Released on February 8, 2013.
Fixed a bug in Adsl driver that caused the system reboot if C S command was issued when the ADSL resource was running but modem was disconnected.
Released on February 7, 2013.
Added 'cxCtiPoDgCard' (card to which the cti port belongs) and 'cxCtiPoDgDescr' (cti port description) to cxCtiPoDgTable. Updated MIB and html document.
Fixed bug that prevented CPX from starting with DEC/INTEL 21143 ethernet cards.
Fixed a situation that least to a call transfer failure in very specific situations.
The resulting CtoC call did not take place.
Added 'givenName' attribute (even if empty) to all contacts to support LDAP-Sync Android Application that requires such attribute although not mandatory in RFC.
Released on January 24, 2013.
IDE hard discs and Compact flashes are now supported on the secondary IDE too.
Added support of MTU1500 when Poecli has ADSLUSB modem as lowres.
The recent providers networks uses ether gigabit with jumbo frames for their backbone and can support MTU 1500 even on PPPoE.
Abilis now support it when the Poecli is used directly with ADSLUSB modems.
The limit of MTU 1492 is still present when Poecli is used with Ethernet lowres and when the provider network does not support MTU 1500.
Only delayed transcoding is used now, and it is done only by the main CPU. Supported only G.711, Spirit, G.729a.
G.723.1 is no more supported by CtiVm
TC-SESNUM parameter has been removed because no more necessary.
D D UDP now shows which resource owns the session.
The internal interface has been modified to track the resource owner of session.
This information is currently available only via debug command "debug res:tcp lsn:8".
Import: added '+' character acceptance and replacement with international prefix INT-PREFIX: specified in CTISYS.
Import: errors are better described.
Import: added report statistics of records manipulation (e.g. invalid/duplicated records discarding, too long names curtailing).
Import: added creation of aliases for duplicated contact names (e.g. a duplicated contact 'name' will be renamed to 'name (2)')
Import: improved 'CONTACT IMPORT' command by '-F' option (used to force duplicated/invalid records discarding) and by adding detailed report of importing result.
Fixed bug that avoided to set a list name between primes in 'SNET' and 'DNET' parameters of Nat Aliases.
Fixed a bug the prevented use of CtiVm with G.729 or Spirit in absence of DSP for transcoding.
Fixed the disconnection cause when the call have to be rejected by internal or configuration reasons. Cause SERVICE ERROR, FF B7 is used.
PING/TRACERT: fixed bug that caused last parameter option to be ignored if command string was terminated with a number. For example -N, -Z, -W are affected by this problem and default was used instead. Other options like -T, -P, -S, -A was not affected.
MRU has been changed to be fixed to 1500.
Higher values were useless for the current implementation.
Added current MTU/MRU for IP over PPP resources.
Fixed a bug in the re-sync procedure for tunnels with FRAG:AIPT.
The bug caused the traffic blockage when the peer side rebooted and the new sequence number fallen in the DROP-OUT window.
Fixed a bug that could cause system restart upon ike host configuraiton change followed by INIT RES:IKE command.
Improved the VC open procedure.
In some very rare cases it was possible that the VC was not properly opened. A modem reset (RESET RES:ADSL-x) was enough to recover.
Released on January 3, 2013.
Added support of class id 14 (base-I) and 15 (base-N).
The new licences scheme is:
Table: Abilis CPX product classes
Class | Product |
FP | Former Mini-Abilis with FPANEL |
0 | Former Abilis Base-x with MFIDE2/MFIDE3 |
1 | Micro-Abilis (with BRI4-POTS4 board and MFLPC) |
2 | Nano-Abilis (with MiniBRI1 board and MFLPC) |
3 | Abilis Base-J with MFIDE3 |
4 | Mini-Abilis with MFIDE3 |
5 | Compact-Abilis (with ETH3-BRI4-POTS8 and MFPCI) |
6 | Abilis Base-K with MFIDE3 |
7 | PicoAbilis (with VoIP and MFPCMCIA) |
8 | Micro-Abilis-C3 (with BS44V and MFPCIGT) |
14 | Abilis Base-I with MFIDE3 |
15 | Abilis Base-N with MFIDE3 |
Table: Classes with licenced features and additional licences EXTENDED and VMX
Feature | Description | Class FP | Class 0 | Class 1 | Class 2 | Class 3/14 | Class 4 | Class 5 | Class 6/15 | Class 7 | Class 8 | EXTENDED | VMX |
DATACOMP | Data compression service | ||||||||||||
VMX | VMX system | YES | |||||||||||
IPLB | IP Load Balancing service | YES | YES | YES | YES | ||||||||
MULTILINK | Resources over Multi-Links | YES | YES | YES | YES | ||||||||
LCS | Last Calling number service | YES | YES | YES | YES | ||||||||
SOFTPBX | Soft-PBX service (OPC, Address Book, Click&Call, ...) | YES | YES | YES | YES | ||||||||
GPS | GPS resources | YES | YES | ||||||||||
ACNT | Accounting service | YES | YES | YES | YES | ||||||||
TRFA | Traffic Analyzer | YES | YES | YES | YES | YES | |||||||
OSPF | Open Shortest Path First protocol | YES | YES | ||||||||||
FTPSRV | FTP server | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES |
SMTP | SMTP resource | YES | YES | YES | YES | YES | |||||||
POP3 | POP3 resource | YES | YES | YES | YES | YES | |||||||
RADIUS | RADIUS resource | YES | YES | YES | YES | ||||||||
VRRP | VRRP resource | YES | YES | ||||||||||
POEAC | PPP Over Ethernet Access Concentrator | YES | YES | YES | YES | ||||||||
ARCHIVE | Archive resource | YES | YES | YES | YES | ||||||||
CTIDISA | CTI DISA service | YES | YES | YES | YES | YES | |||||||
CTIIAX | CTI IAX service | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES |
CTISIP | CTI SIP service | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES |
CTISMS | CTI SMS service | YES | YES | YES | YES | ||||||||
AIPT | Number of AIPT (Abilis tunnel) resources [0, 1..250] | 4 | 250 | 2 | 2 | 4 | 2 | 4 | 250 | 2 | 2 | 32 | 32 |
IKEHOSTS | Number of IKE hosts [0, 1..128] (IPSEC/IKE resources) | 2 | 128 | 1 | 1 | 2 | 1 | 1 | 128 | 1 | 1 | 4 | 4 |
IPSH | IP traffic shaping service | ||||||||||||
LDAP | LDAP service | ||||||||||||
SIPBLF | Busy Lamp Field for SIP | ||||||||||||
VS | Videosurveillance | ||||||||||||
ABILISPHONE | AbilisPhones users in SIP |
Changed range of T302 parameter from [15..120 sec.] to [1..120 sec.].
Added diagnostics of failed timeslot read and write operations in H.100 tester.
Extended DTMF filtration from 60 to 100 msec.
This improves a lot the DTMF detection.
Added DIALT: parameter display/setting to CTIP belonging to POTS cards.
Fixed a bug that caused a improper translation when the IP resource used by NAT was set to DHCP and the address was not retrieved yet.
Fixed bug when generating acknowledge to Link State Advertisement: content of the answer didn't contain right values and sender didn't consider that acknowledge valid.
Fixed received RST flag in CLOSE-WAIT state: now also in CLOSE-WAIT state RST flag is handled even if out-of-sequence after FIN flag. When this situation occurs state goes immediately in CLOSE state without waiting closure attempt time-out.
The bug caused TCP session in CLOSING state for the whole closure timeout (about 90 secs) instead of immediately close.
Fixed C S command for Abilis ADSL2+ modem.
Some statistics were not correctly cleared.
Fixed port field handling in pcap/vn/isdn options dialogs: the value entered manually was ignored.
Released on December 14, 2012.
Added support of MFLPT watchdog device that will equip new Abilis models.
Added native support for Spirit and G.729a codecs.
Gsmbox and Umtsbox are no more limited to G.711 codec, they can now natively handle Spirit and G.729a.
However, Spirit and G.729a are handled by the main CPU and therefore be aware of much higher CPU consumption.
