Hi! I had a user registered using TLS transport. That was working fine but I want to change the ATA over to use UDP instead. All I thought I should have to do was to change the transport and ports used to register in the ATA (SPA3102). However, when I do this, FS responds with Forbidden. When I change the settings back to use TCP or TLS, registration is successful. What would cause FS to respond with forbidden? I do not change the username/password fields in either case. Thanks
Look at the FreeSWITCH debug logs and compare the differences, they should tell you why. Mike On Feb 10, 2010, at 9:24 PM, Mark Campbell-Smith wrote:
Hi!
I had a user registered using TLS transport. That was working fine but I want to change the ATA over to use UDP instead.
All I thought I should have to do was to change the transport and ports used to register in the ATA (SPA3102). However, when I do this, FS responds with Forbidden.
When I change the settings back to use TCP or TLS, registration is successful.
What would cause FS to respond with forbidden? I do not change the username/password fields in either case.
I don't see debug logs (fsctl debug_level 9 or loglevel 9) during the registration process. All I see is the sip messages when the sip trace is activated (403 Forbidden) Is there other debugging that I can enable? On Thu, Feb 11, 2010 at 4:25 PM, Michael Jerris <mike@jerris.com> wrote:
Look at the FreeSWITCH debug logs and compare the differences, they should tell you why.
Mike
On Feb 10, 2010, at 9:24 PM, Mark Campbell-Smith wrote:
Hi!
I had a user registered using TLS transport. That was working fine but I want to change the ATA over to use UDP instead.
All I thought I should have to do was to change the transport and ports used to register in the ATA (SPA3102). However, when I do this, FS responds with Forbidden.
When I change the settings back to use TCP or TLS, registration is successful.
What would cause FS to respond with forbidden? I do not change the username/password fields in either case.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
you can crank up the sofia loglevel as well Mike On Feb 11, 2010, at 4:31 AM, Mark Campbell-Smith wrote:
I don't see debug logs (fsctl debug_level 9 or loglevel 9) during the registration process.
All I see is the sip messages when the sip trace is activated (403 Forbidden)
Is there other debugging that I can enable?
On Thu, Feb 11, 2010 at 4:25 PM, Michael Jerris <mike@jerris.com> wrote:
Look at the FreeSWITCH debug logs and compare the differences, they should tell you why.
Mike
On Feb 10, 2010, at 9:24 PM, Mark Campbell-Smith wrote:
Hi!
I had a user registered using TLS transport. That was working fine but I want to change the ATA over to use UDP instead.
All I thought I should have to do was to change the transport and ports used to register in the ATA (SPA3102). However, when I do this, FS responds with Forbidden.
When I change the settings back to use TCP or TLS, registration is successful.
What would cause FS to respond with forbidden? I do not change the username/password fields in either case.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
ah thats true... The trace is not too readable to me, but may give some insight to someone that can read the sofia logs.... recv 752 bytes from udp/[121.xxx.xxx.xxx]:5060 at 10:10:37.803288: ------------------------------------------------------------------------ REGISTER sip:mydns.dyndns.org SIP/2.0 Via: SIP/2.0/UDP 121.xxx.xxx.xxx:5060;branch=z9hG4bK-9052c91f From: 2000 <sip:2000@mydns.dyndns.org>;tag=7a9dbbbfa691136do0 To: 2000 <sip:2000@mydns.dyndns.org> Call-ID: 610db38-dd3b511f@121.xxx.xxx.xxx CSeq: 32330 REGISTER Contact: 2000 <sip:2000@121.xxx.xxx.xxx:5060>;expires=900 Authorization: Digest username="2000", realm="mydns.dyndns.org", nonce="b3298cfe-16f5-11df-9734-e77ba7a22ac3", uri="sip:mydns.dyndns.org", response="724fca542ce08d3f12b9ba1043bebb0c", algorithm=MD5, qop="1225e2f1" Max-Forwards: 70 User-Agent: Linksys/SPA3102-5.1.10(GW) Supported: x-sipura Supported: replaces Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER Content-Length: 0 ------------------------------------------------------------------------ tport_deliver(0x97cde80): msg 0x98297e8 (752 bytes) from udp/121.xxx.xxx.xxx:5060/sip next=(nil) nta: received REGISTER sip:mydns.dyndns.org SIP/2.0 (CSeq 32330) nta: REGISTER (32330) going to a default leg nua: nua_stack_process_request: entering nua: nh_create: entering nua: nh_create_handle: entering nua: nua_stack_set_params: entering soa_clone(static::0x97cc698, 0x9794808, 0x981cb70) called soa_set_params(static::0x9758ba8, ...) called nua(0x981cb70): event i_register 100 Trying nua: nua_application_event: entering nua: nua_respond: entering nua(0x981cb70): sent signal r_respond nua: nua_handle_destroy: entering nua(0x981cb70): sent signal r_destroy nua: nua_handle_magic: entering nua: nua_handle_destroy: entering nua(0x981cb70): recv signal r_respond 403 Forbidden nua: nua_stack_set_params: entering soa_set_params(static::0x9758ba8, ...) called tport_tsend(0x97cde80) tpn = UDP/121.xxx.xxx.xxx:5060 tport_resolve addrinfo = 121.xxx.xxx.xxx:5060 tport_by_addrinfo(0x97cde80): not found by name UDP/121.xxx.xxx.xxx:5060 tport_vsend(0x97cde80): 495 bytes of 495 to udp/121.xxx.xxx.xxx:5060 tport_vsend returned 495 send 495 bytes to udp/[121.xxx.xxx.xxx]:5060 at 10:10:37.812955: ------------------------------------------------------------------------ SIP/2.0 403 Forbidden On Thu, Feb 11, 2010 at 8:57 PM, Michael Jerris <mike@jerris.com> wrote:
you can crank up the sofia loglevel as well
Mike
On Feb 11, 2010, at 4:31 AM, Mark Campbell-Smith wrote:
I don't see debug logs (fsctl debug_level 9 or loglevel 9) during the registration process.
