Lloyd Thomas,

I just noticed you reply me directly. Please post the answer to the mailing list. This will help someone in the future.

===========

Call-ID:        2d9a6489-7762dc9c-a2fb31a7@192.168.101.11
User:           1000@188.222.85.33
Contact:        "user" <sip:1000@192.168.101.11:5060>
Agent:          PolycomSoundPointIP-SPIP_550-UA/3.2.3.1734
Status:         Registered(UDP)(unknown) EXP(2011-02-18 21:33:10) EXPSECS(6838)
Host:           phiFS1
IP:             188.222.85.32
Port:           38532
Auth-User:      1000
Auth-Realm:     188.222.85.33
MWI-Account:    1000@188.222.85.33

Call-ID:        70202574-4ecbe83f-71727f5e@192.168.101.12
User:           1001@188.222.85.33
Contact:        "user" <sip:1001@192.168.101.12:5060>
Agent:          PolycomSoundPointIP-SPIP_550-UA/3.2.3.1734
Status:         Registered(UDP)(unknown) EXP(2011-02-18 21:35:24) EXPSECS(6972)
Host:           phiFS1
IP:             188.222.85.32
Port:           38596
Auth-User:      1001
Auth-Realm:     188.222.85.33
MWI-Account:    1001@188.222.85.33

Total items returned: 2

=================

Here is the Solution for the problem...


1. Add the following to the user 1000.xml and 1001.xml

<param name="sip-force-contact" value="NDLB-connectile-dysfunction"/>

2.sip_profiles/internal.xml make sure the following line enable.

<param name="NDLB-force-rport" value="safe"/> 

3. Reload the profiles / Reload settings

4. Reboot the phone

---

in your registration the following not correct.  see both NAT show 5060

Contact:        "user" <sip:1000@192.168.101.11:5060>

Contact:        "user" <sip:1001@192.168.101.12:5060>


Thanks
Lloyd
On Fri, Feb 18, 2011 at 2:27 PM, Steven Ayre <steveayre@gmail.com> wrote:
What's the error?

"Rejected by acl "domains". Falling back to Digest auth."?

That means that the IP wasn't in the ACL, so it's going to do a Digest password authentication. It rejects the 1st INVITE with a 407 which contains a challenge which allows the client to send another INVITE with the digest of the password to authenticate by password.

If you're authenticating by password, then that message is completely normal.

How do you want to authenticate the phones? By IP or by password?

-Steve



On 18 February 2011 17:48, lloyd thomas <lloydie.t@gmail.com> wrote:
I have put my FS box on a public IP address so that it can serve phones at remote sites. I have not set up any providers on it yet.
I would like to make an internal call between two extensions, but I get the following error when I try to call

freeswitch@internal> [DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [Content-Type] = [log/data]
[DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [Content-Length] = [121]
[DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [Log-Level] = [7]
[DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [Text-Channel] = [0]
[DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [Log-File] = [sofia.c]
[DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [Log-Func] = [sofia_handle_sip_i_invite]
[DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [Log-Line] = [6081]
[DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [User-Data] = []
[DEBUG] libs/esl/src/esl.c:1111 esl_recv_event() RECV MESSAGE
Event-Name: SOCKET_DATA
Content-Type: log/data
Content-Length: 121
Log-Level: 7
Text-Channel: 0
Log-File: sofia.c
Log-Func: sofia_handle_sip_i_invite
Log-Line: 6081
User-Data: _undef_

2011-02-18 17:41:40.638553 [DEBUG] sofia.c:6081 IP 188.221.84.33 Rejected by acl "domains". Falling back to Digest auth.

2011-02-18 17:41:40.638553 [DEBUG] sofia.c:6081 IP 188.221.84.33 Rejected by acl "domains". Falling back to Digest auth.


I am using two polycom 550's to test this.
Any Ideas?

Thanks Lloydie T





_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org