On low speed Abilis, like the Microabilis, it could even be impossible run it.
For Umtsbox and Gsmbox the G.711 is the preferable one, so always use it for local connections.
Added special features for Abilisphone support related to DTMF and "virtual office" handling via data network.
Added special features fro Abilisphone support related to DTMF and "virtual office" handling via data network.
Optimized the handling of connection to mixer subject to call transfer.
In the situation where a user connects the mixer, parks, makes another call, and then transfer, if the used codecs were different (e.g. G.711 to mixer and Spirit for the other call) the CTIR enabled a transcoding by means of TWO AC channels.
With the optimization the AC channels transcoding is avoided, the codec used for the connection to the mixer is changed runtime.
The advantages of this optimization are important:
No AC channels used (save resource)
No additional delays which occurs when transcoding with TWO AC is involved. We are speaking of a minimal of 80 msec saved, but normally much more.
Added WHITE-LIST parameter.
By this parameter it is possible to specify IP addresses which bypasses the IPBAN procedures, i.e. they are never banned.
[20:10:09] ABILIS_CPX:d ipban ? ... IP Addresses banning parameter(s): ... WHITE-LIST: The service will not ban a host which matches an address in the list. "#" or the name of a IP/IR/RU/MR list. IP Addresses banning service(s) parameter(s): ... WHITE-LIST: The service will not ban a host which matches an address in the list. "DFT" or "#" or the name of a IP/IR/RU/MR list. [20:10:11] ABILIS_CPX:
Improved statistics and diagnostics.
[20:38:10] ABILIS_CPX:d d ipban ----------------------+----------------------------------------- Name |Value ----------------------+----------------------------------------- Total used memory |58000 Item size |58 ----------------------+----------------------------------------- MAX-ITEMS |1000 CUR-FREE |1000 CUR-USED |0 PEAK-USED |0 OVERFLOWS |0 ----------------------+----------------------------------------- ----------------------+----------------------------------------- RES: |BANNED-IP-ENTRIES ----------------------+----------------------------------------- Telnet |0 Ssh |0 CtiSip |0 CtiIax |0 Smtp |0 Pop3 |0 Http |0 Ftp |0 ----------------------+----------------------------------------- TOTAL |0 ----------------------+----------------------------------------- [20:38:26] ABILIS_CPX:d se ipban --- Cleared 0 days 00:59:53 ago, on 14/12/2012 at 19:38:39 -------------------- -----------+-----------+-----------+-----------+-----------+ RES: |AUTH-FAIL: |QUERIES: |MAIL-SUCC: |MAIL-FAIL: | -----------+-----------+-----------+-----------+-----------+ Telnet | 0| 3| 0| 0| Ssh | 0| 0| 0| 0| CtiSip | 0| 186| 0| 0| CtiIax | 0| 0| 0| 0| Smtp | 0| 6| 0| 0| Pop3 | 0| 0| 0| 0| Http | 0| 0| 0| 0| Ftp | 0| 0| 0| 0| Unknown | 0| 0| 0| 0| Unknown | 0| 0| 0| 0| Unknown | 0| 0| 0| 0| Unknown | 0| 0| 0| 0| Unknown | 0| 0| 0| 0| Unknown | 0| 0| 0| 0| -----------+-----------+-----------+-----------+-----------+ TOTAL | 0| 195| 0| 0| -----------+-----------+-----------+-----------+-----------+ [20:38:32] ABILIS_CPX:
Updated GRUB to version 2.00.
Supports native EHCI which makes faster VMX installer load.
Fully compatible with previous VMX installations.
BM is now compatible with Fujitsu Esprimo E5720 (BIOS rel 1.18) motherboards.
For these motherboards the compact flash must be created with Abilis 7.5.1 or later.
Added the logging in system log of critical operating system errors.
Added a specific log message for the indication of system restart caused by maximal threads number (8192) exceed.
Fixed and improved TEST DSP command.
The test consists in sending a well known data pattern from packet interface to PCM, loopback on the PCM, receive the data from PCM to packet interface and compare the received data with the transmitted one.
The test requires an initial synchronization phase and then the comparison is done for the whole duration of the test.
If the synchronization is not reached within 100 msec, or during the test a single byte differ, the test fails.
Modified MAIL-RCPT and MAIL-RCPT-LIST parameters handling: now both are used simultaneously, while previously MAIL-RCPT was used only in case of empty MAIL-RCPT-LIST.
Modified MAIL-RCPT and MAIL-RCPT-LIST parameters handling: now both are used simultaneously, while previously MAIL-RCPT was used only in case of empty MAIL-RCPT-LIST.
Fixed extended search for INR list.
The INR list did not work correctly when it was used in CDI fields in presence of prefix routings.
The problem was that the list returned a full match even if a partial match was present too.
Now the list returns a full match only when there are not partial matches, and thus the correct record is always selected.
Fixed missing refreshing of CDI index at CtiDisa Service addition that causes index misalignment and wrong pre-identification results upon runtime configuration changes.
The pre-identification problem disappeared after a reboot because the indexes are rebuilt at boot.
Changed SMTP-QUEUE-LIFE-TIME parameter default from 86400 to 432000 (5 days).
Fixed a bug that caused frozen calls in DISC state after long use of the services (about 1000 calls handled in CTIAS).
Fixed a bug that caused frozen calls in DISC state after long use of the services (about 1000 calls handled in CTIAS).
Fixed a bug that caused 100% CPU consumption when the played message reached the end of the file.
Fixed a bug in echo canceller setting of calls from ISDN and POTS to Mixer.
The echo canceller was wrongly disabled, now it is enabled.
Extended max-client limit from 50 to 250.
Fixed bug with REM ENABLED: parameter: in case that a remote was configured with ENABLED:YES, it was considered enabled even if OPC ACT: was set to NO.
With this fix when ACT is set to NO, REMOTE opened session are closed..
Added the removal of *.??1 temporary files at the driver startup to remove the recordings 'lost' because of the system restart.
Fixed compilation of Calling Number in the second call whet the "virtual office" feature is used.
If call to/from a remote phone matches the HOLD-LIST it is possible for the remote phone to use * to park the current call and make a second call, and eventually transfer. This is called "virtual office".
In this situation the second call was wrongly made with empty CG, now it is done with CG corresponding to the number of the remote phone, normalized to international format following the rule:
if CD=i<num>, CG=CD.
if CD=n<num>, CG=i<COUNTRY-CODE><NAT-PREFIX><num>
if CD=u<INT-PREFIX><num>, CG=i<num>
if CD=u<num>, CG=i<COUNTRY-CODE><num>
call remote phone at i393331234567, the CG of the second call will be i393331234567
call remote phone at n2123456 when NAT-PREFIX=0 and COUNTRY-CODE=39, the CG of the second call will be i3902123456
call remote phone at u00441234567 when INT-PREFIX=00, the CG of the second call will be i441234567
call remote phone at u3331234567, the CG of the second call will be i393331234567
Fixed a bug with NAT-LOOPBACK:YES that caused an exception and system restart when INAT/ONAT parameters are set with multiple option. For example ONAT:IN,OUT.
Fixed range and default for LAN of ONETTYPE OSPF parameter.
Now it is possible to configure BN (broadcast network) for LANs, and it is also the default.
Many bug fixes and improvements to OSPF, but there are still problems to be fixed with Designated Routers.
Fixed session blocking while manager handles mixed sessions.
It still happened a rare blockage of sessions for sending mails to remote SMTP servers.
Fixed history change detection for Opera after repeated back / forward clicks.
Added history change polling for webkit and opera browsers - to detect browser back button click to be able to save map changes automatically.
Added click handling to hyperlinks so user will be prompted to save map changes.
Fixed (removed) .vn file generation from PCAP tab for ppp-sync/async.
Released on November 20, 2012.
This release has a lot of new features, here is the summary of the most important ones:
Specific Sip support for AbilisPhone application that runs on Android and iPhone smartphones.
Audio conference rooms.
Analog and digital I/O with web based control interface.
GPIO extended with analog inputs.
Videosurveillance (beta version) with web based control interface.
NAT loopback feature to access "virtual servers" from "inside".