All I see is the sip messages when the sip trace is activated (403 Forbidden)
Is there other debugging that I can enable?
On Thu, Feb 11, 2010 at 4:25 PM, Michael Jerris <mike@jerris.com> wrote:
Look at the FreeSWITCH debug logs and compare the differences, they should tell you why.
Mike
On Feb 10, 2010, at 9:24 PM, Mark Campbell-Smith wrote:
Hi!
I had a user registered using TLS transport. That was working fine but I want to change the ATA over to use UDP instead.
All I thought I should have to do was to change the transport and ports used to register in the ATA (SPA3102). However, when I do this, FS responds with Forbidden.
When I change the settings back to use TCP or TLS, registration is successful.
What would cause FS to respond with forbidden? I do not change the username/password fields in either case.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
how is this different from the working one? Mike On Feb 11, 2010, at 5:13 AM, Mark Campbell-Smith wrote:
ah thats true... The trace is not too readable to me, but may give some insight to someone that can read the sofia logs....
recv 752 bytes from udp/[121.xxx.xxx.xxx]:5060 at 10:10:37.803288: ------------------------------------------------------------------------ REGISTER sip:mydns.dyndns.org SIP/2.0 Via: SIP/2.0/UDP 121.xxx.xxx.xxx:5060;branch=z9hG4bK-9052c91f From: 2000 <sip:2000@mydns.dyndns.org>;tag=7a9dbbbfa691136do0 To: 2000 <sip:2000@mydns.dyndns.org> Call-ID: 610db38-dd3b511f@121.xxx.xxx.xxx CSeq: 32330 REGISTER Contact: 2000 <sip:2000@121.xxx.xxx.xxx:5060>;expires=900 Authorization: Digest username="2000", realm="mydns.dyndns.org", nonce="b3298cfe-16f5-11df-9734-e77ba7a22ac3", uri="sip:mydns.dyndns.org", response="724fca542ce08d3f12b9ba1043bebb0c", algorithm=MD5, qop="1225e2f1" Max-Forwards: 70 User-Agent: Linksys/SPA3102-5.1.10(GW) Supported: x-sipura Supported: replaces Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER Content-Length: 0
------------------------------------------------------------------------ tport_deliver(0x97cde80): msg 0x98297e8 (752 bytes) from udp/121.xxx.xxx.xxx:5060/sip next=(nil) nta: received REGISTER sip:mydns.dyndns.org SIP/2.0 (CSeq 32330) nta: REGISTER (32330) going to a default leg nua: nua_stack_process_request: entering nua: nh_create: entering nua: nh_create_handle: entering nua: nua_stack_set_params: entering soa_clone(static::0x97cc698, 0x9794808, 0x981cb70) called soa_set_params(static::0x9758ba8, ...) called nua(0x981cb70): event i_register 100 Trying nua: nua_application_event: entering nua: nua_respond: entering nua(0x981cb70): sent signal r_respond nua: nua_handle_destroy: entering nua(0x981cb70): sent signal r_destroy nua: nua_handle_magic: entering nua: nua_handle_destroy: entering nua(0x981cb70): recv signal r_respond 403 Forbidden nua: nua_stack_set_params: entering soa_set_params(static::0x9758ba8, ...) called tport_tsend(0x97cde80) tpn = UDP/121.xxx.xxx.xxx:5060 tport_resolve addrinfo = 121.xxx.xxx.xxx:5060 tport_by_addrinfo(0x97cde80): not found by name UDP/121.xxx.xxx.xxx:5060 tport_vsend(0x97cde80): 495 bytes of 495 to udp/121.xxx.xxx.xxx:5060 tport_vsend returned 495 send 495 bytes to udp/[121.xxx.xxx.xxx]:5060 at 10:10:37.812955: ------------------------------------------------------------------------ SIP/2.0 403 Forbidden
On Thu, Feb 11, 2010 at 8:57 PM, Michael Jerris <mike@jerris.com> wrote:
you can crank up the sofia loglevel as well
Mike
On Feb 11, 2010, at 4:31 AM, Mark Campbell-Smith wrote:
I don't see debug logs (fsctl debug_level 9 or loglevel 9) during the registration process.
