Released on June 30, 2021.
none
Fixed management of multiple concurrent accesses to the Leases table by adding a task switching that allows all processes to be correctly scheduled.
The bug caused that 'D DHCP BIND' command to appears freezed and pending for a long time.
Fixed syntax errors in MIB file, that prevent MIB loading by some management tools.
None
Released on April 19, 2021.
Added support for M/B "Intel", "YL-3160L2-V2".
Added support for M/B with CPU Intel J4125 with missing SMBIOS identification (Manuf/Product - Default string), used also BIOS ReleaseDate for identification of the MB.
Added ' diffie-hellman-group14-sha256' method to the list of supported Key Exchange (KEX) methods.
Fixed processing of UPDATE in calling phase asking for the codec change.
The bug caused confirmation of such UPDATE with unchanged codec and without RCC attempt toward CTIR.
Added a protection to PRACK transaction engine to avoid a blockage (and restart) in some cases.
Fixed missing REAL-NAME refresh upon changes
It happens that the change was not deleted and the old value was still used instead of the new one.
Fixed RCC to T.38 of StoXtoV connection, if it goes through DISA.
The bug caused a StoXtoV call drop when the destination tries to switch to T.38 (fax) mode, if the voice data went through the DISA even in Active state.
A more reliable method is now used to obtain the amount of free disk space.
With the previous method, on disks with exFAT file system, it could happen that the free space was incorrectly indicated to be zero.
Fixed bug that could cause null pointer reference error message to be displayed sometimes after a calls.
Fixed parsing of 'Protocol' parameter, that could cause selected protocol to be ignored and consequent wrong report.
Changed defaults of TCP windows ('TCP-RWIN' and 'TCP-SWIN') from 16384 to 65535, in order to increase performance when transferring large files.
Cross setting with VS: in order to increase performance of Videorecorder web pages, when VS is active the HTTP server TCP windows ('TCP-RWIN' and 'TCP-SWIN') are automatically set to be at least 65535 by VALIDATE.
Changed defaults of TCP windows ('tcp-rwin' and 'tcp-swin') from 16384 to 65535, in order to increase performance when receiving large image files from RVS devices.
Cross setting with HTTP: in order to increase performance of Videorecorder web pages, when VS is active the HTTP server TCP windows ('TCP-RWIN' and 'TCP-SWIN') are automatically set to be at least 65535 by VALIDATE.
Fixed both Control Port help and Users administration page tooltip of user's IAX-PROVIDE-SG and SIP-PROVIDE-SG parameters: they wrongly indicate 'USERNAME' while user REAL-NAME is used instead.
None
Released on February 16, 2021.
none
Fixed a bug that appeared when removing a user with SIP-HOST:<FQDN> and other users had the same <FQDN>.
The bug caused failure of all incoming calls to users with the same SIP-HOST:<FQDN> of the removed user.
Fixed processing of re-INVITE in CallDelivered state to be properly answered with '200 OK' if possible.
The bug caused inappropriate call drop.
Fixed proper AS subtype evaluation of dropped XtoG/GtoA connections in ACNT.
The bug caused wrong 'unknown' outgoing port type in Collector and CDR database.
Fixed recording with PREFER-TDM:YES:
- if recorded connection is VtoX or XtoV and there is no AC/HDLC free;
- if recorded connection is VtoX or XtoV and V side is VPOTS or GSM.
Fixed bug that could cause registration failure of PcPhone during start-up: this bug was caused by an internal procedure used to detect user picture presence.
When many users are present this procedure takes a lot of time blocking file system access and consequently PcPhone registration.
Increased the voice packet FIFO size to handle larger burts and holes in the voice packet stream.
Fixed the incoming voice stream delivery through the reordering FIFO.
The bug caused big holes in the voice stream.
Fixed rounding of decimal part of IOLOG analog values provided in XML file.
The bug caused inexplicable jumps of values in IOLOG graphs.
Fixed an exception during WAV-to-CPM or CPM-to-WAV conversions.
The bug appears when processing files with path/name longer then 20 characters.
Alerted IP addresses are now removed from IP Banning data base after a next successful authentication.
Fixed SYS UPDATE AUTO command for VMX Abilis version.
The bug caused the command to detect a fake error and fail when verifying the correctness of the downloaded zip archive.
When the licence is missing, IP over DSL resources are now allowed to run, while before they were not activated.
None
Released on November 30, 2020.
none
The purpose of AUTO-ERASE-CTI:YES procedure is to erase files of no longer existent users, services and sub-services.
