Book Image

Building Telephony Systems with OpenSIPS Second Edition - Second Edition

By : Flavio E. Goncalves, Bogdan-Andrei Iancu
Book Image

Building Telephony Systems with OpenSIPS Second Edition - Second Edition

By: Flavio E. Goncalves, Bogdan-Andrei Iancu

Overview of this book

OpenSIPS is a multifunctional, multipurpose signalling SIP server. SIP (Session Initiation Protocol) is nowadays the most important VoIP protocol and OpenSIPS is the open source leader in VoIP platforms based on SIP. OpenSIPS is used to set up SIP Proxy servers. The purpose of these servers is to receive, examine, and classify SIP requests. The whole telecommunication industry is changing to an IP environment, and telephony as we know it today will completely change in less than ten years. SIP is the protocol leading this disruptive revolution and it is one of the main protocols on next generation networks. While a VoIP provider is not the only kind of SIP infrastructure created using OpenSIPS, it is certainly one of the most difficult to implement. This book will give you a competitive edge by helping you to create a SIP infrastructure capable of handling tens of thousands of subscribers. Starting with an introduction to SIP and OpenSIPS, you will begin by installing and configuring OpenSIPS. You will be introduced to OpenSIPS Scripting language and OpenSIPS Routing concepts, followed by comprehensive coverage of Subscriber Management. Next, you will learn to install, configure, and customize the OpenSIPS control panel and explore dialplans and routing. You will discover how to manage the dialog module, accounting, NATTraversal, and other new SIP services. The final chapters of the book are dedicated to troubleshooting tools, SIP security, and advanced scenarios including TCP/TLS support, load balancing, asynchronous processing, and more. A fictional VoIP provider is used to explain OpenSIPS and by the end of the book, you will have a simple but complete system to run a VoIP provider.
Table of Contents (21 chapters)
Building Telephony Systems with OpenSIPS Second Edition
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

Configuring a firewall for OpenSIPS


Before we can even talk about security, it is important to configure a firewall between OpenSIPS and the Internet. I will also cover the rtpproxy daemon frequently used to provide a traversal of UDP over a relay NAT.

The default ports to open in a firewall for OpenSIPS are as follows:

Description

Source

Destination

SIP default UDP port

0.0.0.0/0

TCP 5060

SIP default TCP port

0.0.0.0/0

TCP 5060

SIP default TLS port

0.0.0.0/0

TCP 5061

RTP proxy ports defined in parameters—m and M

0.0.0.0/0

UDP Range m…M

Default 35000-65000

Tip

Close all other ports for the world (0.0.0.0/0). Administration interfaces (port 80) and SSH (port 22) should be open for specific administration addresses only. Never allow indiscriminate access to web interfaces and SSH as they are frequently a vector for hacker attacks.

Blocking multiple unsuccessful authentication attempts

One of the most employed methods for toll fraud is the SIP brute force attack. If you start your...