All I see is the sip messages when the sip trace is activated (403 Forbidden)
Is there other debugging that I can enable?
On Thu, Feb 11, 2010 at 4:25 PM, Michael Jerris <mike@jerris.com> wrote:
Look at the FreeSWITCH debug logs and compare the differences, they should tell you why.
Mike
This is the working one with TLS... does this shed any light on why this user can not register using UDP? ------------------------------------------------------------------------ REGISTER sip:mydns.dyndns.org:442 SIP/2.0 Via: SIP/2.0/TLS 121.xxx.xxx.xxx:10371;branch=z9hG4bK-9465a0f9;rport From: 2000 <sip:2000@mydns.dyndns.org:442>;tag=34ac954c7d2abf51o0 To: 2000 <sip:2000@mydns.dyndns.org:442> Call-ID: 8657c383-fea70d0a@10.0.0.1 CSeq: 31055 REGISTER Max-Forwards: 70 Authorization: Digest username="2000",realm="mydns.dyndns.org",nonce="5000f49a-1836-11df-985e-e77ba7a22ac3",uri="sip:mydns.dyndns.org:442",algorithm=MD5,response="2bad1d5fadbb0465b0a513352db0292b",qop=auth,nc=00000001,cnonce="6951ee10" Contact: 2000 <sip:2000@121.xxx.xxx.xxx:10371;transport=tls>;expires=1800 User-Agent: Linksys/SPA3102-5.1.10(GW) Content-Length: 0 Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER Supported: x-sipura, replaces ------------------------------------------------------------------------ tport_deliver(0xb6d07cd8): msg 0xb6da3cc0 (795 bytes) from tls/121.xxx.xxx.xxx:10371/sips next=(nil) nta: received REGISTER sip:mydns.dyndns.org:442 SIP/2.0 (CSeq 31055) nta: REGISTER (31055) going to a default leg nua: nua_stack_process_request: entering nua: nh_create: entering nua: nh_create_handle: entering nua: nua_stack_set_params: entering soa_clone(static::0x97cc698, 0x9794808, 0xb6d83680) called soa_set_params(static::0xb6d77020, ...) called nua(0xb6d83680): event i_register 100 Trying nua: nua_application_event: entering nua: nua_respond: entering nua(0xb6d83680): sent signal r_respond nua: nua_handle_destroy: entering nua(0xb6d83680): sent signal r_destroy nua: nua_handle_magic: entering nua: nua_handle_destroy: entering tport(0xb6d07cd8): reset timer nua(0xb6d83680): recv signal r_respond 200 OK nua: nua_stack_set_params: entering soa_set_params(static::0xb6d77020, ...) called tport_tsend(0xb6d07cd8) tpn = TLS/121.xxx.xxx.xxx:10371 tport_tls_writevec: vec 0xb6d2eb80 0xb6da4270 92 (92) tport_tls_writevec: vec 0xb6d2eb80 0xb6ded80a 76 (76) tport_tls_writevec: vec 0xb6d2eb80 0xb6da42cc 69 (69) tport_tls_writevec: vec 0xb6d2eb80 0xb6ded889 59 (59) tport_tls_writevec: vec 0xb6d2eb80 0xb6da4311 329 (329) tport_vsend(0xb6d07cd8): 625 bytes of 625 to tls/121.xxx.xxx.xxx:10371 tport_vsend returned 625 send 625 bytes to tls/[121.xxx.xxx.xxx]:10371 at 00:25:39.795356: ------------------------------------------------------------------------ SIP/2.0 200 OK On Fri, Feb 12, 2010 at 9:22 AM, Michael Jerris <mike@jerris.com> wrote:
how is this different from the working one?
Mike
On Feb 11, 2010, at 5:13 AM, Mark Campbell-Smith wrote:
ah thats true... The trace is not too readable to me, but may give some insight to someone that can read the sofia logs....
