That happens with both gateways though, one works and the other doesn't. Would the rport have anything to do with the registration failing?

The big difference to me is that the working gateway replies a 401 Unauthorized containing:

WWW-Authenticate: Digest realm="pxextmy.redvoiss.net", nonce="4acac8fe248a9075a13773274684392a65a40240", qop="auth".

Whereas the non-working gateway's 401 has:

WWW-Authenticate: Digest realm="216.72.10.39", nonce="4acac08249c439decb2bea539282faf755c80b0c".

What does the qop parameter stand for? Apparently because of that parameter, FS sends a new REGISTER including this:

Authorization: Digest username="xxxxxxxxx", realm="pxextmy.redvoiss.net", nonce="4acac8fe248a9075a13773274684392a65a40240", cnonce="h1DCSizTEi2eMQAdCe9KJA", algorithm=MD5, uri="sip:pxextmy.redvoiss.net", response="05adb2a7f9d7772e57dc846257484f5d", qop=auth, nc=00000001.

Instead, on the non-working gateway case, FS sends a REGISTER with this:

Authorization: Digest username="yyyyyyyyy", realm="216.72.10.39", nonce="4acac08249c439decb2bea539282faf755c80b0c", algorithm=MD5, uri="sip:216.72.10.39", response="8311db7666779df89d5223e16a611826".

Notice the absence of the qop and nc parameters. I'm guessing the lack of those parameters causes the gateway (SIP server) to use another nonce and hence reject the mismatching REGISTER.

BTW, registration from an X-Lite softphone works.

Thanks!

Nicolas

On Tue, Oct 6, 2009 at 10:31 AM, Brian West <brian@freeswitch.org> wrote:

This looks like you have an ALG messing with packets... notice it says rport 5080 but we are sending to 5060.

/b

On Oct 5, 2009, at 11:42 PM, Nicolas Brenner wrote:

Ignore my previous email, the traces were incomplete, got much better (and complete) traces with ngrep (found a suggestion from Brian in the list archive, thanks!)

The gateway that registers:

- http://pastebin.freeswitch.org/10607

The one that doesn't:

- http://pastebin.freeswitch.org/10608

Thanks again for your time and help!

Nicolas

On Tue, Oct 6, 2009 at 12:19 AM, Nicolas Brenner <nicolas@medularis.com> wrote:

There was no sane way of doing that, so I ended up logging the trace from the cli.

_______________________________________________
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org