ip$x.x.x.x:54432. 2017-05-27 14:46:28.865 5d37 INFO pdu.call.d.DRQ.recv : Received from ip$x.x.x.x:54432. 2017-05-27 14:46:28.866 5d37 INFO pdu.call.d.DCF.send : Sending to ip$x.x.x.x:54432. See the time-stamps, showing that the ACF and DRQ are closely followed. We receive the call at our endpoint, in the CreateConnection function at the same time point as the DRQ / DCF. In our software, in some cases we return NULL if we cannot handle the incoming connection (not enough setup data, e.g.), and if we are running an executable compiled in Debug mode, an assert fails on the following operator: H225_H323_UU_PDU_h323_message_body :: operator const H225_Setup_UUIE & () const #endif { #ifndef PASN_LEANANDMEAN PAssert (PIsDescendant (PAssertNULL (choice), H225_Setup_UUIE), PInvalidCast); #endif Return * (H225_Setup_UUIE *) choice; } It is caused by the following line (transports.cxx: 1126): H225_Setup_UUIE & setup = pdu.m_h323_uu_pdu.m_h323_message_body; This code assumes that the initial PDU is a Setup one without checking it, when it may not necessarily be. That can cause a DoS in a software that has core dump enabled when an assert occurs, or if there is some code in HandleFirstSignallingChannelPDU / OnIncomingConnection and sub-calls that trust and handles the PDU object assuming it is a Setup message. I've made the following patch on the HandleFirstSignallingChannelPDU function, which verifies that the PDU is a Setup message, otherwise it returns FALSE (same behavior as if it had not been able to read a valid q931 pdu), since we think it does not make much sense to call OnIncomingConnection if the initial PDU is not a Setup one: -------------------------------------------------------------------------------- --- src/transports.cxx.orig 2015-11-24 18:51:06.385755223 +0100 +++ src/transports.cxx 2017-05-29 11:15:20.777411444 +0200 @@ -1106,7 +1106,13 @@ return FALSE; } - unsigned callReference = pdu.GetQ931().GetCallReference(); + const Q931 &firstQ931PDU = pdu.GetQ931(); + if (firstQ931PDU.GetMessageType() != Q931::SetupMsg) { + PTRACE(1, "H225\tFirst pdu is not a setup one, connection not started."); + return FALSE; + } + + unsigned callReference = firstQ931PDU.GetCallReference(); PTRACE(3, "H225\tIncoming call, first PDU: callReference=" << callReference); // Get a new (or old) connection from the endpoint -------------------------------------------------------------------------------- A place where we could also put the patch is in the HandleSignallingSocket function, which apparently is only used from HandleFirstSignallingChannelPDU, but as it has a more generic name and may give rise to doubts of its behavior. Regards, Jose Uceda

2 1

Lockup problems
by Jose Uceda 09 May '17

09 May '17

Hi all, In one of our softwares which uses the H323+ library, we are recently suffering from lockups when the calls are disconnecting. It's currently running with H323+ from CVS and PTLib 2.12.8. As far as we have been able to trace, it seems to be that the RTP UDP socket or signalling channel sometimes remains in a loop and they don't close as expected (log says Broken Pipe errors, eg). That issue causes the call is not finished correctly, and it seems to leave the cleaner thread in a stuck state so subsequent calls are no longer hanged up (at least we don't receive OnCleared event anymore). When we were trying to debug the problem, we saw that the issue became worse with PTLib 2.12.9, and we also suffered from many more locks with the 1,175 h323.cxx file revision, which was reverted about a month later. The comment from the commit that reverts 1,175 revision reads as follows: "Always calling Wait (0) on mutex can cause issues with lock nesting, move fix to PTLib fork" Is there any fork of PTLib in some repository that we haven't noticed about it, that is the official one to use with H323+? Thanks in advance. Regards, Jose Uceda

2 1

Re: [h323plus] Renegotiate media port
by Diego Carvalho Domingos 19 Apr '17

19 Apr '17

Thanks once again Jan, Actually my gateway does not proxy media. After reading your answer, I searched and found that CloseLogicalChannel has a parameter fromRemote. Is that what you are talking about? This would send a request channel close, right? Regards, Diego Carvalho Domingos System Development Specialist +55.19 3112-1200-1286 DaitanGroup | www.daitangroup.com | Accelerating.T Privileged and confidential. If this message has been received in error, please notify sender and delete it immediately. Conteúdo confidencial. Se esta mensagem foi recebida por engano, favor avisar o remetente e apagá-la imediatamente. -----Original Message----- From: Jan Willamowius [mailto:jan@willamowius.de] Sent: quarta-feira, 19 de abril de 2017 12:53 To: Diego Carvalho Domingos <ddomingos(a)daitangroup.com> Subject: Re: [h323plus] Renegotiate media port The ports you receive media on affect both your sending and receiving media channels (the channel where you send media is in the same RTP session as the receiving channel and thus the RTCP ports should match). So you would have to close sending and receiving channels and hope that the other side re-opens their sending channel. Sending a TCS0 and doing a full re-negotiation seems like a good choice. But as I said on the board, since your gateway proxies media, I'd try to keep the port the same during the call and eg. copy the data from the SIP side from one port to the other etc. Thats probably a lot of work, too, but better than closing and re-opening channels. Regards, Jan Diego Carvalho Domingos wrote: > Thanks for answering Jan, > > I tried that but then I realized that the port that the H323 device should send media to goes in the OLCA, so closing and reopening my local OLC does not help. I'm missing something here? > After realizing that reopening the OLC would not help, I restarted the > whole negotiation by sending an empty TCS and, after receiving the TCS > Ack, a non-empty TCS. This in fact worked but I thought it's too > complex. Would reverse logical channel parameters help here? If so, > can you point me how to set that? I use (a subclass of) > H323_ExternalRTPChannel. Thanks again. Regards, > > Diego Carvalho Domingos > > -----Original Message----- > From: h323plus [mailto:h323plus-bounces@lists.packetizer.com] On > Behalf Of Jan Willamowius > Sent: quarta-feira, 19 de abril de 2017 12:10 > To: h323plus(a)lists.packetizer.com > Subject: Re: [h323plus] Renegotiate media port > > Hi Tarmo, > > if you look closely, Diego is doing video. > To my knowledge there is no free H.323-SIP gateway that supports video. > > Regarding the port negotiation: > The only way to change the ports is to close the logical channel and > to open a new one. (as we discussed on the Packetizer board) > > Regards, > Jan > > -- > Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : > jan(a)willamowius.de > Website: https://www.gnugk.org > Support: https://www.willamowius.com/gnugk-support.html > > Relaxed Communications GmbH > Frahmredder 91 > 22393 Hamburg > Geschäftsführer: Jan Willamowius > HRB 125261 (Amtsgericht Hamburg) > USt-IdNr: DE286003584 > > kalazeez wrote: > > There is no need to reinvent the wheel. Use something existing and most fitting Your needs. For similar cases iI usually use Freeswitch. Just works, out of the box. > > > > Tarmo > > > > > On 17 Apr 2017, at 22:52, Diego Carvalho Domingos <ddomingos(a)daitangroup.com> wrote: > > > > > > Hi all, > > > At some point after the call has been successfully set up, I need to renegotiate the audio (it could be video as well) media port. In my case, I developed a H323-SIP gateway (that does not handle media, only signaling conversion) and the SIP side sent a reinvite with a different audio port, so I need to make the H323 device send media to this new port. How can I accomplish this? (both in terms of the H323 protocol itself and implementing the solution using H323Plus). I appreciate any help, thanks. > > > > > > Diego Carvalho Domingos

1 0