SWEET! Thank you. From: FreeSWITCH-users <freeswitch-users-bounces@lists.freeswitch.org> On Behalf Of Michael Avers Sent: Wednesday, April 3, 2019 6:57 PM To: freeswitch-users@lists.freeswitch.org Subject: Re: [Freeswitch-users] NAT'ed Aastra phones? Switch to TCP on the Aastra. Mike On Wed, Apr 3, 2019, at 5:41 PM, Sean Devoy wrote: Hi, A customer has Aastra phones and I can’t get them to work behind NAT. They are 6865i and 6867i ohones. The output from global siptrace on, is identical to problems I have seen in the past with phones behind NAT routers. The server is no behind NAT. The phone send Register, the server responds Unauth w/ nonce, the phone resends (but the CSeq: has not changed). That indicates that the UnAuth packet did not make it back to the phone. I have spend a LOT of hours working this issue out on CISCO and FANVIL phones, but not AASTRA. This site has a SONIC Firewall and has always been extremely difficult to work with. Any ideas on what to change would be welcome. I do have NDLB turned on. Below are the SIP packets. I have replaced my servers name with “MY-FQDN” to try and slow down the constant hacking attempts. Thanks in advance, Sean ------------------------------------------------------------------------ recv 769 bytes from udp/[73.191.9.70]:14883 at 21:07:47.028636: ------------------------------------------------------------------------ REGISTER sip:MY-FQDN:5060 SIP/2.0 Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bK812a131af68095df4 Route: <sip:MY-FQDN:5060;lr> Max-Forwards: 70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060> Call-ID: 3bba3912bea9e310 CSeq: 2114352391 REGISTER Accept-Language: en Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, OPTIONS, UPDATE, PRACK, SUBSCRIBE, INFO, PUBLISH Allow-Events: aastra-xml, vdp-session, talk, hold, conference, LocalModeStatus Contact: "Jay" <sip:120@192.168.2.143:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-1000-8000-00085D6D9FE5>";expires=50 Supported: path, gruu User-Agent: Aastra 6867i/5.0.0.2036 Content-Length: 0 ------------------------------------------------------------------------ send 673 bytes to udp/[73.191.9.70]:5060 at 21:07:47.029963: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bK812a131af68095df4;received=73.191.9.70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060>;tag=1HFr2FS9gN2HQ Call-ID: 3bba3912bea9e310 CSeq: 2114352391 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.2.22+git~20140309T212137Z~65fed130e5~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: path, replaces WWW-Authenticate: Digest realm="MY-FQDN", nonce="4f575c9d-4a48-4c9f-88ef-558fc0ecb901", algorithm=MD5, qop="auth" Content-Length: 0 ------------------------------------------------------------------------ recv 769 bytes from udp/[73.191.9.70]:14883 at 21:07:47.516673: ------------------------------------------------------------------------ REGISTER sip:MY-FQDN:5060 SIP/2.0 Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bK812a131af68095df4 Route: <sip:MY-FQDN:5060;lr> Max-Forwards: 70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060> Call-ID: 3bba3912bea9e310 CSeq: 2114352391 REGISTER Accept-Language: en Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, OPTIONS, UPDATE, PRACK, SUBSCRIBE, INFO, PUBLISH Allow-Events: aastra-xml, vdp-session, talk, hold, conference, LocalModeStatus Contact: "Jay" <sip:120@192.168.2.143:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-1000-8000-00085D6D9FE5>";expires=50 Supported: path, gruu User-Agent: Aastra 6867i/5.0.0.2036 Content-Length: 0 ------------------------------------------------------------------------ send 673 bytes to udp/[73.191.9.70]:5060 at 21:07:47.516883: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bK812a131af68095df4;received=73.191.9.70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060>;tag=1HFr2FS9gN2HQ Call-ID: 3bba3912bea9e310 CSeq: 2114352391 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.2.22+git~20140309T212137Z~65fed130e5~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: path, replaces WWW-Authenticate: Digest realm="MY-FQDN", nonce="4f575c9d-4a48-4c9f-88ef-558fc0ecb901", algorithm=MD5, qop="auth" Content-Length: 0 ------------------------------------------------------------------------ recv 769 bytes from udp/[73.191.9.70]:14883 at 21:07:48.529297: ------------------------------------------------------------------------ REGISTER sip:MY-FQDN:5060 SIP/2.0 Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bK812a131af68095df4 Route: <sip:MY-FQDN:5060;lr> Max-Forwards: 70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060> Call-ID: 3bba3912bea9e310 CSeq: 2114352391 REGISTER Accept-Language: en Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, OPTIONS, UPDATE, PRACK, SUBSCRIBE, INFO, PUBLISH Allow-Events: aastra-xml, vdp-session, talk, hold, conference, LocalModeStatus