[Freeswitch-users] Forbidden using UDP, works with TCP/TLS

Sat Feb 13 03:43:41 PST 2010

More testing. The device registers successfully to my SIP provider
directly using UDP - why would FS be rejecting the registration
request?

On Sat, Feb 13, 2010 at 11:29 AM, Mark Campbell-Smith
<mcampbellsmith at gmail.com> wrote:
> This is the working one with TLS... does this shed any light on why
> this user can not register using UDP?
>
>   ------------------------------------------------------------------------
>   REGISTER sip:mydns.dyndns.org:442 SIP/2.0
>   Via: SIP/2.0/TLS 121.xxx.xxx.xxx:10371;branch=z9hG4bK-9465a0f9;rport
>   From: 2000 <sip:2000 at mydns.dyndns.org:442>;tag=34ac954c7d2abf51o0
>   To: 2000 <sip:2000 at mydns.dyndns.org:442>
>   Call-ID: 8657c383-fea70d0a at 10.0.0.1
>   CSeq: 31055 REGISTER
>   Max-Forwards: 70
>   Authorization: Digest
> username="2000",realm="mydns.dyndns.org",nonce="5000f49a-1836-11df-985e-e77ba7a22ac3",uri="sip:mydns.dyndns.org:442",algorithm=MD5,response="2bad1d5fadbb0465b0a513352db0292b",qop=auth,nc=00000001,cnonce="6951ee10"
>   Contact: 2000 <sip:2000 at 121.xxx.xxx.xxx:10371;transport=tls>;expires=1800
>   User-Agent: Linksys/SPA3102-5.1.10(GW)
>   Content-Length: 0
>   Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER
>   Supported: x-sipura, replaces
>
>   ------------------------------------------------------------------------
> tport_deliver(0xb6d07cd8): msg 0xb6da3cc0 (795 bytes) from
> tls/121.xxx.xxx.xxx:10371/sips next=(nil)
> nta: received REGISTER sip:mydns.dyndns.org:442 SIP/2.0 (CSeq 31055)
> nta: REGISTER (31055) going to a default leg
> nua: nua_stack_process_request: entering
> nua: nh_create: entering
> nua: nh_create_handle: entering
> nua: nua_stack_set_params: entering
> soa_clone(static::0x97cc698, 0x9794808, 0xb6d83680) called
> soa_set_params(static::0xb6d77020, ...) called
> nua(0xb6d83680): event i_register 100 Trying
> nua: nua_application_event: entering
> nua: nua_respond: entering
> nua(0xb6d83680): sent signal r_respond
> nua: nua_handle_destroy: entering
> nua(0xb6d83680): sent signal r_destroy
> nua: nua_handle_magic: entering
> nua: nua_handle_destroy: entering
> tport(0xb6d07cd8): reset timer
> nua(0xb6d83680): recv signal r_respond 200 OK
> nua: nua_stack_set_params: entering
> soa_set_params(static::0xb6d77020, ...) called
> tport_tsend(0xb6d07cd8) tpn = TLS/121.xxx.xxx.xxx:10371
> tport_tls_writevec: vec 0xb6d2eb80 0xb6da4270 92 (92)
> tport_tls_writevec: vec 0xb6d2eb80 0xb6ded80a 76 (76)
> tport_tls_writevec: vec 0xb6d2eb80 0xb6da42cc 69 (69)
> tport_tls_writevec: vec 0xb6d2eb80 0xb6ded889 59 (59)
> tport_tls_writevec: vec 0xb6d2eb80 0xb6da4311 329 (329)
> tport_vsend(0xb6d07cd8): 625 bytes of 625 to tls/121.xxx.xxx.xxx:10371
> tport_vsend returned 625
> send 625 bytes to tls/[121.xxx.xxx.xxx]:10371 at 00:25:39.795356:
>   ------------------------------------------------------------------------
>   SIP/2.0 200 OK
>
> On Fri, Feb 12, 2010 at 9:22 AM, Michael Jerris <mike at jerris.com> wrote:
>> how is this different from the working one?
>>
>> Mike
>>
>> On Feb 11, 2010, at 5:13 AM, Mark Campbell-Smith wrote:
>>
>>> ah thats true... The trace is not too readable to me, but may give
>>> some insight to someone that can read the sofia logs....