recv 752 bytes from udp/[121.xxx.xxx.xxx]:5060 at 10:10:37.803288: ------------------------------------------------------------------------ REGISTER sip:mydns.dyndns.org SIP/2.0 Via: SIP/2.0/UDP 121.xxx.xxx.xxx:5060;branch=z9hG4bK-9052c91f From: 2000 <sip:2000@mydns.dyndns.org>;tag=7a9dbbbfa691136do0 To: 2000 <sip:2000@mydns.dyndns.org> Call-ID: 610db38-dd3b511f@121.xxx.xxx.xxx CSeq: 32330 REGISTER Contact: 2000 <sip:2000@121.xxx.xxx.xxx:5060>;expires=900 Authorization: Digest username="2000", realm="mydns.dyndns.org", nonce="b3298cfe-16f5-11df-9734-e77ba7a22ac3", uri="sip:mydns.dyndns.org", response="724fca542ce08d3f12b9ba1043bebb0c", algorithm=MD5, qop="1225e2f1" Max-Forwards: 70 User-Agent: Linksys/SPA3102-5.1.10(GW) Supported: x-sipura Supported: replaces Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER Content-Length: 0
------------------------------------------------------------------------ tport_deliver(0x97cde80): msg 0x98297e8 (752 bytes) from udp/121.xxx.xxx.xxx:5060/sip next=(nil) nta: received REGISTER sip:mydns.dyndns.org SIP/2.0 (CSeq 32330) nta: REGISTER (32330) going to a default leg nua: nua_stack_process_request: entering nua: nh_create: entering nua: nh_create_handle: entering nua: nua_stack_set_params: entering soa_clone(static::0x97cc698, 0x9794808, 0x981cb70) called soa_set_params(static::0x9758ba8, ...) called nua(0x981cb70): event i_register 100 Trying nua: nua_application_event: entering nua: nua_respond: entering nua(0x981cb70): sent signal r_respond nua: nua_handle_destroy: entering nua(0x981cb70): sent signal r_destroy nua: nua_handle_magic: entering nua: nua_handle_destroy: entering nua(0x981cb70): recv signal r_respond 403 Forbidden nua: nua_stack_set_params: entering soa_set_params(static::0x9758ba8, ...) called tport_tsend(0x97cde80) tpn = UDP/121.xxx.xxx.xxx:5060 tport_resolve addrinfo = 121.xxx.xxx.xxx:5060 tport_by_addrinfo(0x97cde80): not found by name UDP/121.xxx.xxx.xxx:5060 tport_vsend(0x97cde80): 495 bytes of 495 to udp/121.xxx.xxx.xxx:5060 tport_vsend returned 495 send 495 bytes to udp/[121.xxx.xxx.xxx]:5060 at 10:10:37.812955: ------------------------------------------------------------------------ SIP/2.0 403 Forbidden
On Thu, Feb 11, 2010 at 8:57 PM, Michael Jerris <mike@jerris.com> wrote:
you can crank up the sofia loglevel as well
Mike
On Feb 11, 2010, at 4:31 AM, Mark Campbell-Smith wrote:
I don't see debug logs (fsctl debug_level 9 or loglevel 9) during the registration process.
All I see is the sip messages when the sip trace is activated (403 Forbidden)
Is there other debugging that I can enable?
On Thu, Feb 11, 2010 at 4:25 PM, Michael Jerris <mike@jerris.com> wrote:
Look at the FreeSWITCH debug logs and compare the differences, they should tell you why.
Mike
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
More testing. The device registers successfully to my SIP provider directly using UDP - why would FS be rejecting the registration request? On Sat, Feb 13, 2010 at 11:29 AM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
This is the working one with TLS... does this shed any light on why this user can not register using UDP?
------------------------------------------------------------------------ REGISTER sip:mydns.dyndns.org:442 SIP/2.0 Via: SIP/2.0/TLS 121.xxx.xxx.xxx:10371;branch=z9hG4bK-9465a0f9;rport From: 2000 <sip:2000@mydns.dyndns.org:442>;tag=34ac954c7d2abf51o0 To: 2000 <sip:2000@mydns.dyndns.org:442> Call-ID: 8657c383-fea70d0a@10.0.0.1 CSeq: 31055 REGISTER Max-Forwards: 70 Authorization: Digest username="2000",realm="mydns.dyndns.org",nonce="5000f49a-1836-11df-985e-e77ba7a22ac3",uri="sip:mydns.dyndns.org:442",algorithm=MD5,response="2bad1d5fadbb0465b0a513352db0292b",qop=auth,nc=00000001,cnonce="6951ee10" Contact: 2000 <sip:2000@121.xxx.xxx.xxx:10371;transport=tls>;expires=1800 User-Agent: Linksys/SPA3102-5.1.10(GW) Content-Length: 0 Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER Supported: x-sipura, replaces
------------------------------------------------------------------------ tport_deliver(0xb6d07cd8): msg 0xb6da3cc0 (795 bytes) from tls/121.xxx.xxx.xxx:10371/sips next=(nil) nta: received REGISTER sip:mydns.dyndns.org:442 SIP/2.0 (CSeq 31055) nta: REGISTER (31055) going to a default leg nua: nua_stack_process_request: entering nua: nh_create: entering nua: nh_create_handle: entering nua: nua_stack_set_params: entering soa_clone(static::0x97cc698, 0x9794808, 0xb6d83680) called soa_set_params(static::0xb6d77020, ...) called nua(0xb6d83680): event i_register 100 Trying nua: nua_application_event: entering nua: nua_respond: entering nua(0xb6d83680): sent signal r_respond nua: nua_handle_destroy: entering nua(0xb6d83680): sent signal r_destroy nua: nua_handle_magic: entering nua: nua_handle_destroy: entering tport(0xb6d07cd8): reset timer nua(0xb6d83680): recv signal r_respond 200 OK nua: nua_stack_set_params: entering soa_set_params(static::0xb6d77020, ...) called tport_tsend(0xb6d07cd8) tpn = TLS/121.xxx.xxx.xxx:10371 tport_tls_writevec: vec 0xb6d2eb80 0xb6da4270 92 (92) tport_tls_writevec: vec 0xb6d2eb80 0xb6ded80a 76 (76) tport_tls_writevec: vec 0xb6d2eb80 0xb6da42cc 69 (69) tport_tls_writevec: vec 0xb6d2eb80 0xb6ded889 59 (59) tport_tls_writevec: vec 0xb6d2eb80 0xb6da4311 329 (329) tport_vsend(0xb6d07cd8): 625 bytes of 625 to tls/121.xxx.xxx.xxx:10371 tport_vsend returned 625 send 625 bytes to tls/[121.xxx.xxx.xxx]:10371 at 00:25:39.795356: ------------------------------------------------------------------------ SIP/2.0 200 OK
On Fri, Feb 12, 2010 at 9:22 AM, Michael Jerris <mike@jerris.com> wrote:
how is this different from the working one?