Version 8.10.1 introduced last minute bugs in the AUTO-ERASE-CTI:YES bugfix:
It wrongly deletes files in <WDIR>USER directory that belongs to users with underscore in the user name (e.g.my_user).
It wrongly deletes files in <WDIR>DISA directory that belongs to services with underscore in the service name (e.g.my_service).
Files in <WDIR>HISTORY\USER and <WDIR>HISTORY\DISA are affected in the opposite way, such files were not deleted when they should.
Version 8.10.2 fixes these critical bugs.
None
Released on November 27, 2020.
DRIVERS.CFG and DRIVERS.BCK included in the distribution are now copied to CF when installing via INSTALL.BAT.
Added config.exe to PKG, the result is that every Abilis version on CF includes it's own config.exe
Added Gigabyte Technology Co., Ltd. EP31-DS3L into list of M/B with multicore support.
Enforced stream encryption when Abilisphone VoIP is used.
Added system log message about not certified firmware version of LTE modules.
Added diagnostic about not certified firmware versions of LTE modules.
Improved VOICE-DATA-SMS functionality detection.
The VOICE functionality is available only for SIM7230 module with firmware version 2035B04.
Several improvements overlap with bugfixes, please read the Sip bugfix section below.
Fixed a bug in password evaluation that in some special cases could cause a sw exception and system reboot.
Extended SSH2_MAXLEN_KEXINIT_PACKET from 2048 to 4096. Required by ZOC8 ssh and may be by some newer SSH clients.
Fixed a bug in password evaluation that in some special cases could cause a sw exception and system reboot.
Fixed a bug in password evaluation that in some special cases could cause a sw exception and system reboot.
Fixed a bug in searching for CTI cluster references: false references could be shown because the procedure was wrongly scanning RU and MR lists too.
Fixed a bug when deleting a user: the TRFA files of that user were not deleted while they should.
Fixed processing of G.722 codec when routing rule has CODERS:*. The bug caused the cut of such a codec.
Fixed a possible system blockage, ans subsequent auto restart, in the extended RCC (runtime codec change) iteration.
Enabled extended RCC codec iteration even if transcoding is currently used. The procedure aims to remove the transcoding.
Improved logging of dropped call when the transcoding requires MCD with faxrelay on one side and non-faxrelay on the other side (e.g. G711 no fax relay with G729 with fax relay.
The Previous cause was FF A4 "No AC available", now it is FF AB "No AC/MCD with fax relay available".
Fixed Direct CallPickup from packet oriented connection side (e.g. SIP) if there is no suitable AC providing required codec.
Before the fix the pickup caused the drop of the call and a FRMWR logged in system log.
After the fix the pickup is rejected and the call remains active as it was before.
Fixed processing of incoming UPDATE with SDP (offer).
The bug caused to answer with 200 OK without SDP, after the fix the proper SDP (answer) is included.
Improved handling of SIP-HOST:<ip address> or <fqdn>:
For <fqdn> the refresh has been shortened from 15 minutes to 3 minutes.
Please ensure to have CACHE:YES in the DNS resource to take advantage of the DNS resolver cache, to avoid DNS servers overload.
The resolved address is visible in the D SIP REG table.
The SIP-IP-PERMIT verification is now skipped.
The D USER:<user> configuration now shows SIP-PERMIT:(SIP-HOST) to indicate that the ip address configured or resolved in SIP-HOST is the only one permitted.
If SIP-REMPORT:DYNAMIC the registration is required and the registered remport will be visible in D SIP REG table.
When not registered the user state is down.
The SIP-IP-PERMIT is now applied only when SIP-HOST:DYNAMIC
When SIP-HOST:<ip address> or <fqdn> the SIP-IP-PERMIT is skipped and it is shown as SIP-IP-PERMIT:(SIP-HOST) to indicate that the ip address configured or resolved in SIP-HOST is the only one permitted.
Fixed handling of user state for incoming calls.
For incoming calls the user state was previously ignored, now when state is down an incoming INVITE is rejected with 403 Forbidden.
Fixed OPTIONS timeouts and retries for the qualify procedure in case of no answer from counterpart.
Now retries are done according to RFC3261 for a total transaction time of 32 seconds after which the transaction fails and state goes down.
Before there were only 4 retries even if total transaction time was anyway 32 seconds.
Extended usability of SIP-QUALIFY procedure to all SIP-TYPE (PHONE, REMOTE-PEER, LOCAL-PEER, SERVER, NNI), before it was usable only for NNI.
Fixed bug that caused start of SA replacement before XAUTH procedure was completed: this could cause replacement of wrong SA, creating instability.
Fixed missing policy replacement in case HOST SIDE: is changed.
