- h323plus - lists.packetizer.com

GNU Gatekeeper 5.13 released
by Jan Willamowius 19 Oct '24

19 Oct '24

Dear community, GNU Gatekeeper version 5.13 has been released. This is strictly a bug fixing release that fixes an issue with the RTP port detection and 2 other minor issues. Download from https://www.gnugk.org/h323download.html Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH c/o Jan Willamowius, Buchsbaumweg 4, 22299 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

PTLib 2.10.9.6 released
by Jan Willamowius 26 Feb '24

26 Feb '24

Dear community, I have just bundeled up the changes and bug fixes of the past 2 years and released PTLib 2.10.9.6. Most notable in this release is working IPv6 on *BSD, macOSX and Solaris as well as support for newer compilers and many small platform fixes. - IPv6 support fixed for *BSD, macOSX and Solaris - support for newer compiler, eg. gcc 13 and VS2022 - support for C++-17 - support for Win64 builds - support AIX as platform - small OpenBSD fixes - other small fixes Download from https://www.h323plus.org/source/ Regards, Jan -- Jan Willamowius, H323Plus maintainer EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/h323plus-support.html Relaxed Communications GmbH c/o Jan Willamowius, Buchsbaumweg 4, 22299 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 5.12 released
by Jan Willamowius 19 Feb '24

19 Feb '24

Dear community, GNU Gatekeeper version 5.12 has been released. Another important bug in the handling of the ExternalIP switch has been fixed as well as Y2K38 issues. This release also adds features: - support for Oracle databases - easier cloud deployment with IP detection with STUN - better load scaling by mixing proxied with direct mode endpoints in a single gatekeeper - Windows 64bit executables with VS2022 All changes and additions: - enable more runtime hardening flags from OpenSSF recommendation 11/2023 - fix bug with H.245 address when using ExternalIP= switch without H.460.18/.19 - auto-detect public IP with ExternalIP=STUN and STUNServer=stun.example.com - compiler support for VS2022 - new database driver for Oracle and new timestamp format 'Oracle' - new switch [EP::xxx] ForceDirectMode=1 to handle all calls from this endpoint in direct mode - BUGFIX(RasSrv.cxx, gkauth.cxx) make sure time_t is handled unsigned to avoid Y2K38 issue - BUGFIX(ProxyChannel.cxx) check for too small packets when acting as encryption proxy Download from https://www.gnugk.org/h323download.html Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH c/o Jan Willamowius, Buchsbaumweg 4, 22299 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper Survey 2023
by Jan Willamowius 01 Sep '23

01 Sep '23

Dear GNU Gatekeeper community, I have compiled a poll with a few quick questions. Please feel free to add any other suggestions you may have. https://www.gnugk.org/survey-2023.html Please keep the feedback coming. If you want me to respond to questions or suggestions, please remember to add an email address. In the past, these surveys have always been a great source of inspiration to the project. Thanks for your time! Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 1

H323Plus 1.28.0 released
by Jan Willamowius 02 Jul '23

02 Jul '23

Dear community, I'm happy to announce the release of H323Plus version 1.28.0. - H323Plus now supports the H.323 standard up to version 8, which was approved in March 2022 - a few places have been fixed to avoid Y2K38 issues in timestamps - the H323Endpoint class now doesn't cap per call bandwidth any more - warnings regarding the H.460.23/.24 patent were removed since that patent has expired now - support for LibreSSL was improved - a few more smaller bugs were fixed Download from https://www.h323plus.org/source/ Regards, Jan -- Jan Willamowius, H323Plus maintainer EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/h323plus-support.html Relaxed Communications GmbH Frahmredder 91, 22393 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 5.11 released
by Jan Willamowius 20 Feb '23

20 Feb '23

Dear community, GNU Gatekeeper version 5.11 has been released. This a bug fix release with a few other changes: An important bug in the handling of the ExternalIP switch has been fixed. We also added a few features that make it easier to use GnuGk with Graphana and InfluxDB monitoring. Other changes and additions: - remove non-working command line switch -e / --externalip, use config file to set ExternalIP - new accounting variables %{registrations}, %{calls}, %{total-calls}, %{successful-calls}, %{allocated-bandwidth} - new switch [HttpAcct] Authorization= to send authorization headers to support InfluxDB - replace \r and \n in HttpAcct body with carriage return and line feed characters - new switch: [RasSrv::LRQFeatures] PreserveDestination=1 (helpful when calling Pexip servers) Download from https://www.gnugk.org/h323download.html Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH c/o Jan Willamowius, Buchsbaumweg 4, 22299 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

PTLib release 2.10.9.5
by Jan Willamowius 05 Oct '22

05 Oct '22

Dear community, I just published the a maintenance release 2.10.9.5 for PTLib: https://github.com/willamowius/ptlib/releases The main change is support for glibc >= 2.34 plus a few smaller bug fixes. Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91, 22393 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

H323Plus updated for H.323 v8
by Jan Willamowius 28 Sep '22

28 Sep '22

Dear community, I have updated H323Plus for the recently released version 8 of H.323 from the ITU. The changes aren't huge and mostly extend H.245. To quote Paul Jones "...there is the ability to open a DTLS channel for use with WebRTC clients. There is SCTP involved with that, though I cannot recall off-hand whether it’s DTLS over SCTP, SCTP over DTLS, or both. Anyway, there is a new H.235.10 that describes that. There is the ability to advertise a nominal audio level in dBov." All updated files are on Github now. Small bug fixes in the ASN.1 spec have been pushed back to the ITU. GnuGk didn't need any changes to compile with the updated H323Plus. Regards, Jan -- Jan Willamowius, H323Plus maintainer EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/h323plus-support.html Relaxed Communications GmbH c/o Jan Willamowius, Buchsbaumweg 4, 22299 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 5.10 released
by Jan Willamowius 29 Aug '22

29 Aug '22

Dear community, GNU Gatekeeper version 5.10 has been released. This a bug fix release with no new features. Download: https://www.gnugk.org/h323download.html Bug fixes: - fix a crash when handling the MasterSlaveDetermination message - fix the documentation of [RasSrv::LRQFeatures] NeighborTimeout and consistently treat the value as 10th of a second in the program Regards, Jan PS: The H323plus mailinglist was down the last few weeks. If you tried to post, please re-send your posting! -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH c/o Jan Willamowius, Buchsbaumweg 4, 22299 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