Mike
On Feb 11, 2010, at 5:13 AM, Mark Campbell-Smith wrote:
ah thats true... The trace is not too readable to me, but may give some insight to someone that can read the sofia logs....
recv 752 bytes from udp/[121.xxx.xxx.xxx]:5060 at 10:10:37.803288: ------------------------------------------------------------------------ REGISTER sip:mydns.dyndns.org SIP/2.0 Via: SIP/2.0/UDP 121.xxx.xxx.xxx:5060;branch=z9hG4bK-9052c91f From: 2000 <sip:2000@mydns.dyndns.org>;tag=7a9dbbbfa691136do0 To: 2000 <sip:2000@mydns.dyndns.org> Call-ID: 610db38-dd3b511f@121.xxx.xxx.xxx CSeq: 32330 REGISTER Contact: 2000 <sip:2000@121.xxx.xxx.xxx:5060>;expires=900 Authorization: Digest username="2000", realm="mydns.dyndns.org", nonce="b3298cfe-16f5-11df-9734-e77ba7a22ac3", uri="sip:mydns.dyndns.org", response="724fca542ce08d3f12b9ba1043bebb0c", algorithm=MD5, qop="1225e2f1" Max-Forwards: 70 User-Agent: Linksys/SPA3102-5.1.10(GW) Supported: x-sipura Supported: replaces Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER Content-Length: 0
------------------------------------------------------------------------ tport_deliver(0x97cde80): msg 0x98297e8 (752 bytes) from udp/121.xxx.xxx.xxx:5060/sip next=(nil) nta: received REGISTER sip:mydns.dyndns.org SIP/2.0 (CSeq 32330) nta: REGISTER (32330) going to a default leg nua: nua_stack_process_request: entering nua: nh_create: entering nua: nh_create_handle: entering nua: nua_stack_set_params: entering soa_clone(static::0x97cc698, 0x9794808, 0x981cb70) called soa_set_params(static::0x9758ba8, ...) called nua(0x981cb70): event i_register 100 Trying nua: nua_application_event: entering nua: nua_respond: entering nua(0x981cb70): sent signal r_respond nua: nua_handle_destroy: entering nua(0x981cb70): sent signal r_destroy nua: nua_handle_magic: entering nua: nua_handle_destroy: entering nua(0x981cb70): recv signal r_respond 403 Forbidden nua: nua_stack_set_params: entering soa_set_params(static::0x9758ba8, ...) called tport_tsend(0x97cde80) tpn = UDP/121.xxx.xxx.xxx:5060 tport_resolve addrinfo = 121.xxx.xxx.xxx:5060 tport_by_addrinfo(0x97cde80): not found by name UDP/121.xxx.xxx.xxx:5060 tport_vsend(0x97cde80): 495 bytes of 495 to udp/121.xxx.xxx.xxx:5060 tport_vsend returned 495 send 495 bytes to udp/[121.xxx.xxx.xxx]:5060 at 10:10:37.812955: ------------------------------------------------------------------------ SIP/2.0 403 Forbidden
On Thu, Feb 11, 2010 at 8:57 PM, Michael Jerris <mike@jerris.com> wrote:
you can crank up the sofia loglevel as well
Mike
On Feb 11, 2010, at 4:31 AM, Mark Campbell-Smith wrote:
I don't see debug logs (fsctl debug_level 9 or loglevel 9) during the registration process.
All I see is the sip messages when the sip trace is activated (403 Forbidden)
Is there other debugging that I can enable?
On Thu, Feb 11, 2010 at 4:25 PM, Michael Jerris <mike@jerris.com> wrote:
Look at the FreeSWITCH debug logs and compare the differences, they should tell you why.
Mike
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Can't tell since you keep cutting the lines required to figure this out... FULL console log with FULL sip trace. You always cut out what I wanna see. Just get a pcap. /b On Feb 13, 2010, at 5:43 AM, Mark Campbell-Smith wrote:
More testing. The device registers successfully to my SIP provider directly using UDP - why would FS be rejecting the registration request?