Fixed a bug that caused software exception and system reboot in a particular cases when IPSEC is used with NAT or IP SHAPING.
Fixed a bug that caused software exception and system reboot in a particular case of IPSEC and NAT combination.
Fixed a bug that caused software exception and system reboot in a particular case of IPSEC and IP SHAPING combination.
Fixed a bug occurring with the on-board RTL8111Be chip of Gigabyte P31-DS3L and EP31-DS3L.
In some situation the last packet of a series of packets was not transmitted, causing packet loss.
Fixed a bug in AX88179 driver that in presence of malformed USB data could cause a sw exception and system reboot.
Fixed AUTO-ERASE-IP:YES and AUTO-ERASE-CTI:YES parameters, they didn't remove historical files.
Fixed a bug that may cause a sw exception and system reboot during the IP COMPACTING procedure.
Fixed a bug when deleting a user: the TRFA files of that user were not deleted while they should.
None
Released on October 20, 2020.
Added support for INTEL YL-3160L2 motherboard.
Added support for Intel HDA audio driver, specifically for chips ALC262, ALC887.
Supported M/B are D2594-A1, GA-J3455, GA-N3150, GA-N3160, B365-DS3H.
Extended listitems limit from 50000 to 200000.
[15:16:03] ABILIS_CPX:d g ? listitems
General system parameters:
listitems: Number of CPX list items [4000..200000].
It must be multiple of 1000.
[15:16:09] ABILIS_CPX:
Changed INP list elements from Cg,Cd to Number,Cd.
The change was needed because the former Cg field can be used now for different purposes in place of Cg,Rg,Sg,Sd.
Use of INP list has been slightly changed in CTIR fields and xxx-CDI-PERMIT. See Cti Router section for more details.
CDI and CDO fields in routings have been extended to support up to 30 digits.
The previous 20 digits limit was insufficient when dealing with "routing numbers" used in carrier interconnection.
All lists that can be used with "called numbers" have been extended to 30 digits too.
Slightly changed use of INP lists, either directly or via RU/MR lists.
When used in routing fields:
CDI:
check CG (if RG absent) or RG (if RG present) and CD of the call against Number and CD of the list.
CGI:, RGI:, SGI:, SDI:
check respectively CG/RG/SG/SD and CD of the call against Number and CD of the list.
For xxx-CDI-PERMIT:
check CG (if RG absent) or RG (if RG present) and CD of the call against Number and CD of the list.
Added transparent support of G.722 codec.
The G.722 codec is currently supported only when Abilis does not need to decode the stream, e.g. Sip-to-Sip connections; the complete support that includes voice messages, transcoding, mixer, etc... is planned for some future release.
When decoding is needed, e.g. connection to DISA, a runtime-codec-change to G.711 or any other codec available is performed, and if none is available or succeeds the call is dropped.
Extended music-on-hold with the possibility to feed audio stream from the on-board analog audio in.
[13:22:19] ABILIS_CPX:d p ctisys router
...
MOH:YES MOH-SOURCE:AUTO-LINE-IN MOH-MSG:*
MOH-LINE-IN-GAIN:0
MOH-DIR:C:\APP\CTI\MOH\
...
[13:22:28] ABILIS_CPX:d p ctisys router ?
...
MOH: Enable/disable Music on Hold service [NO, YES]
MOH-SOURCE: Source of MOH audio [MSG, LINE-IN, AUTO-LINE-IN]
- MSG: audio from music/message files.
- LINE-IN: audio from LINE-IN jack.
- AUTO-LINE-IN: audio from LINE-IN jack when jack is inserted,
otherwise from music/message files.
MOH-MSG: Name of the file holding the music/message to be played.
- # : Do not play any music/message.
- * : Play all music/message files in alphabetic order.
- Max 20 chars. Spaces require double quotes (E.g. "Dft music").
MOH-DIR: Music on Hold service Working directory path.
Full path with drive letter ['C'..'Z'] terminated by '\'.
Max 128 chars. Spaces require double quotes (E.g. "C:\My dir\").
MOH-LINE-IN-GAIN: MOH line input gain adjustment [-30..+30 dB].
...
[13:22:33] ABILIS_CPX:
Slightly changed use of INP lists, either directly or via RU/MR lists.
CDI:
check CGI (if RGI absent) or RGI (if RGI present) and CDI of the call against Number and CD of the list.
CGI:, RGI:, SGI:, SDI:
check respectively CGI/RGI/SGI/SDI and CDI of the call against Number and CD of the list.
CDO:
check CGO (if RGO absent) or RGO (if RGO present) and CDO of the call against Number and CD of the list.