H323Plus User Survey
by Jan Willamowius 02 Feb '22

02 Feb '22

Dear Community, we would like to learn a bit more about the users of the H323Plus library: What do you like, what is missing etc. Please fill out this short questionnaire and help us decide where the project should be headed and what needs to be done: http://www.gnugk.org/h323plus-survey-2022.html Thanks for your time! -- Jan Willamowius, H323Plus maintainer EMail : jan(a)willamowius.de Website: http://www.gnugk.org Support: http://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper Survey 2021
by Jan Willamowius 30 Nov '21

30 Nov '21

Dear GNU Gatekeeper community, I have compiled a poll with 10 quick questions. Please feel free to add any other suggestions you may have. Don't be too kind, we really want to know what to improve. https://www.gnugk.org/survey-2021.html In the past, these surveys have always been a great source of inspiration to the project. Please keep the feedback coming. If you want me to respond to questions or suggestions, please remember to add an email address. Thanks for your time! Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 5.9 released
by Jan Willamowius 26 Oct '21

26 Oct '21

Dear community, GNU Gatekeeper version 5.9 has been released. Download: https://www.gnugk.org/h323download.html New features: - new switches [Proxy] CachePortDetection=1 and CachePortDetectionDuration= to cache port detection packets for faster media connects when IgnoreSignaledIPs= is active - new switch: [EP::] ForceTerminalType= - new place holder for port notifications: %t for port type - experimental: better error recovery if multiplexed RTP sending fails Bug fixes: - fix bug in port detection with AllowSignaledIPsFrom= - when DNS name resolves to IP without alias, remove alias from ACF completely (Cisco interop) - remove RTP session 0 from internal tables once H.245 master has assigned a session ID - fix compilation of Avaya support - initialized cmsg struct to zero before using - fix regression introduced with MatchH239SessionsByIDOnly= switch Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 5.8 released
by Jan Willamowius 22 Jul '21

22 Jul '21

Dear community, GNU Gatekeeper version 5.8 has been released. Download: https://www.gnugk.org/h323download.html To stay updated, please also follow us on Twitter and subscribe our blog! https://twitter.com/h323 https://blog.gnugk.org This new release includes New features: - experimental support for Avaya's non-standard version of H.323 (./configure --enable-avaya) thanks Konstantin Prokazov! - consider RFC 6598 shared network space (100.64.0.0/10) and Zeroconf (169.254.0.0/16) as private IPs - new switch [Proxy] AllowSignaledIPsFrom= to skip auto-detect for messages received directly from certain IPs when IgnoreSignaledIPs=1 - new switch [Proxy] AllowAnyRTPSourcePortForH239From= to handle incorrect RTCP addresses in H.239 OLC (EdgeProtect interop) - new switch [RoutedMode] MatchH239SessionsByIDOnly= to never attempt to match a H.239 reverse channel by type for improved interoperability with EdgeProtect - new switches to set the HTTP Content-Type header in HttpAcct, HttpPasswordAuth and Routing::Http - new switch [Routing::Http] JSONResponse=1 to send more flexible routing data in the HTML reponses - many new status port shortcuts (see manual section for details) Bug fixes: - fix H.460.18/.19 on multi-homed servers - fix race condition when handling H.460.19 multiplex IDs - fix media loop on half port-detected channel when media is very early - fix Net-SNMP query for total bandwidth - save RTCP address from OLC for port-detection - always check AllowSignaledIPs= before applying IgnoreSignaledAllH239IPs or IgnoreSignaledPrivateH239IPs - handle extensions and CSRC in RTP header with H.235 half-call media - better endpointIDs on Windows when compiling without OpenSSL Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 5.7 released
by Jan Willamowius 04 Mar '21

04 Mar '21

Dear community, GNU Gatekeeper version 5.7 has been released. Download: https://www.gnugk.org/h323download.html This version has some important bug fixes, improves interoperability with other vendors and also has a few new features. Bug fixes: - several severe crashes and a few memory leaks have been fixed Improved interoperability with: - Lifesize endpoints - Poly's Microsoft Teams gateway - Polycom RealPresence Capture Server New features: - You get a warning in the GUI / on the status port if one of your endpoints has an incorrect time setting and this password authentication fails. This makes trouble shooting a lot easier. - Invalid TPKT packets (eg. due to network errors) now don't necessarily take down an otherwise healthy call. Use the new AbortOnInvalidTPKT=0 switch to enable. - You have a new %{Vendor} variable for SqlAuth RegQuerys and LuaAuth Full change log: - BUGFIX(ProxyChannel.cxx) fix crash on non-standard H.245 Indication from Polycom RealPresence Capture Server - BUGFIX(ProxyChannel.cxx) fix possible crashes on non-standard generic information in OLCs - print warning message on status port when passwords get rejected due to wrong time - BUGFIX(httpacct.cxx) fix memory leak - BUGFIX(ProxyChannel.cxx) fix possible crash - BUGFIX(gk.cxx) avoid crash when terminating in the middle of program startup, set non-zero exit code so restarter notices error - return unused memory back to OS periodically - new switch: [RoutedMode] AbortOnInvalidTPKT=0 for more graceful handling of network errors - BUGFIX(gk.cxx) fix for running on Alpine Linux (needs updated PTLib, too) - don't start GnuGk if RTP multiplexing is configured, but we can't start the listener - new switch: [RoutedMode] MatchH239SessionsByType=0 to fix presentations with LifeSize endpoints over Poly's Microsoft Teams gateway - BUGFIX(ProxyChannel.cxx) make sure we don't set RTP address on multiplexed RTCP keepalive - BUGFIX(RasSrv.cxx) look at all tokens for H.235.TSSM - add %{Vendor} variable for SqlAuth RegQuery and LuaAuth Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

H323Plus 1.27.2 released
by Jan Willamowius 02 Feb '21

02 Feb '21

Dear community, I'm happy to announce the release of H323Plus version 1.27.2. - support for Alpine Linux for smaller container images (together with PTLib 2.10.19.4) - crash fixed on invalid RTCP packets - memory leaks fixed - GetCrytoMasterKey() restored that got lost in 1.27.1 - better support for cross-compiling - various updates for newer compilers - some smaller bugfixes Download from https://www.h323plus.org/source/ Regards, Jan -- Jan Willamowius, H323Plus maintainer EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/h323plus-support.html Relaxed Communications GmbH Frahmredder 91, 22393 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

New PTLib release 2.10.9.4
by Jan Willamowius 02 Feb '21

02 Feb '21

Dear community, I just published the new maintenance release 2.10.9.4 for PTLib: https://github.com/willamowius/ptlib/releases Changes: - support for Alpine Linux for smaller container images - better support for cross-compiling - various smaller bug fixes Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91, 22393 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