AIPT tunnels without packet reordering (faster) and with automatic TCP-MSS-CLAMP.
IPBAN service to protect Telnet, Ssh, Sip, Iax, Smtp, Pop3, HTTP, Ftp from brute force attacks.
Various CP commands extensions with the goal to improve system maintenance experience.
Added support for AbilisPhone, a special SIP client for Android smartphones and for iPhone that strictly interoperate to take the maximal advantage from the Abilis platform.
An exhaustive tutorial will be available at .
On the Abilis side the AbilisPhone is a SIP client configured with SIP-TYPE:ABILISPHONE.
AbilisPhone is licenced by number of SIP users having SIP-TYPE:ABILISPHONE.
The AbilisPhone application is available for Android and iPhone.
Figure: AbilisPhone for Android
Figure: AbilisPhone for iPhone
A new series of Microabilis-C3 will be equipped with an additional ELTI port for the connection of one POTSBOX.
The additional ELTI port will be supported in a future release but in order to use this new hardware it is necessary to configure BS436 device in place of BS44 device.
Added Cti Mixer module which enables conferences with any number of participants.
The calls from participants have to be routed to CtiMix by means of Cti Routing, once connected the caller will hear pre-recorded messages with italian/english instructions.
The conferences are identified by a "conference id" which is 4 digits long by default (configurable between 1 and 8), the first participant that enters the conference id creates the conference room, the subsequent ones will join the conference. The conference id is entered by means of DTMF.
A new resource named CtiMix have to be added and configured, see below:
[18:46:39] ABILIS_CPX:d p ctimix RES:CtiMix -------------------------------------------------------------------- ------------------------------------------------------------------------ DESCR:CTI_Voice_Mixer_service LOG:NO ACT:YES sesnum:3 hw-tc:0 CONN-DELAY:0 REQUEST-DELAY:1 ID-LENGTH:4 WAIT-ID:10 REQUEST-MSG:default REJECT-MSG:default CREATE-MSG:default JOIN-MSG:default ENTER-MSG:default LEAVE-MSG:default MAX-DURATION:60 EXPIRY-MSG:default wdir:C:\APP\MIX\ [18:46:42] ABILIS_CPX:d p ctimix ? CtiMix resource parameter(s): DESCR: Resource description. From 0 up to 79 Alphanumeric extended characters. Case is preserved. Spaces are allowed. Strings holding spaces must be written between quotation marks (E.g.: "str1 str2") LOG: State changes log and alarm generation [NO, D, S, A, L, T, ALL] [+E] (D: Debug Log; S: System Log; A: Alarm view; L: Local audible alarm; T: SNMP traps; +E: Extended Log of state changes, see ref. manual) ACT: Operation activation [NO, YES] sesnum: Number of sessions [1..255] hw-tc: Number of hardware transcoding sessions [0..255] CONN-DELAY: Time to keep connection in Alerting prior to go Connect [0..60 sec] REQUEST-DELAY: It is the length of pre-REQUEST phase [0..10 sec] ID-LENGTH: Length of the conference room identifier [0..8] WAIT-ID: Waiting interval for user's input [5..30 sec] REQUEST-MSG: File holding the Identifier Request message. - "#" : Do not play any message. - From 1 up to 20 characters. Names holding spaces must be written between quotation marks (E.g.: "Dft out message"). REJECT-MSG: File holding the Identifier Reject message. - "#" : Do not play any message. - From 1 up to 20 characters. Names holding spaces must be written between quotation marks (E.g.: "Dft out message"). CREATE-MSG: File holding the Identifier Create message. - "#" : Do not play any message. - From 1 up to 20 characters. Names holding spaces must be written between quotation marks (E.g.: "Dft out message"). JOIN-MSG: File holding the Identifier Join message. - "#" : Do not play any message. - From 1 up to 20 characters. Names holding spaces must be written between quotation marks (E.g.: "Dft out message"). ENTER-MSG: File holding the message played into the conference when someone enters the conference. - "#" : Do not play any message. - From 1 up to 20 characters. Names holding spaces must be written between quotation marks (E.g.: "Dft out message"). LEAVE-MSG: File holding the message played into the conference when someone leaves the conference. - "#" : Do not play any message. - From 1 up to 20 characters. Names holding spaces must be written between quotation marks (E.g.: "Dft out message"). MAX-DURATION: Maximal conference duration [15..300 min] EXPIRY-MSG: File holding the message played when the maximal conference duration has been expired. - "#" : Do not play any message. - From 1 up to 20 characters. Names holding spaces must be written between quotation marks (E.g.: "Dft out message"). wdir: Directory where message files are located. It cannot be empty. Physical full path in DOS notation, i.e. starting with a drive letter in the range ['A'..'Z'] and ending with the '\' character. Max. 128 characters. Case is preserved. Spaces are allowed. Strings holding spaces must be written between quotation marks (E.g.: "C:\My dir\"). [18:48:20] ABILIS_CPX:
At least one Cti routing must be present to permit the connection to CtiMix, for example:
[18:48:20] ABILIS_CPX:d ctir Last change: 12/11/2012 18:10:17 CET ---+-----+-----------------+---------+--------------------+-------------------- PR |[DESCR] |TYPE |POI/SR [SR] |POO/DS |CDI |CDO ACT|NEXT |LAST |EEC |T301|CGI |CGO EDT|SP |SC |DJ |MJ |FMDJ|FMMJ|SDI |SDO |SPOUT|SCOUT|DJOUT|MJOUT|LCS |LCST|SGI |SGO | |BCO |RGI |RGO |FMRLY|FAXSP|MODSP|FMLVL|ECM |UDT |IG |OG |SG |DL |DH |CODERS |CODERSOUT |TI1 .. TI5 ------------------------------------------------------------------------------- 0 *toA * * CtiMix 771 * ------------------------------------------------------------------------------- [18:48:20] ABILIS_CPX:
In the example above any caller dialling 771 will join the mixer negotiating a coder with speed below 6400 bps, except for local VtoA calls where the coders G.711 is selected regardless of speed/coders configuration in routing.
A call to Mixer from Pots or ISDN uses one DSP channel with G.711 coder; a call from Cell or Cito does not use DSP at all and G.711 is used as it is the native Cell/Citobox coder.
When calls coming from Cluster, Sip, Iax, Disa negotiates Spirit or G.729A or G.723.1 a transcoding to G.711 is required. For Spirit and G.729A it is done by software, therefore DSP are not used but he CPU load rises sensibly. For G.723.1 the hardware transcoding is required, providing that hw-tc: has been set to a value greater than 0.
All messages can be customized by uploading WAV files (G.711 a/u, Linear 16 bit, mono or stereo) in the appropriate directories and configuring the corresponding parameters with the filename of the messages that has to be played. Files can be upload and activated via HTTP interface.
As protection measures a conference can be immediately destroyed by entering DTMF codes ##99 and the maximal duration of a conference is configured by means of a parameter (default 60 minutes).
Example of an ongoing conference with three participants:
[20:07:00] ABILIS_CPX:d ctic ID Type Input Output PR State Cgi (Calling In) Cdo (Called Out) ---- ---- -------- -------- --- ------ ------------------- -------------------- 1 VtoA 101 Mix 2 ACTIVE 5101 111 2 VtoA 102 Mix 2 ACTIVE 5102 111 3 VtoA 103 Mix 2 ACTIVE 5103 111 [20:07:34] ABILIS_CPX:d d ctimix RES:CtiMix -------------------------------------------------------------------- CTI_Voice_Mixer_service STATE:ACTIVE CUR-ROOMS:1 CUR-CALLS:3 ------------------------------------------------------------------------ SES: CG CD MixTime LegTime MIX-State Q931-State Q932-State ROOM-ID ------------------------------------------------------------------------ 0 5101 111 58 58 MIXING 10-CONNECTED IDLE 1234 ------------------------------------------------------------------------ 1 5102 111 58 49 MIXING 10-CONNECTED IDLE 1234 ------------------------------------------------------------------------ 2 5103 111 58 24 MIXING 10-CONNECTED IDLE 1234 ------------------------------------------------------------------------ 3 0 0 IDLE 00-DISCONNECTED IDLE ------------------------------------------------------------------------ 4 0 0 IDLE 00-DISCONNECTED IDLE ------------------------------------------------------------------------ [20:07:39] ABILIS_CPX:d de ctimix RES:CtiMix -------------------------------------------------------------------- CTI_Voice_Mixer_service STATE:ACTIVE CUR-ROOMS:1 CUR-CALLS:3 ------------------------------------------------------------------------ SES: CG CD MixTime LegTime MIX-State Q931-State Q932-State ROOM-ID Coder Speed SC DftJ MaxJ CurJ TopJ AvgJ ------------------------------------------------------------------------ 0 5101 111 190 190 MIXING 10-CONNECTED IDLE 1234 G.711A 64000 NO 40 150 120 140 130 ------------------------------------------------------------------------ ... [20:07:40] ABILIS_CPX:
Added IPBAN service.
