<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div><br><div><div>On Jan 7, 2009, at 2:28 PM, Klaus Darilion wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div><br><br>Adrian Georgescu schrieb:<br><blockquote type="cite">I beg to differ, but this is just my humble opinion based on my experience with my particular customers.<br></blockquote><blockquote type="cite">The most economic and future-proof way to perform accounting for SIP sessions is the SIP Proxy server alone.<br></blockquote><blockquote type="cite">My personal experience is that gateways come and go in a provider configuration and they are in many cases under the control of a third-party that provides the PSTN termination service. When you do LCR across many different gateways, which are not even yours the only aggregation point for traffic is the SIP proxy that authenticates and authorizes the requests. Over time, the gateways change hands, get upgraded or removed much more often then the proxy itself, which maintains its central role over time. Secondly, once you <br></blockquote><br>That's why I prefer a "virtual" gateway which is hosted myself. The proxy does not send the calls directly to the gateway providers, but to the "virtual" gateway, which does LCR, accounting ....</div></blockquote><blockquote type="cite"><div><br></div></blockquote><blockquote type="cite"><div>These virtual gateway can either be a B2BUA (in the simplest case Asterisk) or a SIP proxy with media relay or any other technique to make sure that the CDRs are correct.</div></blockquote><div><br></div>Right, this is more or less what I had in mind. For the sake of simplicity I would do this without duplicating the proxy but this is just a detail. The key is to have something in the media path, having it you can always take the right decision, account for the right duration and terminate calls whenever is considered appropriate. Now, with the advanced capabilities of the dialog module I am not sure what more functionality related to accounting an external B2BUA can provide that cannot be provided by this tandem with the dialog module and the right server logic.</div><div><br></div><div>With the risk of stating the obvious here is what I mean:</div><div><br></div><div><a href="http://cdrtool.ag-projects.com/attachment/wiki/WikiStart/OpenSIPS-accounting.png">http://cdrtool.ag-projects.com/attachment/wiki/WikiStart/OpenSIPS-accounting.png</a></div><div><br></div><div>Adrian</div><div><br></div><div><br><div></div><blockquote type="cite"></blockquote><blockquote type="cite"><div><span class="Apple-style-span" style="-webkit-text-stroke-width: -1; ">regards</span></div></blockquote><blockquote type="cite"><div>klaus<br><br><br><blockquote type="cite">do more the voice like video and other services that require billing and are not PSTN related, the SIP Proxy is the only network element that has access to the signalling and is able to generate accounting tickets.<br></blockquote><blockquote type="cite">Solving the accounting related problems at the SIP Proxy level is a worthwhile investment while other options are just temporary fixes that work in a particular case for a limited amount of time and that is a waste of money.<br></blockquote><blockquote type="cite">Adrian<br></blockquote><blockquote type="cite">On Jan 7, 2009, at 2:25 AM, Jiri Kuthan wrote:<br></blockquote><blockquote type="cite"><blockquote type="cite">authentication does not provide actually value here. dialog would not<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">either, since<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">the same trick can be achieved for example by low max-forwards. IMO the<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">proper<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">choice is accounting from the gateway, which provides the actual service.<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">A proxy can only provide an approximation which is inherentely to some<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">extent<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">more error-prone than the box doing the actual job.<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">-jiri<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">Bogdan-Andrei Iancu wrote:<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Hi Iņaki,<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Have you consider requesting auth for the BYE ? from SIP point of view<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">is perfectly valid....<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Regards,<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Bogdan<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Iņaki Baz Castillo wrote:<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Hi, I'm thinking in the following flow in which the caller/attacker<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">would get an unlimited call (but a limited CDR duration):<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">--------------------------------------------------------------------------<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">attacker OpenSIPS (Acc) gateway<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">INVITE (CSeq 12) ------><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><-------- 407 Proxy Auth<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">INVITE (CSeq 13) ------><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"> INVITE (CSeq 13) ------><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"> <------------------- 200 Ok<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><------------------- 200 Ok<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"> << Acc START >><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">ACK (CSeq 13) -----------><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"> ACK (CSeq 13) -----------><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><******************* RTP ************************><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"># Fraudulent BYE !!!<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">BYE (CSeq 10) -----------><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"> << Acc STOP >><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"> BYE (CSeq 10) -----------><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"> <-- 500 Req Out of Order<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><-- 500 Req Out of Order<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">--------------------------------------------------------------------------<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">The call hasn't finished, but OpenSIPS has ended the accounting for<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">this call since it received a BYE. And this BYE will generate a<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">correct ACC Stop action (since it matches From_tag, To_tag and<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Call-ID).<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">I think this is *VERY* dangerous and I hope I'm wrong.<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Would help the dialog module here? does the dialog module check the<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">CSeq of the BYE in some way and could it prevent OpenSIPS from<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">generating the ACC STOP action? (I don't think so).<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Any idea?<br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">_______________________________________________<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">Users mailing list<br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><a href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a> <<a href="mailto:Users@lists.opensips.org">mailto:Users@lists.opensips.org</a>><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">_______________________________________________<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">Users mailing list<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><a href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a> <<a href="mailto:Users@lists.opensips.org">mailto:Users@lists.opensips.org</a>><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br></blockquote></blockquote><blockquote type="cite">------------------------------------------------------------------------<br></blockquote><blockquote type="cite">_______________________________________________<br></blockquote><blockquote type="cite">Users mailing list<br></blockquote><blockquote type="cite"><a href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a><br></blockquote><blockquote type="cite"><a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br></blockquote></div></blockquote></div><br></div></div></body></html>