Compiling GnuGk / H323Plus / PTLib on Alpine Linux
by Jan Willamowius 20 Nov '20

20 Nov '20

Hi, while GnuGk, H323Plus and PTLib work on virtually all Linux distributions, there is one notable exception: Alpine Linux. This is because Alpine uses musl libc instead of GNU libc, which lacks many features and our PTLib won't compile with it. Solution: Stick with any other Linux distribution (Debian, CentOS, Fedora etc.) or your choice of *BSD, Solaris or Windows. Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91, 22393 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 1

GNU Gatekeeper 5.6 released
by Jan Willamowius 29 Oct '20

29 Oct '20

Hi, today GNU Gatekeeper version 5.6 has been released. Download: https://www.gnugk.org/h323download.html It contains an important bug fix to H.460.19 multiplexing and H.460.26 (media over TCP) when using GnuGk's internal call forwarding (ForwadOnFacility). I have also added an interop tweak to be able to call video services that don't understand H.323 URL aliases (eg. videobutler.nl). You can enable it with [Routing::SRV] ConvertURLs=1 Full changelog: - new switch: [Routing::SRV] ConvertURLs=1 to convert URL_IDs into H323_IDs - BUGFIX(ProxyChannel.cxx) fix RTP multiplexing and H.460.26 when ForwardOnFacility is used - BUGFIX(ProxyChannel.cxx) remove H.460.19 feature from Setup when using ForwardOnFacility=1 - new switch: [Gatekeeper::Main] GrantAllBRQ=1 to accept any BRQ, even if the conferenceID is invalid Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper Survey 2020
by Jan Willamowius 08 Oct '20

08 Oct '20

Dear GnuGk community, the GNU Gatekeeper is alive and kicking and a new release is just around the corner. It is important that the GNU Gatekeepers stays relevant to your needs, so please give us some feedback what might be missing or what needs to be fixed. I have compiled a poll with 9 quick questions. Please feel free to add any other suggestions you may have. Don't be too kind, we really want to know what to improve. ;-) https://www.gnugk.org/survey-2020.html In the past, these surveys have always been a great inspiration. Please keep the feedback coming. If you want me to respond to questions or suggestions, please remember to add an email address. Thanks for your time! Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 5.5 released
by Jan Willamowius 30 Jun '20

30 Jun '20

Hi, I am happy to announce the release of GNU Gatekeeper 5.5. This release has new features and bug fixes when you run clustered gatekeepers. It also improves the port detection feature and we have a complete and up to date Chinese documentation. You can download it from https://www.gnugk.org/h323download.html New features: - new feature GnuGkAssignedGatekeeper to push endpoints back to their intended home gatekeepers in the cluster, even if the endpoints don't support assigned gatekeepers - support new PBKDF2 password hashes for ssh logins to the status port - new switches to fine tune port detection for H.239 channels IgnoreSignaledPublicH239IPsFrom=x and IgnoreSignaledAllH239IPs=1 - new Chinese manual Bug fixes: - select correct source IP for neighbor pings - set altGKisPermanent=true when redirecting endpoints - fix RRJ to include alternates when RedirectGK=Endpoints limit is reached - fix reading of AllowSignaledIPs= switch - don't complain about [Neighbor::xxx] SendAliases switch when using --strict Enjoy! -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper manual avilable in Chinese
by Jan Willamowius 17 May '20

17 May '20

Hi, the latest GnuGk manual has been translated into Chinese and is now available at https://www.gnugk.org/gnugk-manual-zh_CN.html Many thanks to Zhang Tao for his great work! We are still having trouble generating a PDF version, so stay with the HTML manual for now. Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91, 22393 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 1

GNU Gatekeeper 5.4 released
by Jan Willamowius 07 Jan '20

07 Jan '20

Hi, I am happy to announce the release of GNU Gatekeeper 5.4. You can download it from https://www.gnugk.org/h323download.html New features: - new accounting module to send accounting data to an MQTT server - support for redis as database (eg. as backend for password storage) Bug fixes: - important fix for H.245 tunneling translation with H.460.18 endpoints - fix for snmpwalk in PTLib-SNMP implementation - fix sending alternate gatekeeper list to endpoints with assigned gatekeeper - improved DRQ from child gatekeepers - fix TLS with neighbor gatekeeper Please also note that a bug has been found in PTLib that can cause a crash in any GnuGk version if you use the status port (manually of from an application). Please upgrade to PTLib 2.10.9.3! Enjoy! -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

H323Plus 1.27.1 release
by Jan Willamowius 06 Jan '20

06 Jan '20

Happy New Year! I just published H323Plus version 1.27.1 with the bug fixes that accumulated over the past 18 months. - multiple H.239 fixes - support for encrypting H.239 - fix starting H.245 channel in some cases - option to cheat H.245 negotiation to become slave (for better interop) - fix enabling H.460.9 multiple fixes sending IRRs - various fixes for different compilers - some smaller bugfixes Download from https://www.h323plus.org/source/ Regards, Jan -- Jan Willamowius, H323Plus maintainer EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/h323plus-support.html Relaxed Communications GmbH Frahmredder 91, 22393 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

New PTLib release 2.10.9.3
by Jan Willamowius 16 Dec '19

16 Dec '19

Hi, I just published a new maintenance release for PTLib: https://github.com/willamowius/ptlib/releases Version 2.10.9.3 fixes a few bugs, including a race condition when closing PChannels, that can lead to a crash and another deadlock fix. It adds support for SNMP SET in PSNMPServer (all class signatures remain unchanged) and various compile fixes for recent compilers. Happy holidays! Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91, 22393 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

H323Plus bugs
by Jan Willamowius 08 Nov '19

08 Nov '19

Hi, i fixed 2 possible crashes on Github. A few weeks ago there were also fixes for H.460.22 messages. There is a pending bug that H323Plus is not handling assigned gatekeepers correctly. It always connects to the assigned gatekeeper even if its down instead of staying on the current gatekeeper until the assigned gatekeeper becomes available again. This will need a bigger fix. Regards, Jan -- Jan Willamowius, H323Plus maintainer EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/h323plus-support.html Relaxed Communications GmbH Frahmredder 91, 22393 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 5.3 released
by Jan Willamowius 26 Jul '19