SGO:, RGO:, SGO:, SDO:
check respectively CGO/RGO/SGO/SDO and CDO of the call against Number and CD of the list.
Processing of "called number" now tolerates up to 30 digits.
Although up to 20 digits numbers can be assigned to users (in SIP-NUMBER, SIP-CG-NUM, NUM, NUMx), SIP can process called numbers up to 30 digits. It possible to use wildcards for numbers longer than 20, SIP is able to match and forward the numbers in excess of 20.
Improved Click&Call service in several situations when runtime codec change is needed.
SIP CAPABILITIES are now cleared when when SIP-TYPE of a user that was PHONE is changed to other values. As before, the SIP CAPABILITIES are stored and updated for SIP-TYPE:PHONE only.
Changed 'mxps' range from [1472..65507 byte] to [2972..65507 byte].
Extended CDR records to hold called numbers of up to 30 digits.
The buffers used for TCP RECEIVE WINDOW and TCP SEND WINDOW are now created inside the drivers that use TCP.
With this new method the drivers can choose a window which is more adequate for their needs.
HTTP, FTP, SSH, TELNET drivers permits a runtime change, all the others only upon reboot.
Changed 'reas-dg-size' range from [576..65535 byte] to [3000..65535 byte].
Changed 'reas-dg-num' range from [2..100] to [20..100].
Extended VRRP ROUTER table from 16 to 64 records.
Improved handling of address assignment procedure.
A receive queue has been added to better handle delays in the address assignment when ICMPCHK:YES.
For ROLE:CLIENT added option for LOCPORT:AUTO.
If tunnel stays DOWN for 5 minutes a new pseudorandom local UDP port will be used.
This is a workaround for bugs in external devices that suddenly and inexplicably blocks a UDP port being used.
[15:33:23] ABILIS_CPX:d p ip-70 ? locport
Ip-70 (Abilis IP tunnel v.2) resource parameters:
LOCPORT: Local UDP port number [AUTO, 1..65535].
Packets are sent with this port as source port.
Packets are received with this port as destination port.
For ROLE:SERVER the range is restricted to [1..65535].
[15:33:34] ABILIS_CPX:
Improved NAT-LOOBACK:YES behaviour.
Destination translation with filters on source nets, and complementary source translations with filters on destination nets, where not included in the addresses suitable for NAT-LOOBACK.
This behaviour was not correct and has been changed to include them regardless of the filters.
Improved NAT-IPSEC interaction.
For a proper NAT-IPSEC interaction it was commonly necessary to filter out from NAT, by means of lists, the networks handled by IPSEC.
It is no more necessary since NAT is now automatically aware of IPSEC networks, which are also visible with D NAT IPSEC and D NAT ALL commands. The usual D NAT command shows a note if some nets are skipped because of IPSEC.
Note that in order to be skipped the actual INNAT-ONAT side but be the same, otherwise the NAT pre-IPSEC is called anyway.
Below is an example of what was necessary before and what is now enough.
Before:
since the IpRes used for Internet connection is also used to establish Ipsec connections, the IP addresses assigned to Ipsec had to be filtered out in the nat rules, like below (ipsec addresses 192.168.2.x, lan addresses 192.168.0.0)
[13:06:13] ABILIS_CPX:d nat
UPNP maps not present
Configured maps
-------------------------------------------------------------------------------
PR: [DESCR:]
INAT: ADD: SNET: DNET: ANET:
ONAT: SPO: DPO: APO: PAT:
SRES: DRES: PROT: TOUT:
-------------------------------------------------------------------------------
0 [Surf the internet]
IN SRC 192.168.000.000/24 'NotIpsec' OUT-IP
OUT * * AUTO YES
-------------------------------------------------------------------------------
[13:06:15] ABILIS_CPX:d list:notipsec
LIST:NotIpsec - RU - Ref-Numb:2 Items-Numb:1
--------------------------------------------------------------------------
NOT.ipsec
[13:06:35] ABILIS_CPX:d list:ipsec
LIST:ipsec - IR - Ref-Numb:1 Items-Numb:2
--------------------------------------------------------------------------
192.168.002.000:192.168.002.255
[13:06:39] ABILIS_CPX:
Now:
the nat rule suffice.
[13:06:13] ABILIS_CPX:d nat
*** SOME NETs skipped due to IPSEC policies ***
*** use D NAT IPSEC or D NAT ALL to see them ***
Configured maps
-------------------------------------------------------------------------------
PR: [DESCR:]
INAT: ADD: SNET: DNET: ANET:
ONAT: SPO: DPO: APO: PAT:
SRES: DRES: PROT: TOUT:
-------------------------------------------------------------------------------
0 [Surf the internet]
IN SRC 192.168.000.000/24 * OUT-IP
OUT * * AUTO YES
-------------------------------------------------------------------------------
[13:06:15] ABILIS_CPX:
Added command D D IPSEC POLICY as alias of DEBUG RES:IPSEC LSN:4.