>>>
>>>
>>> recv 752 bytes from udp/[121.xxx.xxx.xxx]:5060 at 10:10:37.803288:
>>>   ------------------------------------------------------------------------
>>>   REGISTER sip:mydns.dyndns.org SIP/2.0
>>>   Via: SIP/2.0/UDP 121.xxx.xxx.xxx:5060;branch=z9hG4bK-9052c91f
>>>   From: 2000 <sip:2000 at mydns.dyndns.org>;tag=7a9dbbbfa691136do0
>>>   To: 2000 <sip:2000 at mydns.dyndns.org>
>>>   Call-ID: 610db38-dd3b511f at 121.xxx.xxx.xxx
>>>   CSeq: 32330 REGISTER
>>>   Contact: 2000 <sip:2000 at 121.xxx.xxx.xxx:5060>;expires=900
>>>   Authorization: Digest username="2000", realm="mydns.dyndns.org",
>>> nonce="b3298cfe-16f5-11df-9734-e77ba7a22ac3",
>>> uri="sip:mydns.dyndns.org",
>>> response="724fca542ce08d3f12b9ba1043bebb0c", algorithm=MD5,
>>> qop="1225e2f1"
>>>   Max-Forwards: 70
>>>   User-Agent: Linksys/SPA3102-5.1.10(GW)
>>>   Supported: x-sipura
>>>   Supported: replaces
>>>   Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER
>>>   Content-Length: 0
>>>
>>>
>>>   ------------------------------------------------------------------------
>>> tport_deliver(0x97cde80): msg 0x98297e8 (752 bytes) from
>>> udp/121.xxx.xxx.xxx:5060/sip next=(nil)
>>> nta: received REGISTER sip:mydns.dyndns.org SIP/2.0 (CSeq 32330)
>>> nta: REGISTER (32330) going to a default leg
>>> nua: nua_stack_process_request: entering
>>> nua: nh_create: entering
>>> nua: nh_create_handle: entering
>>> nua: nua_stack_set_params: entering
>>> soa_clone(static::0x97cc698, 0x9794808, 0x981cb70) called
>>> soa_set_params(static::0x9758ba8, ...) called
>>> nua(0x981cb70): event i_register 100 Trying
>>> nua: nua_application_event: entering
>>> nua: nua_respond: entering
>>> nua(0x981cb70): sent signal r_respond
>>> nua: nua_handle_destroy: entering
>>> nua(0x981cb70): sent signal r_destroy
>>> nua: nua_handle_magic: entering
>>> nua: nua_handle_destroy: entering
>>> nua(0x981cb70): recv signal r_respond 403 Forbidden
>>> nua: nua_stack_set_params: entering
>>> soa_set_params(static::0x9758ba8, ...) called
>>> tport_tsend(0x97cde80) tpn = UDP/121.xxx.xxx.xxx:5060
>>> tport_resolve addrinfo = 121.xxx.xxx.xxx:5060
>>> tport_by_addrinfo(0x97cde80): not found by name UDP/121.xxx.xxx.xxx:5060
>>> tport_vsend(0x97cde80): 495 bytes of 495 to udp/121.xxx.xxx.xxx:5060
>>> tport_vsend returned 495
>>> send 495 bytes to udp/[121.xxx.xxx.xxx]:5060 at 10:10:37.812955:
>>>   ------------------------------------------------------------------------
>>>   SIP/2.0 403 Forbidden
>>>
>>> On Thu, Feb 11, 2010 at 8:57 PM, Michael Jerris <mike at jerris.com> wrote:
>>>> you can crank up the sofia loglevel as well
>>>>
>>>> Mike
>>>>
>>>> On Feb 11, 2010, at 4:31 AM, Mark Campbell-Smith wrote:
>>>>
>>>>> I don't see debug logs (fsctl debug_level 9 or loglevel 9) during the
>>>>> registration process.
>>>>>
>>>>> All I see is the sip messages when the sip trace is activated (403 Forbidden)
>>>>>
>>>>> Is there other debugging that I can enable?
>>>>>
>>>>> On Thu, Feb 11, 2010 at 4:25 PM, Michael Jerris <mike at jerris.com> wrote:
>>>>>> Look at the FreeSWITCH debug logs and compare the differences, they should tell you why.
>>>>>>
>>>>>> Mike
>>
>>
>> _______________________________________________
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>