Support A2Billing :

provided by Star2Billing S.L.

Support A2Billing :
It is currently Thu Apr 25, 2024 10:49 am
VoIP Billing solution


All times are UTC




Post new topic Reply to topic  [ 4 posts ] 
Author Message
 Post subject: Securtity Flaw - Major
PostPosted: Sun Dec 16, 2007 7:57 pm 
Offline

Joined: Mon Oct 01, 2007 10:44 pm
Posts: 230
Location: Bovey, Devon, UK
Normally I wouldn't advertise this sort of thing until there was a bug fix, but in this case it's a quick config change fortunately.

Description:

If a call is directed to a SIP device (phone etc) that has number forwarding set, the forwarded call is not accounted for in A2Billing, though it does appear in the log files. The entries in A2Billing show zero call duration. As far as I can tell, a second instance of the agi is called, which the primary instance has no knowledge of. This occurs when the phone issues a 302 redirect. I get the same results when using DID inbound.

It makes sense that redirects be done within A2billing via DID, so the solution is to disable redirects in the dial command

The following flag (i) is decribed below

Quote:
i: Asterisk will ignore any forwarding requests it may receive on this dial attempt. (new in 1.4) Useful if you are ringing a group of people and one person has set their phone to forwarded direct to voicemail on their cell or something which normally prevents any of the other phones from ringing.


As far as I can tell this has been in asterisk since 1.09, but you might want to verify it's in 1.2

Change:

The change is simple, edit the following in a2billing.conf

dialcommand_param_sipiax_friend = "|60|HL(3600000:61000:30000)"

and replace with

dialcommand_param_sipiax_friend = "|60|iHL(3600000:61000:30000)"

note the i just before HL(

regards


Last edited by middletn on Thu Dec 27, 2007 11:57 pm, edited 1 time in total.

Top
 Profile  
 
 Post subject:
PostPosted: Thu Dec 20, 2007 7:38 pm 
Offline
Moderator
User avatar

Joined: Thu Jun 22, 2006 2:19 pm
Posts: 2890
Location: Devon, UK
Good catch!

I can't see any downside to using 'i' in the dialcommand_param, and I'll certainly be using it on all my installs.


Top
 Profile  
 
 Post subject:
PostPosted: Thu Dec 27, 2007 11:55 pm 
Offline

Joined: Mon Oct 01, 2007 10:44 pm
Posts: 230
Location: Bovey, Devon, UK
Would be a good idea if this was the default setting in the sample .conf file. I simply cannot see why it should be otherwise as it completely bypasses A2B. Anyone who doesn't use the flag is going to be losing money big time :cry:

regards


Top
 Profile  
 
 Post subject:
PostPosted: Fri Dec 28, 2007 1:46 am 
Offline
Moderator
User avatar

Joined: Thu Jun 22, 2006 2:19 pm
Posts: 2890
Location: Devon, UK
Thank you for sharing your discovery and your fix.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 
Predictive Dialer


All times are UTC


Who is online

Users browsing this forum: Majestic-12 [Bot] and 29 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group