Thanks Brian. The full log is pasted here http://pastebin.freeswitch.org/12133 On Sun, Feb 14, 2010 at 2:08 AM, Brian West <brian@freeswitch.org> wrote:
Can't tell since you keep cutting the lines required to figure this out... FULL console log with FULL sip trace. You always cut out what I wanna see. Just get a pcap.
/b
On Feb 13, 2010, at 5:43 AM, Mark Campbell-Smith wrote:
More testing. The device registers successfully to my SIP provider directly using UDP - why would FS be rejecting the registration request?
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
You know you could have obscured the first part of the IP and not the LAST... kinda removes the ability to tell WHO sent what. From that log I guess your password is wrong. /b On Feb 13, 2010, at 3:36 PM, Mark Campbell-Smith wrote:
Thanks Brian.
The full log is pasted here http://pastebin.freeswitch.org/12133
On Sun, Feb 14, 2010 at 2:08 AM, Brian West <brian@freeswitch.org> wrote:
Can't tell since you keep cutting the lines required to figure this out... FULL console log with FULL sip trace. You always cut out what I wanna see. Just get a pcap.
/b
On Feb 13, 2010, at 5:43 AM, Mark Campbell-Smith wrote:
More testing. The device registers successfully to my SIP provider directly using UDP - why would FS be rejecting the registration request?
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi, The sip trace provided only contains 4 SIP messages. Do you need the IP's to decode the messages? from udp/[121.xxx.xxx.xxx] is the SPA3102 from (udp/192.168.1.120:5060) is FS server I can register the device to all my voip providers successfully using UDP but it will not register to FS using UDP. It can register using TLS and TCP. Very confusing as to why that would be. On Sun, Feb 14, 2010 at 10:11 AM, Brian West <brian@freeswitch.org> wrote:
You know you could have obscured the first part of the IP and not the LAST... kinda removes the ability to tell WHO sent what.
From that log I guess your password is wrong.
/b
On Feb 13, 2010, at 3:36 PM, Mark Campbell-Smith wrote:
Thanks Brian.
The full log is pasted here http://pastebin.freeswitch.org/12133
On Sun, Feb 14, 2010 at 2:08 AM, Brian West <brian@freeswitch.org> wrote:
Can't tell since you keep cutting the lines required to figure this out... FULL console log with FULL sip trace. You always cut out what I wanna see. Just get a pcap.
/b
On Feb 13, 2010, at 5:43 AM, Mark Campbell-Smith wrote:
More testing. The device registers successfully to my SIP provider directly using UDP - why would FS be rejecting the registration request?
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Is the device behind nat with your FreeSWITCH? If so disable stun on the device. If FS is 192.168.1.120 and your device is 121.x.x.x something then I suspect its doing a hair pin thru your router. Your network is busted which is my final answer. /b On Feb 14, 2010, at 7:08 PM, Mark Campbell-Smith wrote:
Hi,
The sip trace provided only contains 4 SIP messages. Do you need the IP's to decode the messages?
from udp/[121.xxx.xxx.xxx] is the SPA3102 from (udp/192.168.1.120:5060) is FS server
I can register the device to all my voip providers successfully using UDP but it will not register to FS using UDP. It can register using TLS and TCP.
Very confusing as to why that would be.
FS and the ATA are on different networks. FS is nat'd (192.168.1.120, upnp enabled on the router) and the ATA is on the internet at another location. Any other ideas? On Mon, Feb 15, 2010 at 3:07 PM, Brian West <brian@freeswitch.org> wrote:
Is the device behind nat with your FreeSWITCH? If so disable stun on the device. If FS is 192.168.1.120 and your device is 121.x.x.x something then I suspect its doing a hair pin thru your router. Your network is busted which is my final answer.
/b
On Feb 14, 2010, at 7:08 PM, Mark Campbell-Smith wrote:
Hi,
The sip trace provided only contains 4 SIP messages. Do you need the IP's to decode the messages?
from udp/[121.xxx.xxx.xxx] is the SPA3102 from (udp/192.168.1.120:5060) is FS server
I can register the device to all my voip providers successfully using UDP but it will not register to FS using UDP. It can register using TLS and TCP.
Very confusing as to why that would be.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
A little more testing. I noticed that the Authorization field differs when TCP or UDP: UDP (fails) Digest username=\"2010\", realm=\"mydns.dyndns.org\", nonce=\"e5f119c6-19e9-11df-bd09-773b7a755f78\", uri=\"sip:mydns.dyndns.org:5060\", response=\"e37be3e49c159d4f98e8bd04b36f2bd7\", algorithm=MD5, qop=\"1fffcc9f\" TCP (works) Digest username=\"2010\",realm=\"mydns.dyndns.org\",nonce=\"5d9e75c2-19ea-11df-bd0b-773b7a755f78\",uri=\"sip:mydns.dyndns.org:5060\",algorithm=MD5,response=\"45ba55d3fbafcbf2bc2aa6418656ecc2\",qop=auth,nc=00000001,cnonce=\"3a650454\" Is qop = 1fffcc9f valid in SIP? Does a cnonce need to be included also? FS sends qop=auth in the Unauthorized response. Thanks On Mon, Feb 15, 2010 at 3:17 PM, Mark Campbell-Smith <mcampbellsmith@gmail.com> wrote:
FS and the ATA are on different networks. FS is nat'd (192.168.1.120, upnp enabled on the router) and the ATA is on the internet at another location.