This service can be enabled for Telnet, Ssh, Sip, Iax, Smtp, Pop3, HTTP, Ftp, to prevent brute force attacks by blocking an IP address which persists in authentication failures.
It also permit to send an email to configured recipient when the limit is reached.
If an IP fails to authenticate MAX-NRTY: times, within FIND-TIME: minutes the error condition is reached, then if ACTION:MAIL an email is sent to MAIL-RCPT: and MAIL-RCPT-LIST: , and if ACTION:BLOCK the IP is banned for BAN-TIME: minutes.
[18:12:04] ABILIS_CPX:d ipban - IP Addresses banning settings: ---------------------------------------------- max-entries:1000 MAIL-FROM:SYS MAIL-RCPT:# MAIL-RCPT-LIST:# MAIL-FILTER-INTERVAL:10 MAIL-BODY:STANDARD - IP Addresses Banning services defaults: ------------------------------------- ACTION:NONE MAX-NRTY:10 FIND-TIME:10 BAN-TIME:10 - IP Addresses Banning services settings: ------------------------------------- ---------+------------+-----------+------------+------------------------------- RES: | ACTION: | MAX-NRTY: | FIND-TIME: | BAN-TIME: ---------+------------+-----------+------------+------------------------------- Telnet | DFT | DFT | DFT | DFT ---------+------------+-----------+------------+------------------------------- Ssh | DFT | DFT | DFT | DFT ---------+------------+-----------+------------+------------------------------- CtiSip | DFT | DFT | DFT | DFT ---------+------------+-----------+------------+------------------------------- CtiIax | DFT | DFT | DFT | DFT ---------+------------+-----------+------------+------------------------------- Smtp | DFT | DFT | DFT | DFT ---------+------------+-----------+------------+------------------------------- Pop3 | DFT | DFT | DFT | DFT ---------+------------+-----------+------------+------------------------------- Http | DFT | DFT | DFT | DFT ---------+------------+-----------+------------+------------------------------- Ftp | DFT | DFT | DFT | DFT ---------+------------+-----------+------------+------------------------------- [18:12:06] ABILIS_CPX:d ipban ? D IPBAN [RES:val] Display IP Addresses banning defaults and service(s) configuration D IPBAN BANNED [RES:val] Display currently bannded IP addresses RES: Resource type [A, Telnet, Ssh, CtiSip, CtiIax, Smtp, <Optional> Pop3, Http, Ftp] IP Addresses banning parameter(s): max-entries: Ban list capacity [100..5000] MAIL-FROM: Sender of e-mail. From 0 up to 128 ASCII printable characters. Spaces are not allowed. Case is preserved MAIL-RCPT: E-mail recipient(s). "#" or up to 128 ASCII printable characters. Spaces are not allowed. Case is preserved. MAIL-RCPT-LIST: E-mail recipients list. "#" or the name of a TXT list. MAIL-FILTER-INTERVAL: Filtering interval for e-mail [NO, 1..65534 min.] MAIL-BODY: E-mail body type [STANDARD, SMS-LIKE] ACTION: Action to be executed [NONE, BLOCK, MAIL] Values can be joined using "," operator. MAX-NRTY: Number of authentication failure attempts before the IP address is put in banned list [1..255] FIND-TIME: Time interval within which the maximum number of attempts is valid [1..120 min.] BAN-TIME: How long an IP address is kept in the banned list [NOMAX, 1..10080 min.] IP Addresses banning service(s) parameter(s): ACTION: Action to be executed [DFT, NONE, BLOCK, MAIL] Values can be joined using "," operator. MAX-NRTY: Number of authentication failure attempts before the IP address is put in banned list [DFT, 1..255] FIND-TIME: Time interval within which the maximum number of attempts is valid [DFT, 1..120 min.] BAN-TIME: How long an IP address is kept in the banned list [DFT, NOMAX, 1..10080 min.] [18:12:11] ABILIS_CPX:
Added a new web application that permits the handling of analog and digital I/O made available with the following hardware:
CITOBOX
MFIO embedded in Microabilis-C3
ePorter
The application permits:
use of .jpg, .png, .gif, .bmp images as background.
a visual creation of maps (up to 10) and the placement on the map of indicators and actuators.
drive toggle or pulse output just by clicking on the icon
"by user" access rights to the maps, and different rights for design and for control.
The urls used by IO are:
/sys/io : main page
/sys/io/control/map<X> : control maps , where <X> is the map number between 1 and 10
/sys/io/design/map<X> : design maps , where <X> is the map number between 1 and 10
real-time indication of states and values of the monitored I/O
configurable labels
javascript required (recent version of Firefox, Chrome, Safari, Opera, IE 7/8/9)
Figure: I/O Maps index
Figure: I/O Map1 control
A beta version of videosurveillance driver has been included in this release.
Videosurveillance stores on additional hard disk the videos obtained from one or more IP cameras. The video are then viewable and manageable using a standard browser.
It also manages alarms that in addition to record the videos can send email, sms, as well as a phone call using DISA service.