26 Jul '19

Hi, I have just released GNU Gatekeeper version 5.3. You can download it from https://www.gnugk.org/h323download.html This release has a number of new features as well as some important bug fixes. Whats new ? - LRQ loop detection to optimize calls flows between multiple neighbor gatekeepers This new feature has the potential to significantly reduce the load on all gatekeepers and prevent "LRQ storms". - new routing policy to set call destinations by querying HTTP or REST servers, see [Routing::Http] - much improved support for SNMP - important bug fix for TLS encryption of signaling channels - important bug fixes for H.460.18 (for H.245 tunneling and for multi-homed servers) - performance optimization: this version can handle 5-10% more proxied calls on the same hardware - performance optimization: re-authenticate lightweight, additive registrations only when new aliases differ This significantly reduces the load on password databases. Enjoy! Full change log: - BUGFIX(ProxyChannel.cxx) don't send H.245 address to tunneling H.460.18 endpoint, breaks call when H.245 multiplexing - performance optimization: 5% faster UDP handling - changed default: [SNMP] Implementation=PTlib - remove unfinished Windows-SNMP implementation, use PTLib-SNMP on Windows - support SET and GET-NEXT in PTLib-SNMP - support SNMP sysUpTime when running as standalone agent - BUGFIX(configure.in) LARGE_FDSET defaults to off - new SNMP OID 1.3.6.1.4.1.27938.11.1.9 to query total bandwidth allocated to ongoing calls - BUGFIX(ProxyChannel.cxx) fix hangup when making many TLS calls quickly one after another - BUGFIX(RasSrv.cxx) don't require H.460.22 parameters in ARQs - BUGFIX(ProxyChannel.cxx) fix TLS without LARGE_FDSET - BUGFIX(ProxyChannel.cxx) don't send H.460.22 priority field in SCI - BUGFIX(gkauth.cxx) free memory from cached and expired passwords - re-authenticate lightweight, additive registrations only when new aliases differ - remove switch [Proxy]DisableRTPQueueing, always disabled now - new routing policy: http with config section [Routing::Http] - BUGFIX(ProxyChannel.cxx) fix H.460.18 on multi-homed servers (SCI comes from the correct IP now) - new switch to disable SNMP traps [SNMP] EnableTraps=0 - BUGFIX(ProxyChannel.cxx) don't throw SNMP trap on H.245 connection errors (causes crash under load with Net-SNMP) - BUGFIX(snmp.cxx) shutdown GnuGk when SNMP agent can't be started - BUGFIX(snmp.cxx) protect NetSNMP library calls with mutex - changed default: ForwardResponse now defaults to 1 in [RasSrv::LRQFeatures] and [Neighbor::...] - new feature: loop detection for LRQs [RasSrv::LRQFeatures] LoopDetection=1 - BUGFIX(Neighbor.cxx) some settings in [RasSrv::LRQFeatures] were ignored if not set in [Neighbor::...] -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeer 5.2 released
by Jan Willamowius 18 Mar '19

18 Mar '19

Hi, I have just released GNU Gatekeeper version 5.2. You can download it from https://www.gnugk.org/h323download.html This release that has a rewritten networking implementation (aka "large-fdset") that allows GnuGk to scale to higher numbers of calls per server than previous versions. This new implementation replaces the old hack to extend the select() system call by using poll() which enables GnuGk to handle huge numbers of sockets at the same time. The new implementation also works on Windows, but has been tested mostly on the different Unix versions we support. Please note that the relevant configure option when comping GnuGk source code has changed to --enable-large-fdset. There is no need to specify a maximum number of sockets any more. This release also has a few bug fixes, eg. for using LUA scripts with shared libraries and for memory leaks in the error handling of H.235 password authentication. Whats new ? - re-implement LARGE_FDSET using poll(), enable with configure option --enable-large-fdset - ExternalIP is automatically added to the default domains - support running LUA scripts that require dynamic libraries - change default for [TLS] CipherList= to allow elliptical curve ciphers - BUGFIX(gkauth.h) fix memory leak in H.235 password auth - BUGFIX(gkacct.cxx) set known, but unavailable accounting parameters to empty string - BUGFIX(ProxyChannel.cxx) fix setting UDP source IP on Windows when compiled for Vista or higher Enjoy! -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

How to enable H323_VIDEO on h323plus
by prateek gupta 01 Mar '19

01 Mar '19

Hi Team, I am new to h323plus and currently I am struggling to enable Video on the H323plus module. . I installed h323plus,code download and install from https://www.h323plus.org/source/. Steps to Follow : ./configure CXXFLAGS=-D_SIGNAL_ONLY & then I got the issue : Here x264 static linking library and h.264 support disabled. ( Although I have already installed x264 module ) checking for X264... yes checking filename of libx264 library... configure: x264 static linking disabled . . . configure: h264 support disabled due to disabled dependency HAVE_H264_DECODER checking enable H.264 support... no . . . =================== Plugin configuration ====================== prefix : /usr/local exec_prefix : ${prefix} libdir : ${exec_prefix}/lib Audio Codec plugin install dir : ${libdir}/opal-1.27.0/codecs/audio Video Codec plugin install prefix: ${libdir}/opal-1.27.0/codecs/video LID plugin install prefix : ${libdir}/opal-1.27.0/lid FAX plugin install prefix : ${libdir}/opal-1.27.0/fax GSM : yes (internal) gsm-amr : yes iLBC : yes (internal) Speex : yes (internal, version 1.1.11.1) LPC10 : yes G.726 : yes IMA_ADPCM : yes SBC : no H.261 : yes H.263 : no (ffmpeg version) H.263/H.263+ : no H.264 : no THEORA : no MPEG4 Part 2 : no CELT : no SpanDSP FAX : no CAPI : no Quicknet xJACK support : no Voicetronics VPB support : yes OS Type : linux-gnu Machine Type : x86_64 If all settings are OK, type make and make install Kindly, let me know how can I check my H323_VIDEO is enabled or not. Thank you so much. Regards, Prateek

2 1

New release of Callgen323
by Jan Willamowius 06 Feb '19

06 Feb '19

Hi, I'm happy to announce a new release of the H.323 call generator appication Callgen323. It now supports load testing with video, H.239 and H.460 NAT traversal incl. RTP multiplexing. It also supports RTP fuzzing to test codecs. You can use it to test your H323Plus endpoints as well as any commercial H.323 device. Download it at https://github.com/willamowius/callgen323 Enjoy! -- Jan Willamowius, H323Plus maintainer EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/h323plus-support.html Relaxed Communications GmbH Frahmredder 91, 22393 Hamburg, Germany Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeer 5.1 is out
by Jan Willamowius 07 Jan '19