Any other ideas?
On Mon, Feb 15, 2010 at 3:07 PM, Brian West <brian@freeswitch.org> wrote:
Is the device behind nat with your FreeSWITCH? If so disable stun on the device. If FS is 192.168.1.120 and your device is 121.x.x.x something then I suspect its doing a hair pin thru your router. Your network is busted which is my final answer.
/b
On Feb 14, 2010, at 7:08 PM, Mark Campbell-Smith wrote:
Hi,
The sip trace provided only contains 4 SIP messages. Do you need the IP's to decode the messages?
from udp/[121.xxx.xxx.xxx] is the SPA3102 from (udp/192.168.1.120:5060) is FS server
I can register the device to all my voip providers successfully using UDP but it will not register to FS using UDP. It can register using TLS and TCP.
Very confusing as to why that would be.
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Sounds like the device is BUSTED. :P /b On Feb 14, 2010, at 11:09 PM, Mark Campbell-Smith wrote:
A little more testing. I noticed that the Authorization field differs when TCP or UDP:
UDP (fails) Digest username=\"2010\", realm=\"mydns.dyndns.org\", nonce=\"e5f119c6-19e9-11df-bd09-773b7a755f78\", uri=\"sip:mydns.dyndns.org:5060\", response=\"e37be3e49c159d4f98e8bd04b36f2bd7\", algorithm=MD5, qop=\"1fffcc9f\"
TCP (works) Digest username=\"2010\",realm=\"mydns.dyndns.org\",nonce=\"5d9e75c2-19ea-11df-bd0b-773b7a755f78\",uri=\"sip:mydns.dyndns.org:5060\",algorithm=MD5,response=\"45ba55d3fbafcbf2bc2aa6418656ecc2\",qop=auth,nc=00000001,cnonce=\"3a650454\"
Is qop = 1fffcc9f valid in SIP? Does a cnonce need to be included also?
FS sends qop=auth in the Unauthorized response.
Thanks
Interesting... I wonder if we have to echo back the qop token? /b On Feb 14, 2010, at 11:09 PM, Mark Campbell-Smith wrote:
A little more testing. I noticed that the Authorization field differs when TCP or UDP:
UDP (fails) Digest username=\"2010\", realm=\"mydns.dyndns.org\", nonce=\"e5f119c6-19e9-11df-bd09-773b7a755f78\", uri=\"sip:mydns.dyndns.org:5060\", response=\"e37be3e49c159d4f98e8bd04b36f2bd7\", algorithm=MD5, qop=\"1fffcc9f\"
TCP (works) Digest username=\"2010\",realm=\"mydns.dyndns.org\",nonce=\"5d9e75c2-19ea-11df-bd0b-773b7a755f78\",uri=\"sip:mydns.dyndns.org:5060\",algorithm=MD5,response=\"45ba55d3fbafcbf2bc2aa6418656ecc2\",qop=auth,nc=00000001,cnonce=\"3a650454\"
Is qop = 1fffcc9f valid in SIP? Does a cnonce need to be included also?
FS sends qop=auth in the Unauthorized response.
Thanks
Ok looks like the token is not used at all in digest auth. This is the first time I have seen a device send back something other than auth or auth-int. /b On Feb 14, 2010, at 11:09 PM, Mark Campbell-Smith wrote:
A little more testing. I noticed that the Authorization field differs when TCP or UDP:
UDP (fails) Digest username=\"2010\", realm=\"mydns.dyndns.org\", nonce=\"e5f119c6-19e9-11df-bd09-773b7a755f78\", uri=\"sip:mydns.dyndns.org:5060\", response=\"e37be3e49c159d4f98e8bd04b36f2bd7\", algorithm=MD5, qop=\"1fffcc9f\"
TCP (works) Digest username=\"2010\",realm=\"mydns.dyndns.org\",nonce=\"5d9e75c2-19ea-11df-bd0b-773b7a755f78\",uri=\"sip:mydns.dyndns.org:5060\",algorithm=MD5,response=\"45ba55d3fbafcbf2bc2aa6418656ecc2\",qop=auth,nc=00000001,cnonce=\"3a650454\"
Is qop = 1fffcc9f valid in SIP? Does a cnonce need to be included also?
FS sends qop=auth in the Unauthorized response.