A rough and minimal configuration example is below:
[20:47:12] ABILIS_CPX:d p vs RES:Vs ------------------------------------------------------------------------ Run DESCR:Video_Surveillance LOG:DS ACT:YES mxps:2048 TOS:0-N DT:300 storage:10000 (Mib) CAM-RATE:60 ALARM-RATE:20 ALARM-TIME:180 ALARM-LIFE:360 NOTIFY-ON-ERROR:MAIL NOTIFY-FILTER-INTERVAL:3 MAIL-FROM:SYS MAIL-RCPT: SMS-CDO:# DISA-USER:# DISA-PIN:# DISA-SERVICE:# DISA-CDO:# DISA-CGO:# wdir:d:\vs\ [20:47:14] ABILIS_CPX:d vs camera ------------------------------------------------------------------------------- ID: |[DESCR:] ENABLED:|NAME: |USER: |PWD: |HOST: |PORT: |MEDIA-FORMAT: |WIDTH: |HEIGHT: |JPEG-Q: |MEDIA-URL: |ADD-URL-PARAMS: |REC-TIME: ------------------------------------------------------------------------------- 0 [camera dell'ufficio] YES ufficio adminadmin *** 192.168.000.118 80 MJPEG 640 480 50 /nphMotionJpeg?Resolution=640x480&Quality=Standard NO 24 ------------------------------------------------------------------------------- [20:47:24] ABILIS_CPX:d vs alarm ------------------------------------------------------------------------------- ID: |[DESCR:] |ENABLED: |CAMERA-ID: |MONITOR: |RES: |IO: |ACTION: |TURN-ON-RES: |TURN-ON-IO: |TI1: |TI2: |TI3: |TI4: |TI5: ------------------------------------------------------------------------------- 0 YES 0 ON Gpio-1 D-IN-5 MAIL,TURN-ON-D-OUT Gpio-1 D-OUT-2 ALL,00:00-23:59 # # # # ------------------------------------------------------------------------------- [20:47:27] ABILIS_CPX: [09:52:17] ABILIS_CPX:d p vs ? Vs resource parameter(s): DESCR: Resource description. From 0 up to 79 Alphanumeric extended characters. Case is preserved. Spaces are allowed. Strings holding spaces must be written between quotation marks (E.g.: "str1 str2") LOG: State changes log and alarm generation [NO, D, S, A, L, T, ALL] [+E] (D: Debug Log; S: System Log; A: Alarm view; L: Local audible alarm; T: SNMP traps; +E: Extended Log of state changes, see ref. manual) ACT: Operation activation [NO, YES] mxps: Maximum size of TCP message [2048..4096] TOS: Type Of Service octet or Differentiated Services Field (DS): -' p-t', i.e. PRECEDENCE and TOS values, where 'p' can be [0..7] and 't' can be [N=None, D=Min. Delay, T=Max. Throughput, R=Max. Reliability, C=Min. Monetary Cost] - 'bbbbbb', i.e. DS value bit by bit, where 'b' can be [0, 1] DT: Inactivity time-out [30..3600 sec.] storage: Size of the storage for the whole video-surveillance driver [1..10000000 Mib] CAM-RATE: Rate at which the camera downloads the images from the camera during normal working (frames per hour) [1..3600] ALARM-RATE: Rate at which the camera downloads the images from the camera during an alarm (in frames per second) [1..30] ALARM-TIME: The amount of time to keep high frequency recording after an alarm event [1..3600 sec.] ALARM-LIFE: The amount of time an alarm is kept is memory before beeing deleted [NOMAX, 1..10000 hour] NOTIFY-ON-ERROR: Action to be executed in case of error [MAIL, SMS, DISA-CB] Values can be joined using "," operator. NOTIFY-FILTER-INTERVAL: Filtering interval for alarms notifications [NO, 1..60 min] MAIL-FROM: Sender of alarms e-mail. From 0 up to 128 ASCII printable characters. Spaces are not allowed. Case is preserved. MAIL-RCPT: External or internal alarms e-mail recipient(s). From 0 up to 128 ASCII printable characters. Spaces are not allowed. Case is preserved. SMS-CDO: Outgoing called number for SMS. "#" or up to 20 digits optionally preceded by TON [u, i, n, o, s, h, c] and/or NP [x, e, d, t, l, p] attributes or the name of an IN list between primes (e.g. 'mylist') DISA-USER: Name of an existing CtiDisa user for DISA CallBack. "#" or up to 16 Alphanumeric extended characters. Case is preserved. DISA-PIN: User Personal Identification Number for DISA CallBack. "#" or up to 12 digits ['0'..'9']. DISA-SERVICE: Name of an existing CtiDisa service for DISA CallBack. "#" or up to 16 Alphanumeric extended characters. Case is preserved. DISA-CDO: Outgoing called number for DISA CallBack. "#" or up to 20 digits optionally preceded by TON [u, i, n, o, s, h, c] and/or NP [x, e, d, t, l, p] attributes. See HELP ISDN ATTRIBUTES for details on attributes. DISA-CGO: Outgoing calling number for DISA CallBack. "#" or up to 20 digits optionally preceded by TON [u, i, n, o, s, h, c] and/or NP [x, e, d, t, l, p] and/or PI [a, r, m, q] and/or SI [y, v, w, z] attributes. See HELP ISDN ATTRIBUTES for details on attributes. wdir: Working directory where the VS files are stored. Physical full path in DOS notation, i.e. starting with a drive letter in the range ['A'..'Z'] and ending with the '\' character. From 0 up to 128 characters. Case is preserved. Spaces are allowed. Strings holding spaces must be written between quotation marks (E.g.: "C:\My dir\"). [09:52:31] ABILIS_CPX:d vs camera ? ID: Identifier of Video-surveillance camera [0..4] <Optional> Video-surveillance camera parameter(s): ENABLED: Enable/disable this entry usage [NO, YES] DESCR: Entry description. From 0 up to 70 Alphanumeric extended characters. Case is preserved. Spaces are allowed. Strings holding spaces must be written between quotation marks (E.g. "str1 str2"). It is displayed only when not empty. NAME: The name of the camera. From 0 up to 16 Alphanumeric extended characters. Case is preserved. Spaces are allowed. Strings holding spaces must be written between quotation marks (E.g. "str1 str2"). HOST: The IP or FQDN of the IP camera."#" or [1-126.x.x.x, 127.0.0.1, 128-223.x.x.x] or FQDN host name of max. 64 characters in the range ['0'..'9', 'a'..'z', '-', '.' ]. FQDN name case is not preserved. PORT: The port of the HTTP service of the camera [1..65535] MEDIA-FORMAT: The format of the media (image/video) [MJPEG, JPEG] MEDIA-URL: Full path of the JPEG image or the MJPEG video. From 0 up to 70 characters. Case is preserved. Spaces are allowed. Strings holding spaces must be written between quotation marks (E.g. "/jpg/my image.jpg" or "/mjpg/my video.mjpg") WIDTH: The width of the media source [0..65535] HEIGHT: The heght of the media source [0..65535] JPEG-Q: The JPEG quality [1..100] ADD-URL-PARAMS: If set, the parameters of the camera (resolution, compression and frame rate) are appended to the requested media URL. To be used only with AXIS cameras. [NO, YES] REC-TIME: The time of circular recording [0..65535 hours] USER: Username of the account to access the camera. PWD: Password of the account to access the camera. [09:52:36] ABILIS_CPX:d vs alarm ? ID: Identifier of Video-surveillance alarm [0..15] <Optional> Video-surveillance alarm parameter(s): ENABLED: Enable/disable this entry usage [NO, YES] DESCR: Entry description. From 0 up to 70 Alphanumeric extended characters. Case is preserved. Spaces are allowed. Strings holding spaces must be written between quotation marks (E.g. "str1 str2"). It is displayed only when not empty. CAMERA-ID: Idnetifier of the camera [NONE, 0..4] MONITOR: Alarm/event to be monitored [NONE, ON, OFF, *] RES: Resource for which the alarm/event is monitored. "#" or "*" or "type-nnn" or "type-*" or "CtiP-nnn" or "CtiP-*" or the name of a CPX resources list between primes (e.g. * or Gpio-* or CtiP-541 or Mfio-1 or 'mylist'). IO: Input/output line for which the alarm/event is monitored. "#" or - "D-IN-n", where 'n' can be: - for GPIO Digital IN line, [1..64, *]; - for MFIO Digital IN line, [1..7, *]; - "D-OUT-n", where 'n' can be - for GPIO Digital OUT line, [1..64, *]; - for MFIO Digital OUT line, [1..7, *]; - "B-n", where 'n' can be [1..8, *], for CITOBOX "More buttons"; - "CALL", for CITOBOX CALL Button; - "L-n", where 'n' can be [1..4, *], for CITOBOX output Line. <Only for Gpio/MfIo resources and CITO CTI ports> ACTION: Action to be executed when the monitored alarm/event occurs [NONE, MAIL, SMS, DISA-CB, TURN-ON-D-OUT]. Values can be joined using "," operator. TURN-ON-RES: The resource whose output may be turned on in case of alarm during the whole duration of it. "#" or "Gpio-nnn" or "Mfio-nnn". TURN-ON-IO: The digital output that may be turned on in case of alarm during the whole duration of it. "#" or "D-OUT-n", where 'n' can be: - for GPIO Digital OUT line, [1..64]; - for MFIO Digital OUT line, [1..7]. <Only for TURN-ON-RES not equal to #> TI1:..TI5: Time interval within which the rule is active. The the format is "day,hh:mm-hh:mm", where 'day' can be: - a single day of the week [MO, TU, WE, TH, FR, SA, SU] or - a set of days of the week (E.g.: MO+TH or TU+TH+SU) or - an interval of days of the week (E.g.: MO-WE or TH-SU) or - "ALL". Use "#" to disable the time interval. [09:52:41] ABILIS_CPX:
Here is a sample screenshot of the viewer:
Figure: Videosurveillance viewer
Added handling of analog inputs values.
At this moment analog inputs are present in CITOBOX hardware.
Analog signals are digitalized by ADC converters present in the interface hardware. The numerical value is read by Abilis and converted to the measure unit by means of the analog input configuration parameters:
Measure unit
The lowest value, in measure unit, to be assigned to DAC value 0.
The highest value, in measure unit, to be assigned to DAC value 1023.