Modified installation of OUTBOUND policies.
Now the OUTBOUND policies of all defined IKE CLI are installed in HOLD state when the IKE HOST is down or the client did not really activate the SA.
In this way the NETs intended to be managed by IPSEC are always intercepted and complete interaction with NAT is possible.
Moreover if the IKE HOST is down, or the SA is not activated, the packets are dropped instead of being sent not ciphered (although typically discarded by the next hop router).
Here is an example with IKE HOST down but OUTBOUND policy installed.
[15:09:14] ABILIS_CPX:d d ike
RES:Ike -----------------------------------------------------------------------
Internet_Keys_Exchange_Protocol
IKE-STATE:ACTIVE CUR-MAX-HOSTS:16 ISAKMP-SA:0 IPSEC-SA:0
IPSEC-STATE:ACTIVE CUR-HOSTS:0 ISAKMP-SA-EST:0 IPSEC-SA-EST:0
- Security Associations diagnostics ---------------------------------------
Host Name Lifetime Dpd DH NATT
LocIp-Port Type Expiry Action Hash Side
SN RemIp-Port State Replace Pending Cipher
--------------------------------------------------------------------
Host Name Lifetime Passive Esp Ah
Cli LocNet/LocMask Type Expiry Perm EspAuth AhAuth
SN RemNet/RemMask State Replace Tunnel EspCipher Pfs
---------------------------------------------------------------------------
*** NO SECURITY ASSOCIATION ***
[15:09:16] ABILIS_CPX:d d ipsec policy
RES:IpSec ---------------------------------------------------------------------
IP_Security_Protocol
BufferLength:64512 Date/Time:19/10/2020 15:09:27 TraceTime:260602213
------------------------------------------------------------------------------
ID NAME STATE NAT-SIDE SN-OWNER
SRC-FILTER DST-FILTER POLICY SA-BUNDLE
------------------------------------------------------------------------------
Outbound policies:
--------------------------------------------------------------------------
0 HOLD INSIDE NOBODY
001.001.002.000/24:0 001.001.001.000/24:0 IPSEC NONE
------------------------------------------------------------------------------
Inbound policies:
------------------------------------------------------------------------------
[15:09:27] ABILIS_CPX:d nat
*** SOME NET skipped due to IPSEC policies ***
*** use D NAT IPSEC or D NAT ALL to see them ***
Configured maps
-------------------------------------------------------------------------------
PR: [DESCR:]
INAT: ADD: SNET: DNET: ANET:
ONAT: SPO: DPO: APO: PAT:
SRES: DRES: PROT: TOUT:
-------------------------------------------------------------------------------
*** NO NAT ALIAS ENTRIES CONFIGURED ***
[15:09:29] ABILIS_CPX:d nat ipsec
NET skipped due to IPSEC policies
-------------------------------------------------------------------------------
SNET: DNET: INAT-ONAT:
-------------------------------------------------------------------------------
001.001.002.000/24 001.001.001.000/24 IN-IN
-------------------------------------------------------------------------------
[15:09:32] ABILIS_CPX:
Added protection to prevent system reboot in case that USB packet is corrupted (HW error).
DHCP: added 'cxDhcpStNoBufIn' statistic to cxDhcpStTable.
LDAP: Added cxLdapDgCliTable, cxLdapDgCliSesTable, cxLdapStCliTable and cxLdapStCliSesTable for Client diagnostics and statistics.
TCP: Added diagnostic variable cxTcpStConLocPort2.
HTTP: Added diagnostic variables cxHttpDgCurTcpRWin, cxHttpDgCurTcpSWin, cxHttpDgConLocPortPlain, cxHttpDgConLocPortSsl. Obsoleted cxHttpDgConLocPort.
VRRP: Extended range of cxVrrpDgRouterIndex and of cxVrrpStRouterIndex from [0..15] to [0..63].
SIP channel diagnostics/statistics: updated 'cxCtiSipDgChCalled' and 'cxCtiSipStChCalled' length in MIB because they can be up to 30 characters long.
CTI connection diagnostics: updated 'cxCtiSysDgConCdi' and 'cxCtiSysDgConCdo' length in MIB because they can be up to 30 characters long.
All bugfixes up to 8.9.4 are included in 8.10.0
None
Copyright © Abilis