Thanks
Thanks for looking at that Brian. If the token is not used, I assume this is not the reason for FS rejecting the Registration attempt? Also, when is stale=true set in the WWW-Authentication? I notice that for this device, I do not see stale=true, but for all my other devices, I see stale=true (at least from the logs I've taken today). On Tue, Feb 16, 2010 at 2:03 AM, Brian West <brian@freeswitch.org> wrote:
Ok looks like the token is not used at all in digest auth. This is the first time I have seen a device send back something other than auth or auth-int. /b On Feb 14, 2010, at 11:09 PM, Mark Campbell-Smith wrote:
A little more testing. I noticed that the Authorization field differs when TCP or UDP:
UDP (fails) Digest username=\"2010\", realm=\"mydns.dyndns.org\", nonce=\"e5f119c6-19e9-11df-bd09-773b7a755f78\", uri=\"sip:mydns.dyndns.org:5060\", response=\"e37be3e49c159d4f98e8bd04b36f2bd7\", algorithm=MD5, qop=\"1fffcc9f\"
TCP (works) Digest username=\"2010\",realm=\"mydns.dyndns.org\",nonce=\"5d9e75c2-19ea-11df-bd0b-773b7a755f78\",uri=\"sip:mydns.dyndns.org:5060\",algorithm=MD5,response=\"45ba55d3fbafcbf2bc2aa6418656ecc2\",qop=auth,nc=00000001,cnonce=\"3a650454\"
Is qop = 1fffcc9f valid in SIP? Does a cnonce need to be included also?
FS sends qop=auth in the Unauthorized response.
Thanks
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I think your device is broken. /b On Feb 18, 2010, at 2:22 AM, Mark Campbell-Smith wrote:
Thanks for looking at that Brian. If the token is not used, I assume this is not the reason for FS rejecting the Registration attempt?
Also, when is stale=true set in the WWW-Authentication? I notice that for this device, I do not see stale=true, but for all my other devices, I see stale=true (at least from the logs I've taken today).
everyone chip in and send him a new phone so this thread can go away! On Thu, Feb 18, 2010 at 7:04 AM, Brian West <brian@freeswitch.org> wrote:
I think your device is broken.
/b
On Feb 18, 2010, at 2:22 AM, Mark Campbell-Smith wrote:
Thanks for looking at that Brian. If the token is not used, I assume this is not the reason for FS rejecting the Registration attempt?
Also, when is stale=true set in the WWW-Authentication? I notice that for this device, I do not see stale=true, but for all my other devices, I see stale=true (at least from the logs I've taken today).
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire AIM: anthm MSN:anthony_minessale@hotmail.com <MSN%3Aanthony_minessale@hotmail.com> GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com<PAYPAL%3Aanthony.minessale@gmail.com> IRC: irc.freenode.net #freeswitch FreeSWITCH Developer Conference sip:888@conference.freeswitch.org <sip%3A888@conference.freeswitch.org> iax:guest@conference.freeswitch.org/888 googletalk:conf+888@conference.freeswitch.org<googletalk%3Aconf%2B888@conference.freeswitch.org> pstn:+19193869900
Hi, I googled hours without real success. Is it possible to use a softphone in a local network and login into a registrar outside it within freeswitch as proxy and call and receive calls as normal ? I'd like to use this config because I need to check codec transcoding. Thank you Franck
I have to say this first.... Please DO NOT hijack threads. Click "new message", type the address and then your message and then press send. What you did is click reply... change the subject and then replace the body. That is how you hijack a thread. (the archive also lists them hijacked too.) Yes its possible. In fact the default config works like this. /b On Feb 18, 2010, at 10:36 AM, Madovsky wrote:
Hi,
I googled hours without real success. Is it possible to use a softphone in a local network and login into a registrar outside it within freeswitch as proxy and call and receive calls as normal ? I'd like to use this config because I need to check codec transcoding.
Thank you
Franck
----- Original Message ----- From: "Brian West" <brian@freeswitch.org> To: <freeswitch-users@lists.freeswitch.org> Sent: Thursday, February 18, 2010 11:44 AM Subject: Re: [Freeswitch-users] register sipphone to an outside networkregistrar within freeswitch
I have to say this first.... Please DO NOT hijack threads. Click "new message", type the address and then your message and then press send. What you did is click reply... change the subject and then replace the body. That is how you hijack a thread.
(the archive also lists them hijacked too.)
Yes its possible. In fact the default config works like this.
/b
On Feb 18, 2010, at 10:36 AM, Madovsky wrote:
Hi,
I googled hours without real success. Is it possible to use a softphone in a local network and login into a registrar outside it within freeswitch as proxy and call and receive calls as normal ? I'd like to use this config because I need to check codec transcoding.
Thank you
Franck
I know sorry I forgot to remove RE:
No that still hijacks the thread :P YOU MUST click new message. Because their are headers that are reflected back to the list server. /b On Feb 18, 2010, at 10:55 AM, Madovsky wrote:
I know sorry I forgot to remove RE:
participants (5)
-
Anthony Minessale
-
Brian West
-
Madovsky
-
Mark Campbell-Smith
-
Michael Jerris