When monitored via GPIOPC protocol this is the difference that must occur between current value and previously read value in order to deliver the new value to the GPIOPC client.
When analog inputs are monitored via GPIOPC two more parameters are involved:
Difference that must occur between current value and previously read value in order to deliver the new value to the GPIOPC client.
Interval between values read.
Added handling of analog inputs alarms.
The measured analog values are verified against thresholds in order to generate LOW and HIGH alarms.
Analog alarms parameters:
Measure unit
The value, in measure unit, below which the ALARM LOW is triggered.
The value, in measure unit, above which the ALARM HIGH is triggered.
Histeresys for ALM-LO and ALM-HI for returning to NORMAL state
Added PULSE mode for digital output.
Three parameters have been added:
To choose between VALUE operational mode and PULSE.
The duration of the pulse, in milliseconds.
The minimal guaranteed pause between two pulses, in milliseconds.
Configuration example.
Important: the D P GPIO command shows only the lines which have been configured with a description or that have the parameters different from the default. To enforce the view of all theoretically possible 64 digital inputs, 64 digital outputs, 16 analog inputs, use D PE GPIO command.
[13:30:35] ABILIS_CPX:d p gpio RES:Gpio-1 - Not Saved (SAVE CONF), Not Refreshed (INIT) ---------------------- ------------------------------------------------------------------------ Run DESCR: LOG:NO ACT:YES LIVE-EXPIRY:10 -------+-------------------- Digital Input lines ----------------------- D-IN: | [DESCR:] -------+---------------------------------------------------------------- 1 | Input 1 2 | Input 2 3 | Input 3 4 | Input 4 5 | Input 5 6 | Input 6 7 | Input 7 8 | Input 8 -------+-------------------- Digital Output lines ---------------------- D-OUT: | [DESCR:] | MODE: PULSE-T: PULSE-GAP: -------+---------------------------------------------------------------- 1 | Output 1 2 | Output 2 3 | Output 3 4 | Output 4 | PULSE 500 250 -------+-------------------- Analog Input lines ------------------------ A-IN: | [DESCR:] | UNIT: MIN: MAX: ALM-LO: ALM-HI: HIST: UPD: POLL: -------+---------------------------------------------------------------- 1 | Analog 2 | C 20 21 20 21 5.0 1.0 1.0 2 | C -10 40 0.0 40 5.0 1.0 1.0 ------------------------------------------------------------------------ - ePorter specific ----------------------------------------------------- GATE-WAIT-CONNECT:60 GATE-MAX-DURATION:300 FLAT-WAIT-CONNECT:60 FLAT-MAX-DURATION:300 FLAT-BELL-GUARD:2 [13:30:36] ABILIS_CPX:d d gpio RES:Gpio-1 -------------------------------------------------------------------- STATE:UP USB-STATE:CONNECTED - Digital Input Lines State -------------------------------------------- 1..16| off off off off off off off off . . . . . . . . 17..32| . . . . . . . . . . . . . . . . 33..48| . . . . . . . . . . . . . . . . 49..64| . . . . . . . . . . . . . . . . ------------------------------------------------------------------------ - Digital Output Lines State ------------------------------------------- 1..16| off off off off . . . . . . . . . . . . 17..32| . . . . . . . . . . . . . . . . 33..48| . . . . . . . . . . . . . . . . 49..64| . . . . . . . . . . . . . . . . ------------------------------------------------------------------------ - Analog Input Lines --------------------------------------------------- | State Value Unit ADC | State Value Unit ADC ------+--------------------------------+-------------------------------- 1.. 2| LOW 20 C 1 | NORMAL 14 C 495 3.. 4| . . . . | . . . . 5.. 6| . . . . | . . . . 7.. 8| . . . . | . . . . 9..10| . . . . | . . . . 11..12| . . . . | . . . . 13..14| . . . . | . . . . 15..16| . . . . | . . . . ------------------------------------------------------------------------ [13:31:03] ABILIS_CPX:
Added PULSE mode for digital output.
Three parameters have been added:
To choose between VALUE operational mode and PULSE.
The duration of the pulse, in milliseconds.
The minimal guaranteed pause between two pulses, in milliseconds.
Added extensions required to manage the new Analog and digital I/O features.
Added LAST: option to D L command.
[10:15:05] ABILIS_CPX:d l ? D L [ver] [dd/mm/yyyy] [hh:mm:ss] [LAST:val] [F:val] Display System Log <ver> String corresponding to a version directory in <Optional> the form [x.y.z or x-y-z or y.z or y-z or y]. (E.g.: 5.3.1 or 6-1-0 or 2189). dd/mm/yyyy Selected date <Optional> hh:mm:ss Selected time <Optional> LAST: Select the display staring position [RUN, 1..999]: <Optional> - LAST:RUN display only events logged in the last run plus five events of the previous run (if any). - LAST:nnn display last 'nnn' events, where 'nnn' range is [1..999]. F: Filtering string. Case-insensitive match. <Optional> Scan the message for the occurrence of the given substring. From 1 up to 70 Alphanumeric extended characters. Spaces are allowed. Strings holding spaces must be written between quotation marks (E.g.: F:"str1 str2"). [10:28:29] ABILIS_CPX:
Added support for AbilisPhone specific features.
A new AbilisPhone section in CTISIP resource configuration has been added.
[11:16:48] ABILIS_CPX:d p ctisip RES:CtiSip -------------------------------------------------------------------- Run DESCR:Session_Initiation_Protocol ... - Abilisphone settings ------------------------------------------------- WIFI-DJ:0 HSPA-DJ:100 abilisphone-locport:45678 WIFI-MJ:100 HSPA-MJ:250 link-quality-port:56789 [11:16:50] ABILIS_CPX:d p ctisip ? CtiSip resource parameter(s): ... WIFI-DJ: WiFi default jitter buffer size [0..65535] WIFI-MJ: WiFi maximal jitter buffer size [0..65535] HSPA-DJ: HSPA default jitter buffer size [0..65535] HSPA-MJ: HSPA maximal jitter buffer size [0..65535] abilisphone-locport: UDP port used by Abilisphone [1..65535] link-quality-port: UDP port used by Abilisphone to measure the quality of the link to the Abilis [1..65535] [11:18:06] ABILIS_CPX:
Added commands for easier management of:
display registered user
force registration of user with SIP-REM-REG:YES
force user deregistration
display/clear log
set log event mask
display/add/set/clear additional numbers (ex A/S/C CTISIP NUMx)
display/clear subscriptions
[13:37:47] ABILIS_CPX:d ctisip ? LOG CtiSip log NUMBERS CtiSip numbers REGISTRY CtiSip registrations SUBS CtiSip subscriptions [13:37:50] ABILIS_CPX:a ctisip ? NUMBERS CtiSip numbers REGISTRY CtiSip registrations [13:37:53] ABILIS_CPX:s ctisip ? LOG CtiSip log NUMBERS CtiSip numbers [13:37:55] ABILIS_CPX:c ctisip ? LOG CtiSip log NUMBERS CtiSip numbers REGISTRY CtiSip registrations SUBS CtiSip subscriptions [13:37:58] ABILIS_CPX:A couple of examples:
[13:37:58] ABILIS_CPX:d ctisip numbers Total:9 Sip-Number:7 Static:2 NUMx: [SIP-NUMBER:] USER: Provenience: ------------------------------------------------------------------------ [909] cpxipsec SIP-NUMBER 9082 cisco2 STATIC 9081 cisco2 STATIC [908] cisco2 SIP-NUMBER [9009] siemens SIP-NUMBER [9007] sip2 SIP-NUMBER [9005] sip1 SIP-NUMBER [9003] yealink SIP-NUMBER [9002] leo SIP-NUMBER [13:40:22] ABILIS_CPX:d ctisip registry User Host Prot Port REG LIFETIME AGE ------------------------------------------------------------------------------- leo 192.168.000.004 UDP 5060 LOCAL 120 13 ------------------------------------------------------------------------------- [13:40:27] ABILIS_CPX:
Added commands for easier management of:
display registered user
force registration of user with IAX-REM-REG:YES
force user deregistration
display/clear log
set log event mask
display/add/set/clear additional numbers (ex A/S/C CTISIP NUMx)
[12:14:12] ABILIS_CPX:d ctiiax ? LOG CtiIax log NUMBERS CtiIax numbers REGISTRY CtiIax registrations [12:14:18] ABILIS_CPX:a ctiiax ? NUMBERS CtiIax numbers REGISTRY CtiIax registrations [12:14:20] ABILIS_CPX:s ctiiax ? LOG CtiIax log NUMBERS CtiIax numbers [12:14:22] ABILIS_CPX:c ctiiax ? LOG CtiIax log NUMBERS CtiIax numbers REGISTRY CtiIax registrations [12:14:24] ABILIS_CPX:A couple of examples:
[12:16:05] ABILIS_CPX:d ctiiax numbers ------------------------------------------------------------------------------- Total:4 Iax-Number:2 Static:2 NUMx: [IAX-NUMBER:] USER: Provenience: ------------------------------------------------------------------------ [609] cpxipsec IAX-NUMBER 6022 leo STATIC 6021 leo STATIC [602] leo IAX-NUMBER [12:16:06] ABILIS_CPX:d ctiiax registry User Host Port REG LIFETIME AGE ------------------------------------------------------------------------------- leo 192.168.000.004 4569 LOCAL 60 16 ------------------------------------------------------------------------------- [12:16:08] ABILIS_CPX:
When subtype is IPLAN it is now possible to easily see ARP cache, virtual IPs, MAC and virtual MACs.