07 Jan '19

Hi, I have released GNU Gatekeeper version 5.1. You can download it from https://www.gnugk.org/h323download.html The main new feature in this release is H.245 multiplexing. Together with the long supported RTP multiplexing it allows GnuGk to handle a large amount of calls from H.460 endpoints using just 5 ports total. Whats new ? - support for H.245 multiplexing with H.460.18: [RoutedMode] EnableH245Multiplexing=1, H245MultiplexPort=1722 - improved interop with Lifesize Icon (H.235), Scopia VC240 (H.460.18) and Yealink Mobile (H.460.19) - improved detection of neighbor gatekeeper availability - public IP detection for Google Cloud - new feature to let GnuGk send an event if port detection fails There were also a number of bug fixes, please see changes.txt or the blog post: https://blog.gnugk.org/2019/01/gnu-gatekeeper-5-1.html Enjoy! -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeer 5.0 released
by Jan Willamowius 18 Aug '18

18 Aug '18

Hi, I'm happy to announce the release of GNU Gatekeeper version 5.0. This version has new features and a few bug fixes. You can download it from https://www.gnugk.org/h323download.html Whats new ? - support for Azure and Alibaba Cloud in addition to AWS - performance optimizations, especially for multiplexed RTP and LUA - compatible with OpenSSL 1.1.x - switch to translate Facility transfers into gatekeeper TCS0 reroutes There were also a number of bug fixes, please see changes.txt for details. Enjoy! -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

How to add the hareware codec
by lewei zhuang 18 Aug '18

18 Aug '18

Thanks you for your hep that I can compiling the H.264 plugin now. But I want to do a embedded device that I need the chip codec.But I don't know how to change the codec by the chip.Because I don't know what should I do? Thanks you for your help.

2 1

Help
by lewei zhuang 29 Jul '18

29 Jul '18

Dear H323plus Team: I think I need some help that when I use the simph323,it can't use the H.264 in my ubuntu 16.04,and the sound device is NO Audio . I wanted to found the solutions by Google ,but I can only found I need to install libavcodec and alsa .so I do it. And the sound output device can be found ,but the sound input device still NO Aduio. In my ubuntu 16.04 ,I had install all about alsa ,and I install libavcodec-dev and ffmpeg ,but it doesn't work. The error message is as follows Sound output device: "alsa_output.pci-0000_02_02.0.analog-stereo" Sound input device: "Null Audio" checking for LIBAVCODEC... yes configure: libavcodec stack align hack disabled checking for h263p_encoder in -lavcodec... no checking for h263p_encoder in -lavcodec... (cached) no checking for mpeg4_encoder in -lavcodec... no checking for h264_decoder in -lavcodec... no

2 2

H.239 bug fixes and improved test tools
by Jan Willamowius 25 Jul '18

25 Jul '18

Hi, if you are using H.239, you should update to the latest code from Github. A number of bugs have been fixed in the H.239 code recently. If you still see issues, please let me know. https://github.com/willamowius/h323plus As part of the H.239 testing, I also added H.239 support to the call generator (--h239enable) as well as RTP fuzzing (--fuzzing). Its amazing how many commercial H.323 endpoints crash when you apply some RTP or RTCP fuzzing. ;-) https://github.com/willamowius/callgen323 Regards, Jan -- Jan Willamowius, H323Plus maintainer EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/h323plus-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

H323Plus 1.27.0 released
by Jan Willamowius 11 Jun '18

11 Jun '18

Hi, I have just published the 1.27.0 release which fixes a number of bugs and is finally compatible with OpenSSL 1.1.x. Please download it from https://www.h323plus.org/source/ I have also updated the API documentation at https://www.h323plus.org/api/ Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/h323plus-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper Survey 2018
by Jan Willamowius 31 May '18

31 May '18

Dear GnuGk community, its important that the GNU Gatekeepers stays relevant to your needs, so please give us some feedback what might be missing or what needs to be fixed. I have compiled a poll with 9 quick questions. Please feel free to add any other suggestions you may have. Don't be too kind, we really want to know what to improve. ;-) https://www.gnugk.org/survey-2018.html In the past, these surveys have always been a great inspiration. Please keep the feedback coming. If you want me to respond to questions or suggestions, please remember to add an email address. Thanks for your time! Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

OpenSSL 1.1
by Jan Willamowius 27 Apr '18

27 Apr '18

Dear community, currently H323Plus depends on OpenSSL 1.0 to enable the full functionality. Adapting password checksums to the OpenSSL 1.1 API was easy and is already in the repository, but moving the media encryption code to 1.1 is very hard. Many Linux distributions are moving to OpenSSL 1.1 and its starting to get complicated to build GnuGk with media encryption since other shared libraries depend on OpenSSL 1.1 now. I'm looking for sponsors to help fund the development work to fully move H323Plus and all the applications that depend on it (GnuGk etc.) to OpenSSL 1.1. If you or your company can help. Please send me an email. Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeer 4.9 released
by Jan Willamowius 05 Apr '18

05 Apr '18

Hi, I have just released GNU Gatekeeper version 4.9. This version has new features and a few bug fixes. You can download it from https://www.gnugk.org/h323download.html Whats new ? We have 2 new accounting modules: HtttpAcct and AMQPAcct that allow you to send accounting events via HTTP GET or POST to a web service or push them into a RabbitMQ queue. There are also many new accounting placeholders that you can use with any of the accounting modules and there is a new accounting event 'reject' to track calls rejected with ARJ that went unnoticed before. The new RTP inactivity checking allows you to drop calls if there wasn't any RTP activity for a defined amount of time. GeoIP authentication has been significantly updated to support all RAS and all Q.931 messages and to support the new Maxmind database format (GeoIP2). There were also a few bug fixes: - BUGFIX(ProxyChannel.cxx) fix crash while handling RTP packets - BUGFIX(RasTbl.cxx) fix disconnecting unregistered endpoints - BUGFIX(RasSrv.cxx) fix crash in some Avaya endpoints when receiving GCF with a gatekeeperIdentifier - BUGFIX(RasSrv.cxx) fix crash when using IPv6 - BUGFIX(ProxyChannel.cxx) fix handling of CloseLogicalChannel Enjoy! -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 4.8 released
by Jan Willamowius 17 Jan '18

