[Freeswitch-users] gateway registration problem

[Russell Treleaven]

Is there NAT anywhere between the sip endpoints?


On Mon, Sep 21, 2015 at 11:49 AM, Mi Ke <mi.ke at null.net> wrote:

> Hi All,
>
> I want to register my FS machine (FreeSWITCH Version 1.6.0 - git 6762f14
> 2015-09-03 20:36:52Z 64bit - CentOS 6.7, selinux is disabled for debugging)
> as endpoint at another target SIP server (1.1.1.1). This is my gateways
> section:
>
>     <gateway name="1111">
>         <param name="register" value="true"/>
>         <param name="register-transport" value="udp"/>
>         <param name="username" value="1111"/>
>         <param name="realm" value="1.1.1.1"/>
>         <param name="password" value='my_strong_pass"/>
>         <param name="proxy" value="1.1.1.1"/>
>         <param name="expire-seconds" value="90"/>
>     </gateway>
>
> The problem is - a target server at 1.1.1.1 receives absolutely no packets
> from my FS machine and I'm getting constant registration timeouts:
>
> 2015-09-21 15:01:46.764466 [ERR] sofia_reg.c:2101 487020870 Registration
> Failed with status Request Timeout [408]. failure #1
> 2015-09-21 15:01:46.864501 [WARNING] sofia_reg.c:469 487020870 Failed
> Registration [408], setting retry to 30 seconds.
>
> Meanwhile, when I do UDP scan of port 5060 on 1.1.1.1 from FS machine, I
> see that port is opened:
>
> [root at srv]# nmap -sU -Pn -p U:5060 1.1.1.1
> Starting Nmap 5.51 ( http://nmap.org ) at 2015-09-21 15:28 EEST
> Nmap scan report for 1.1.1.1
> Host is up.
> PORT     STATE         SERVICE
> 5060/udp open|filtered sip
> Nmap done: 1 IP address (1 host up) scanned in 2.28 seconds
> [root at srv]#
>
> When I filter out port 5060 on target machine 1.1.1.1 I see appropriate
> lines in the log showing filtered requests:
>
> Sep 21 10:39:57 sip kernel: DROP IN=eth0 OUT= MAC=00:16:3c SRC=2.2.2.2
> DST=1.1.1.1 LEN=28 TOS=0x00 PREC=0x00 TTL=52 ID=10616 PROTO=UDP SPT=47229
> DPT=5060 LEN=8
> Sep 21 10:39:58 sip kernel: DROP IN=eth0 OUT= MAC=00:16:3c: SRC=2.2.2.2
> DST=1.1.1.1 LEN=28 TOS=0x00 PREC=0x00 TTL=47 ID=23653 PROTO=UDP SPT=47230
> DPT=5060 LEN=8
>
> Firewalls on both machines are off for debugging:
>
> [root at srv]# iptables -L -n
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
> [root at srv]#
>
> I've spent many hours while investigating that quest but still have no
> ideas on what's happening. I'll highly appreciate if someone can point on
> where else I can look to resolve my issue.
>
> Thanks in advance
>
> Mike
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150921/291ee390/attachment-0001.html