[13:22:55] ABILIS_CPX:d d ip-1 ? D D[E] [RES:]Ip-nnn ARP Display ARP cache: only VALID items D D[E] [RES:]Ip-nnn ARP ALL Display ARP cache: only VALID & OUTDATED items D D[E] [RES:]Ip-nnn ADDR[ESSES] Display MAC/IP addresses [13:22:58] ABILIS_CPX:d d ip-1 arp ----+----------------+------------------+-----------+----------- ID|IP |MAC |State | Expiry [s] ----+----------------+------------------+-----------+----------- 1|192.168.000.004 |BC-AE-C5-96-76-B7 |VALID | 66 2|192.168.000.220 |00-08-54-50-10-82 |VALID | 93 3|192.168.000.232 |00-06-4F-8F-C8-06 |VALID | 87 5|192.168.000.118 |00-80-F0-BF-76-2F |VALID | 19 6|192.168.000.251 |00-08-54-55-CC-4F |VALID | 22 ----+----------------+------------------+-----------+----------- [13:23:00] ABILIS_CPX:d d ip-1 arp all ----+----------------+------------------+-----------+----------- ID|IP |MAC |State | Expiry [s] ----+----------------+------------------+-----------+----------- 1|192.168.000.004 |BC-AE-C5-96-76-B7 |VALID | 65 2|192.168.000.220 |00-08-54-50-10-82 |VALID | 92 3|192.168.000.232 |00-06-4F-8F-C8-06 |VALID | 86 4|192.168.000.005 |00-1E-8C-D4-EB-F2 |OUTDATED | -152 5|192.168.000.118 |00-80-F0-BF-76-2F |VALID | 18 6|192.168.000.251 |00-08-54-55-CC-4F |VALID | 21 7|192.168.000.002 |00-1E-8C-D5-5E-10 |OUTDATED | -144 ----+----------------+------------------+-----------+----------- [13:23:04] ABILIS_CPX:d d ip-1 addr ------------------------------------------------------------------------------- Hardware MAC : 00-E0-6C-7A-1E-E2 ------------------------------------------------------------------------------- Multicast MACs : 01-00-5E-7F-FF-FA 01-00-5E-00-00-12 ------------------------------------------------------------------------------- VRRP MACs/IPs : 00-00-5E-00-01-0A 192.168.000.219 ENABLED 00-00-5E-00-01-14 192.168.000.218 ENABLED ------------------------------------------------------------------------------- Primary IP : 192.168.000.208/24 ------------------------------------------------------------------------------- Secondary IPs : 003.001.150.123/32 002.001.001.001/32 ------------------------------------------------------------------------------- NAT Alias IPs : 192.168.000.215/32 ------------------------------------------------------------------------------- [13:23:10] ABILIS_CPX:
Added a new feature in NAT that, if enabled, permits the loopback of packets for the so called virtual servers, which uses a so called port forwarding.
A typical situation is when you have a LAN and an INTERNET connection, and you want to make a server on the LAN accessible from the INTERNET, what you have to do is to create a port forwarding rule.
Let's see an example where the public IP is 8.8.4.4 and we have to "publish" an HTTP server.
[18:41:08] ABILIS_CPX:_d nat UPNP maps not present Configured maps ------------------------------------------------------------------------------- PR: [DESCR:] INAT: ADD: SNET: DNET: ANET: ONAT: SPO: DPO: APO: PAT: SIP: DIP: PROT: TOUT: ------------------------------------------------------------------------------- 0 [Web server] OUT DST * 008.008.004.004/32 192.168.000.050/32 IN TCP 80 http(80) YES ------------------------------------------------------------------------------- 1 [For internet surfing] IN SRC 192.168.000.000/24 * 008.008.004.004/32 OUT TCP * AUTO YES ------------------------------------------------------------------------------- [18:41:10] ABILIS_CPX:
May be you also register an FQDN, e.g. myserver.com -> 8.8.4.4.
The problem is that normally the server 8.8.4.4 is accessible from the INTERNET , but it is NOT accessible from the LAN because packets coming from 192.168.0.0/24 to 8.8.4.4 needs first to be translated by PR:1, and then looped back and translated again by PR:0.
This LOOPBACK is now possible if NAT is configured with NAT-LOOPBACK:YES.
There are however restriction:
In DST translations there must be SNET:* and SPO:*
In SRC translations there must DNET:* and DPO:*
ICMP cannot be looped back if source and destination becomes identical prior to loopback, as in the example above if PROT:* or PROT:ICMP. So even if PROT: permits ICMP it will not be looped back.
If the conditions are not met the packet is not looped back.
Added FRAG:AIPT option for IP resource with subtype AIPT.
The key points of this new fragmentation option are:
the fragmentation is done inside the PLINKE driver
reordering is not used, and as a consequence D-TOUT is hidden.
This is of great advantage in IP networks because in case of packet loss there is no more timeout to wait for the delivery of the other complete packets.
The AIPT mode MUST be from this moment on the 1st choice mode for all AIPT tunnels.
Added automatic TCP-MSS-CLAMP when FRAG is used.
For all FRF12, ABILIS and AIPT mode the TCP MSS is now automatically negotiated to precisely fit the FRAGSIZE value.
Remind that the FRAGSIZE value determine the tunnel payload, therefore the maximal size of the final IP/UDP packet will be FRASIZE + IP header (20) + UDP header (8). Be sure that this does not exceed the MTU of the output interface, otherwise an IP level fragmentation will take place and performances will suffer sensibly.
A maximal value FRAGSIZE:1400 guarantees that you are fairly away from the worse common MTU limits (1452 in some worse case).
Added statistics for BANNED-IP and DENIED-IP.
Number of packets discarded because the IP was banned
Number of connections attempt that were rejected because the IP was not permitted by IPSRC or IPSRCLIST parameters
User preferences are now saved on Abilis instead of being saved in the browser using cookies.
This permits to change browser or workstation and find the own preferences.
Added licences for Videosurveillance and for AbilisPhone.