17 Jan '18

Hi, I have just released GNU Gatekeeper version 4.8. This version has many new features. You can download the new version from https://www.gnugk.org/h323download.html Overview: New maintenance mode: When you need to take down your GnuGk server (eg. for an OS update), you can switch GnuGk to maintenance mode where it will only allow ongoing calls to finish and automatically redirects all idle endpoints to an alternate GnuGk server. The status port command is "MaintenanceMode <alternate IP>". Detailed information about ongoing calls: You can now display lots of information about each ongoing call (codecs, bandwidth used, IPs etc.). The web interface has been extended to to show this information. See https://www.gnugk.org/images/web7.jpg Easier installation on AWS and inside docker containers. You can now let GnuGk automatically detect the public IP of your AWS server, even from within a docker container. You can also automatically insert your public/external IP into your trace file names to store logs from many servers in the same directory. Extended API: Call routing with external applications has been expanded. You can now set the display names for participants and desired reject codes on the status port. You can also access the vendor information of all registered endpoints. The web interface has been extended to provide this information, too. HttpPasswordAuth has been greatly extended to fetch password information from backend servers. We now use curl to support https and you can add many new placeholders in your queries. Extended screening and rewriting of display names and calling party names. Important bug fixes: Multiplexed RTP is now much more robust and password authentication to parent gatekeepers has been fixed. There are also interop fixes for TCP keep-alives. Please see the full change log below for more details. Changes from 4.7 to 4.8 ======================= - HttpPasswordAuth: support https and add new placeholders - PrintAllRegistrationsVerbose now also shows the endpoint vendor - new status port command: MaintenanceMode - new status port command: PrintCallInfo - allow placeholder %{gkip} and %{external-ip} in [LogFile] Filename= - fetch AWS public/elastic IP if ExternalIP=AWSPublicIP - new commandline switch: -e / --externalip - extend status port command RouteReject to set reject reason - extend status port commands RouteToAlias, RouteToGateway etc. to set display IE for calling and called - new switch: [LogFile] DeleteOnRotation=1 to delete the old logfile when rotating instead of renaming it - new switches: [RoutedMode] AppendToCallingPartyNumberIE= / PrependToCallingPartyNumberIE= to add any string before or after the calling party number IE when ScreenCallingPartyNumberIE=RegisteredAlias - when [RoutedMode] ScreenCallingPartyNumberIE= is set to RegisteredAlias, GnuGk sets calling party number IE to the registered alias (forced screening) - delete DisplayIE when [RoutedMode] ScreenDisplayIE=Delete - new switch [Endpoint] Authenicators= - new default: [RoutedMode] GnuGkTcpKeepAliveMethodH225=EmptyFacility - new default: [RoutedMode] H460KeepAliveMethodH225=EmptyFacility for Cisco interop - new setting "None" for keep-alive methods - BUGFIX(ProxyChannel.cxx) fix bugs in H.460.19 RTP multiplexing - BUGFIX(ProxyChannel.cxx) don't send H.460 keep-alive to non-H.460 party when calling H.460 party - BUGFIX(Routing.cxx) show called port in RouteRequests (as documented) - BUGFIX(GkClient.*) fix password authentication with parent - BUGFIX(Routing.cxx) remove semicolon and pipe chars from vendor string in RouteRequests - better handling of IPv6 GRQ without RAS address - BUGFIX(ProxyChannel.cxx) turn off encryption proxy if DH key is negotiated, but TCS doesn't contain any H.235 entries - BUGFIX(ProxyChannel.cxx) fix running in proxy mode on FreeBSD when one Home IP is set - BUGFIX(ProxyChannel.cxx) fix DisableSettingUDPSourceIP=1 for Windows, NetBSD, OpenBSD and Solaris - BUGFIX(yasocket.cxx) fix LARGE_FDSET for NetBSD, OpenBSD and Solaris -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

H323Plus 1.26.9 released
by Jan Willamowius 16 Jan '18

16 Jan '18

Hi, I have just published the 1.26.9 release with many bug fixes compared to 1.26.8. Please download it from https://www.h323plus.org/source/ or directly from Github: https://github.com/willamowius/h323plus Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/ Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

Size constraints for H225_ArrayOf_EnumeratedParameter
by Denis Kochmashev 29 Oct '17

29 Oct '17

Hello! I have encountered something which looks like a bug. When I add parameters to my custom H460_Feature via H460_FeatureTable table; : table.AddParameter(id, content); : SetCurrentTable(table); H323Plus produces malformed packet with incorrectly encoded size of H225_ArrayOf_EnumeratedParameter. I've found that size constraints for H225_ArrayOf_EnumeratedParameter are not beeing set, however, according to spec, they had to be set. So, if my conclusion is right, I propose a small patch like the following: --- h225_2.cxx.orig 2013-07-23 00:26:59.000000000 +0600 +++ h225_2.cxx 2017-10-23 11:00:27.000000000 +0500 @@ -19,6 +19,7 @@ H225_ArrayOf_EnumeratedParameter::H225_ArrayOf_EnumeratedParameter(unsigned tag, PASN_Object::TagClass tagClass) : PASN_Array(tag, tagClass) { + SetConstraintBounds(PASN_Object::FixedConstraint, 1, 512); } Regards, Denis

3 3

H323Plus source code moving to Github
by Jan Willamowius 13 Oct '17

13 Oct '17

Hi, SourceForge will close down all CVS repositories shortly. The H323Plus source repository is thus moving to Github. Along with it the repositories for GnuGk and our PTLib fork also move to Github. https://github.com/willamowius/h323plus https://github.com/willamowius/gnugk https://github.com/willamowius/ptlib Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de H.323 Support: https://www.willamowius.com/ Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 4.7 has been released (security update)
by Jan Willamowius 21 Sep '17

21 Sep '17

Hi, GNU Gatekeeper version 4.7 has just been released. This version is purely a security update and has no new features. All users are encouraged to update, especially if you use port detection (IgnoreSignaledIPs=1) you should update ASAP. It has been discovered that GnuGk is vulnerable in some configurations for RTP bleed attacks (https://rtpbleed.com/). By updating to version 4.7 only the first packets in each media stream influence the media destination. To further secure your configuration, you can set [Proxy] RestrictRTPSources=Net to only accept RTP from the same class C network that the call signaling came from. Please beware that this may break a few valid calls where this condition isn't met. You can download the new version from https://www.gnugk.org/h323download.html Please see the full change log below. Changes from 4.6 to 4.7 ======================= - fixes for RTP Bleed - new switch [Proxy] RestrictRTPSources=IP or Net to limit accepting RTP from the call signal IPs or the respective class C network - new switch [Proxy] LegacyPortDetection=1 to keep port detection help for some very old and broken endpoints that will make your gatekeeper vulnerable to RTP Bleed attacks - BUGFIX(ProxyChannel.cxx) replace @ip or ip## from aliases when using RedirectCallsToGkIP - BUGFIX(ProxyChannel.cxx) better initialization of sendmsg() structs - new command line option: now you can use -S instead of --strict (needed on BSD systems) -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

GNU Gatekeeper 4.6 is out
by Jan Willamowius 04 Sep '17

04 Sep '17

Hi, I'm happy to announce that GNU Gatekeeper version 4.6 has just been released. This version has a few new features as well as bug fixes. New features: - least used routing: distribute calls evenly between gateways or MCUs (new switch [RasSrv::ARQFeatures] LeastUsedRouting=1) - ability to log to the Unix syslog instead of the trace file (new switch [LogFile] TraceToSyslog=1) - new authentication module TwoAliasAuth this is not very safe, but you can use it with endpoints that do not support any password transmission - new switch [CTI::MakeCall] Bandwidth= to set the maximum bandwidth for the calls generated by the GnuGk status port API - status port command: UnregisterEP <ep-id> - a number of switches to fine tune TCP keepalives - new switch to remove load balancers from the call path ([RoutedMode] RedirectCallsToGkIP=1) Bug fixes: - fixed TCP keepalive for H.460 calls - fixes to port detection for unregistered calls - audio fix when GnuGk adds encryption to calls - many smaller fixes You can download the new version from https://www.gnugk.org/h323download.html Please see the full change log below. Changes from 4.5 to 4.6 ======================= - new switch: [RoutedMode] RedirectCallsToGkIP=1 - new switches: [RoutedMode] H460KeepAliveMethodH225=, H460KeepAliveMethodH245=, GnuGkTcpKeepAliveMethodH225=, GnuGkTcpKeepAliveMethodH245= - BUGFIX(ProxyChannel.cxx) TCP keep-alives for H.460.18 calls weren't always enabled correctly - don't open a status port listener if [Gatekeeper::Main] StatusPort=0 - BUGFIX(Toolkit.cxx) remove trailing chars before checking for DefaultDomain - add callID to H.245 trace messages for easier debugging - BUGFIX(ProxyChannel.cxx) forward ReleaseComplete from remaining party while doing call reroute - BUGFIX(ProxyChannel.cxx) drop un-en/decryptable RTP packets at end of call when adding encryption - new status port command: UnregisterEP <ep-id> - BUGFIX(RasSrv.cxx) remove IPv6 addresses before processing RRQs when IPv6 is not enabled - send Facility message as as non-H.460.18 keep-alive for H.225 - send non-standard H.245 userIndication as non-H.460.18 keep-alive for H.245 - new switch [RoutedMode] DisableGnuGkH245TcpKeepAlive=1 - new switch [LogFile] TraceToSyslog=1 to send trace output to syslog (Unix only) - BUGFIX(ProxyChannel.cxx) fix port detection for re-opened channels with IgnoreSignaledIPs=1 - new switch [CTI::MakeCall] Bandwidth= to set the maximum bandwidth for the call - new switch [RasSrv::ARQFeatures] LeastUsedRouting=1 to select the least used gateway - new authentication module TwoAliasAuth -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

H323Plus 1.26.8 release and h323plus.org website
by Jan Willamowius 03 Sep '17

03 Sep '17

Hi, I have just released H323Plus 1.26.8. This version contains a number of bug fixes that were only available through the CVS until now. https://www.h323plus.org/source/ I'm also taking over the maintenance of the h323plus.org website. If you run into any issues, please email me. Regards, Jan -- Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : jan(a)willamowius.de Website: https://www.gnugk.org Support: https://www.willamowius.com/gnugk-support.html Relaxed Communications GmbH Frahmredder 91 22393 Hamburg Geschäftsführer: Jan Willamowius HRB 125261 (Amtsgericht Hamburg) USt-IdNr: DE286003584

1 0

H235 on extended video channel (H239)
by Diego Carvalho Domingos 18 Aug '17

18 Aug '17

Hi, all I'm successfully using both h239 and h235 (for audio and video channels) in my application. Now I also would like to encrypt the content video (extended video channel). It seems that the security capability is not being added to the H.239(H.264{sw} <1>) capability. Is there some way to enable it? Thanks in advance. Diego

1 1

problem about H.235
by gary 13 Aug '17

13 Aug '17

HI Simon and Jan after enabed the H235 media encryption, openmcu and H323 ep in the same network were work well . however , when they were in different networks， 1 . only audio PDU（200bytes）received at MCU , MCU can not receive video pdu（above 1000 bytes）.i am sure the ep had upload the audio and video packages . 2. the threads used for trasmit and receive data had been create , but no data send to H323 ep . some messages hint that PTLIB write Blocking ，but i don‘t know why , use fcntl() to set read/write NONBLOCKING , But not effective . please help thanks gary

2 1

Possible misassumption in HandleFirstSignallingChannelPDU
by Jose Uceda 30 May '17

30 May '17

In our software that we mentioned a few days ago, in addition to the lockups, we observed a problem when we apparently received an incoming call, but CreateConnection is called with a valid PDU that is not a Setup Message one. It happens when the incoming call comes from a Cisco gateway, and the call hangs up at a point where the gateway has sent the Admission Request to the gatekeeper, receives its corresponding admission confirm, but has not sent yet the setup message to our software / destination endpoint. In these circumstances we saw that the gateway has opened the signaling socket with our endpoint, but the first packet it sends is a Release Complete because the call was hung before sending the setup. PDU trace from our Gatekeeper: 2017-05-27 14:46:28.853 5d37 INFO pdu.call.a.ARQ.recv : Received from ip$x.x.x.x:54432. 2017-05-27 14:46:28.855 5d37 INFO pdu.call.a.ACF.send : Sending to ip$x.x.x.x:54432. 2017-05-27 14:46:28.865 5d37 INFO pdu.call.d.DRQ.recv : Received from ip$x.x.x.x:54432. 2017-05-27 14:46:28.866 5d37 INFO pdu.call.d.DCF.send : Sending to ip$x.x.x.x:54432. See the time-stamps, showing that the ACF and DRQ are closely followed. We receive the call at our endpoint, in the CreateConnection function at the same time point as the DRQ / DCF. In our software, in some cases we return NULL if we cannot handle the incoming connection (not enough setup data, e.g.), and if we are running an executable compiled in Debug mode, an assert fails on the following operator: H225_H323_UU_PDU_h323_message_body :: operator const H225_Setup_UUIE & () const #endif { #ifndef PASN_LEANANDMEAN PAssert (PIsDescendant (PAssertNULL (choice), H225_Setup_UUIE), PInvalidCast); #endif Return * (H225_Setup_UUIE *) choice; } It is caused by the following line (transports.cxx: 1126): H225_Setup_UUIE & setup = pdu.m_h323_uu_pdu.m_h323_message_body; This code assumes that the initial PDU is a Setup one without checking it, when it may not necessarily be. That can cause a DoS in a software that has core dump enabled when an assert occurs, or if there is some code in HandleFirstSignallingChannelPDU / OnIncomingConnection and sub-calls that trust and handles the PDU object assuming it is a Setup message. I've made the following patch on the HandleFirstSignallingChannelPDU function, which verifies that the PDU is a Setup message, otherwise it returns FALSE (same behavior as if it had not been able to read a valid q931 pdu), since we think it does not make much sense to call OnIncomingConnection if the initial PDU is not a Setup one: -------------------------------------------------------------------------------- --- src/transports.cxx.orig 2015-11-24 18:51:06.385755223 +0100 +++ src/transports.cxx 2017-05-29 11:15:20.777411444 +0200 @@ -1106,7 +1106,13 @@ return FALSE; } - unsigned callReference = pdu.GetQ931().GetCallReference(); + const Q931 &firstQ931PDU = pdu.GetQ931(); + if (firstQ931PDU.GetMessageType() != Q931::SetupMsg) { + PTRACE(1, "H225\tFirst pdu is not a setup one, connection not started."); + return FALSE; + } + + unsigned callReference = firstQ931PDU.GetCallReference(); PTRACE(3, "H225\tIncoming call, first PDU: callReference=" << callReference); // Get a new (or old) connection from the endpoint -------------------------------------------------------------------------------- A place where we could also put the patch is in the HandleSignallingSocket function, which apparently is only used from HandleFirstSignallingChannelPDU, but as it has a more generic name and may give rise to doubts of its behavior. Regards, Jose Uceda