The new licences scheme is:
Table: Abilis CPX product classes
Class | Product |
FP | Former Mini-Abilis with FPANEL |
0 | Former Abilis Base-x with MFIDE2/MFIDE3 |
1 | Micro-Abilis (with BRI4-POTS4 board and MFLPC) |
2 | Nano-Abilis (with MiniBRI1 board and MFLPC) |
3 | Abilis Base-J with MFIDE3 |
4 | Mini-Abilis with MFIDE3 |
5 | Compact-Abilis (with ETH3-BRI4-POTS8 and MFPCI) |
6 | Abilis Base-K with MFIDE3 |
7 | PicoAbilis (with VoIP and MFPCMCIA) |
8 | Micro-Abilis-C3 (with BS44V and MFPCIGT) |
Table: Classes with licenced features and additional licences EXTENDED and VMX
Feature | Description | Class FP | Class 0 | Class 1 | Class 2 | Class 3 | Class 4 | Class 5 | Class 6 | Class 7 | Class 8 | EXTENDED | VMX |
DATACOMP | Data compression service | ||||||||||||
VMX | VMX system | YES | |||||||||||
IPLB | IP Load Balancing service | YES | YES | YES | YES | ||||||||
MULTILINK | Resources over Multi-Links | YES | YES | YES | YES | ||||||||
LCS | Last Calling number service | YES | YES | YES | YES | ||||||||
SOFTPBX | Soft-PBX service (OPC, Address Book, Click&Call, ...) | YES | YES | YES | YES | ||||||||
GPS | GPS resources | YES | YES | ||||||||||
ACNT | Accounting service | YES | YES | YES | YES | ||||||||
TRFA | Traffic Analyzer | YES | YES | YES | YES | YES | |||||||
OSPF | Open Shortest Path First protocol | YES | YES | ||||||||||
FTPSRV | FTP server | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES |
SMTP | SMTP resource | YES | YES | YES | YES | YES | |||||||
POP3 | POP3 resource | YES | YES | YES | YES | YES | |||||||
RADIUS | RADIUS resource | YES | YES | YES | YES | ||||||||
VRRP | VRRP resource | YES | YES | ||||||||||
POEAC | PPP Over Ethernet Access Concentrator | YES | YES | YES | YES | ||||||||
ARCHIVE | Archive resource | YES | YES | YES | YES | ||||||||
CTIDISA | CTI DISA service | YES | YES | YES | YES | YES | |||||||
CTIIAX | CTI IAX service | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES |
CTISIP | CTI SIP service | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES | YES |
CTISMS | CTI SMS service | YES | YES | YES | YES | ||||||||
AIPT | Number of AIPT (Abilis tunnel) resources [0, 1..250] | 4 | 250 | 2 | 2 | 4 | 2 | 4 | 250 | 2 | 2 | 32 | 32 |
IKEHOSTS | Number of IKE hosts [0, 1..128] (IPSEC/IKE resources) | 2 | 128 | 1 | 1 | 2 | 1 | 1 | 128 | 1 | 1 | 4 | 4 |
IPSH | IP traffic shaping service | ||||||||||||
LDAP | LDAP service | ||||||||||||
SIPBLF | Busy Lamp Field for SIP | ||||||||||||
VS | Videosurveillance | ||||||||||||
ABILISPHONE | AbilisPhones users in SIP |
Added support for Asrock P5B-DE M/B
The WAV files are now accepted in more formats, for either immediate use or conversion.
8 and 16 bit PCM linear
CCITT A-law and u-law
Any sampling frequency. Please note that 8 khz is the frequency that Abilis MUST use, therefore while 8 khz is the native one all the others have to be resampled, requiring higher CPU load.
Mono or stereo (stereo is mixed to mono).
CtiMix is the only driver now that can directly use WAV files. In case of sampling frequency different from 8 khz a batch remapping procedure converts and replaces the original file with a 8 khz resampled one.
In D/S CTICL, D D/S CTICL, D DE/SE CTICL, the Cti clusters can be referenced using ID: keyword too.
[18:59:59] ABILIS_CPX:d cticl ? D CTICL Display all CTI Clusters D CTICL filter:val [filter:val] Display any CTI Cluster matching the specified filter(s) Allowed filters: CLUS: CTI cluster name, from 1 up to 8 characters in the <Optional> ['0'..'9', 'A'..'Z', 'a'..'z', '_', ':'], or a string preceded and/or followed by '*' (E.g.: "*mystr" or "mystr*" or "*mystr*") or "*". ID: CTI cluster internal index [A,1..256] <Optional> NUM: Search for any phone number(s) starting with the given <Optional> prefix (from 1 up to 20 digits optionally preceded by TON [u, i, n, o, s, c] and NP [x, e, d, t, l, p] attributes). DESCR: Scan the description for the occurrence of the given <Optional> substring. Case-insensitive match. From 0 up to 70 Alphanumeric extended characters. Spaces are allowed. Strings holding spaces must be written between quotation marks (E.g. "str1 str2"). ...
Extended filtering options for D USER.
[19:04:37] ABILIS_CPX:d user ? D USER [opt] Display User's parameters summary Allowed options: ADDRBOOK Display Address Book(s) related parameters only <Optional> CLUS Display the list of CTI clusters in use by any user <Optional> CTIP Display the list of CTI ports in use by any user <Optional> CTINUM Display CTI numbers in use by any user <Optional> OPC Display CTI and OPC related parameters only <Optional> PPP Display PPP related parameters only <Optional> FTP Display FTP related parameters only <Optional> HTTP Display HTTP related parameters only <Optional> MAIL Display MAIL related parameters only <Optional> IAX Display IAX related parameters only <Optional> SIP Display IAX related parameters only <Optional> ... [19:17:12] ABILIS_CPX:
Further filters are possible, depending on the option. For example:
[19:17:12] ABILIS_CPX:d user sip ? D USER SIP [SIP-TYPE:val] [ALL] Display User's SIP parameters summary User's SIP parameter(s): USER: User name. Max. 32 ASCII characters. Spaces are not allowed. Case is preserved. PWD: User password. From 0 up to 32 ASCII printable characters. Spaces are not allowed. Case is preserved. ACT: User enable/disable flag [NO, YES] SIP: Enable/disable CTISIP for this user [NO, YES] SIP-TYPE: SIP type of user [PHONE, LOCAL-PEER, REMOTE-PEER, SERVER ABILISPHONE] SIP-NUMBER: User number that identifies the resource for call routings [19:17:25] ABILIS_CPX: [19:17:25] ABILIS_CPX:d user sip Activated/Configured/Licenced ABILISPHONE users:1/1/1023 -------------------------------------+----+-----------+------------------------ USER: PWD: ACT:|SIP:|SIP-TYPE: |SIP-NUMBER: -------------------------------------+----+-----------+------------------------ alfredo *** YES YES PHONE angelo *** YES YES PHONE 904 angelo2 *** YES YES PHONE cisco1 *** YES YES PHONE 906 cisco2 *** YES YES PHONE 908 cpxipsec *** YES YES PHONE 909 cpxipsec2 *** YES YES PHONE dario1 *** YES YES PHONE 9010 dario2 *** YES YES PHONE 9011 gs *** YES YES PHONE 9004 leo *** YES YES PHONE 9002 linoandroid *** YES YES ABILISPHONE opt1 YES YES SERVER opt2 YES YES SERVER opt3 YES YES SERVER pippo YES YES PHONE proxytest *** YES YES SERVER siemens *** YES YES PHONE 9009 sip1 *** YES YES PHONE 9005 sip2 *** YES YES PHONE 9007 welcome YES YES SERVER yealink *** YES YES PHONE 9003 zorro *** YES YES PHONE [19:20:02] ABILIS_CPX: [19:19:04] ABILIS_CPX:
In CTISYS renamed DFT-JBUF to DJ and MAX-JBUF to MJ.
New default value DJ:80 MJ:250 instead of DFT-JBUF:0 and MAX-JBUF:100
Added users directories in C:\APP\USERS.
The structure is C:\APP\USERS\<user> and each <user> directory contains user-related matters. Currently it contains:
cti call logs.
When version 7.5.0 starts for the first time it moves the old cti call logs files into individual user directory, and renames them: old name were <username>-in.log and <username>-out.log, new names are cticall-in.log and cticall-out.log
OPC preferences
Added mib for CtiMix.
Extended Telnet, Ssh, Sip, Iax, Smtp, Pop3, HTTP, Ftp mib for IPBAN stats for BANNED-IP.
Added support for decode of FRF12 and ABILIS fragmentation.
Added compatibility checks with some recent M/B that have problems with IDE PIO32 mode.
These M/B are not in production..
All bug fixes present up to 7.4.10 are present in 7.5.0
Copyright © Abilis