2 1

Lockup problems
by Jose Uceda 09 May '17

09 May '17

Hi all, In one of our softwares which uses the H323+ library, we are recently suffering from lockups when the calls are disconnecting. It's currently running with H323+ from CVS and PTLib 2.12.8. As far as we have been able to trace, it seems to be that the RTP UDP socket or signalling channel sometimes remains in a loop and they don't close as expected (log says Broken Pipe errors, eg). That issue causes the call is not finished correctly, and it seems to leave the cleaner thread in a stuck state so subsequent calls are no longer hanged up (at least we don't receive OnCleared event anymore). When we were trying to debug the problem, we saw that the issue became worse with PTLib 2.12.9, and we also suffered from many more locks with the 1,175 h323.cxx file revision, which was reverted about a month later. The comment from the commit that reverts 1,175 revision reads as follows: "Always calling Wait (0) on mutex can cause issues with lock nesting, move fix to PTLib fork" Is there any fork of PTLib in some repository that we haven't noticed about it, that is the official one to use with H323+? Thanks in advance. Regards, Jose Uceda

2 1

Re: [h323plus] Renegotiate media port
by Diego Carvalho Domingos 19 Apr '17

19 Apr '17

Thanks once again Jan, Actually my gateway does not proxy media. After reading your answer, I searched and found that CloseLogicalChannel has a parameter fromRemote. Is that what you are talking about? This would send a request channel close, right? Regards, Diego Carvalho Domingos System Development Specialist +55.19 3112-1200-1286 DaitanGroup | www.daitangroup.com | Accelerating.T Privileged and confidential. If this message has been received in error, please notify sender and delete it immediately. Conteúdo confidencial. Se esta mensagem foi recebida por engano, favor avisar o remetente e apagá-la imediatamente. -----Original Message----- From: Jan Willamowius [mailto:jan@willamowius.de] Sent: quarta-feira, 19 de abril de 2017 12:53 To: Diego Carvalho Domingos <ddomingos(a)daitangroup.com> Subject: Re: [h323plus] Renegotiate media port The ports you receive media on affect both your sending and receiving media channels (the channel where you send media is in the same RTP session as the receiving channel and thus the RTCP ports should match). So you would have to close sending and receiving channels and hope that the other side re-opens their sending channel. Sending a TCS0 and doing a full re-negotiation seems like a good choice. But as I said on the board, since your gateway proxies media, I'd try to keep the port the same during the call and eg. copy the data from the SIP side from one port to the other etc. Thats probably a lot of work, too, but better than closing and re-opening channels. Regards, Jan Diego Carvalho Domingos wrote: > Thanks for answering Jan, > > I tried that but then I realized that the port that the H323 device should send media to goes in the OLCA, so closing and reopening my local OLC does not help. I'm missing something here? > After realizing that reopening the OLC would not help, I restarted the > whole negotiation by sending an empty TCS and, after receiving the TCS > Ack, a non-empty TCS. This in fact worked but I thought it's too > complex. Would reverse logical channel parameters help here? If so, > can you point me how to set that? I use (a subclass of) > H323_ExternalRTPChannel. Thanks again. Regards, > > Diego Carvalho Domingos > > -----Original Message----- > From: h323plus [mailto:h323plus-bounces@lists.packetizer.com] On > Behalf Of Jan Willamowius > Sent: quarta-feira, 19 de abril de 2017 12:10 > To: h323plus(a)lists.packetizer.com > Subject: Re: [h323plus] Renegotiate media port > > Hi Tarmo, > > if you look closely, Diego is doing video. > To my knowledge there is no free H.323-SIP gateway that supports video. > > Regarding the port negotiation: > The only way to change the ports is to close the logical channel and > to open a new one. (as we discussed on the Packetizer board) > > Regards, > Jan > > -- > Jan Willamowius, Founder of the GNU Gatekeeper Project EMail : > jan(a)willamowius.de > Website: https://www.gnugk.org > Support: https://www.willamowius.com/gnugk-support.html > > Relaxed Communications GmbH > Frahmredder 91 > 22393 Hamburg > Geschäftsführer: Jan Willamowius > HRB 125261 (Amtsgericht Hamburg) > USt-IdNr: DE286003584 > > kalazeez wrote: > > There is no need to reinvent the wheel. Use something existing and most fitting Your needs. For similar cases iI usually use Freeswitch. Just works, out of the box. > > > > Tarmo > > > > > On 17 Apr 2017, at 22:52, Diego Carvalho Domingos <ddomingos(a)daitangroup.com> wrote: > > > > > > Hi all, > > > At some point after the call has been successfully set up, I need to renegotiate the audio (it could be video as well) media port. In my case, I developed a H323-SIP gateway (that does not handle media, only signaling conversion) and the SIP side sent a reinvite with a different audio port, so I need to make the H323 device send media to this new port. How can I accomplish this? (both in terms of the H323 protocol itself and implementing the solution using H323Plus). I appreciate any help, thanks. > > > > > > Diego Carvalho Domingos

1 0