Contact: "Jay" <sip:120@192.168.2.143:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-1000-8000-00085D6D9FE5>";expires=50 Supported: path, gruu User-Agent: Aastra 6867i/5.0.0.2036 Content-Length: 0 ------------------------------------------------------------------------ send 673 bytes to udp/[73.191.9.70]:5060 at 21:07:48.529522: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bK812a131af68095df4;received=73.191.9.70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060>;tag=1HFr2FS9gN2HQ Call-ID: 3bba3912bea9e310 CSeq: 2114352391 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.2.22+git~20140309T212137Z~65fed130e5~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: path, replaces WWW-Authenticate: Digest realm="MY-FQDN", nonce="4f575c9d-4a48-4c9f-88ef-558fc0ecb901", algorithm=MD5, qop="auth" Content-Length: 0 ... ------------------------------------------------------------------------ recv 769 bytes from udp/[73.191.9.70]:14883 at 21:07:50.519037: ------------------------------------------------------------------------ REGISTER sip:MY-FQDN:5060 SIP/2.0 Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bK812a131af68095df4 Route: <sip:MY-FQDN:5060;lr> Max-Forwards: 70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060> Call-ID: 3bba3912bea9e310 CSeq: 2114352391 REGISTER Accept-Language: en Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, OPTIONS, UPDATE, PRACK, SUBSCRIBE, INFO, PUBLISH Allow-Events: aastra-xml, vdp-session, talk, hold, conference, LocalModeStatus Contact: "Jay" <sip:120@192.168.2.143:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-1000-8000-00085D6D9FE5>";expires=50 Supported: path, gruu User-Agent: Aastra 6867i/5.0.0.2036 Content-Length: 0 ------------------------------------------------------------------------ send 673 bytes to udp/[73.191.9.70]:5060 at 21:07:50.519205: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bK812a131af68095df4;received=73.191.9.70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060>;tag=1HFr2FS9gN2HQ Call-ID: 3bba3912bea9e310 CSeq: 2114352391 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.2.22+git~20140309T212137Z~65fed130e5~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: path, replaces WWW-Authenticate: Digest realm="MY-FQDN", nonce="4f575c9d-4a48-4c9f-88ef-558fc0ecb901", algorithm=MD5, qop="auth" Content-Length: 0 ... ------------------------------------------------------------------------ recv 769 bytes from udp/[73.191.9.70]:14883 at 21:08:21.110333: ------------------------------------------------------------------------ REGISTER sip:MY-FQDN:5060 SIP/2.0 Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bKbd8b1eda1ecbbd9cd Route: <sip:MY-FQDN:5060;lr> Max-Forwards: 70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060> Call-ID: 3bba3912bea9e310 CSeq: 2114352392 REGISTER Accept-Language: en Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, OPTIONS, UPDATE, PRACK, SUBSCRIBE, INFO, PUBLISH Allow-Events: aastra-xml, vdp-session, talk, hold, conference, LocalModeStatus Contact: "Jay" <sip:120@192.168.2.143:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-1000-8000-00085D6D9FE5>";expires=50 Supported: path, gruu User-Agent: Aastra 6867i/5.0.0.2036 Content-Length: 0 ------------------------------------------------------------------------ 2019-04-03 17:08:27.597995 [WARNING] sofia_reg.c:1532 SIP auth challenge (REGISTER) on sofia profile 'external' for [120@MY-FQDN] from ip 73.191.9.70 send 673 bytes to udp/[73.191.9.70]:5060 at 21:08:21.111772: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bKbd8b1eda1ecbbd9cd;received=73.191.9.70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060>;tag=2ycp7HpgvjvXD Call-ID: 3bba3912bea9e310 CSeq: 2114352392 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.2.22+git~20140309T212137Z~65fed130e5~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: path, replaces WWW-Authenticate: Digest realm="MY-FQDN", nonce="c49443eb-f0e9-461c-8072-d3d4551f6c8e", algorithm=MD5, qop="auth" Content-Length: 0 ------------------------------------------------------------------------ recv 769 bytes from udp/[73.191.9.70]:14883 at 21:08:21.598328: ------------------------------------------------------------------------ REGISTER sip:MY-FQDN:5060 SIP/2.0 Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bKbd8b1eda1ecbbd9cd Route: <sip:MY-FQDN:5060;lr> Max-Forwards: 70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060> Call-ID: 3bba3912bea9e310 CSeq: 2114352392 REGISTER Accept-Language: en Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, OPTIONS, UPDATE, PRACK, SUBSCRIBE, INFO, PUBLISH Allow-Events: aastra-xml, vdp-session, talk, hold, conference, LocalModeStatus Contact: "Jay" <sip:120@192.168.2.143:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-1000-8000-00085D6D9FE5>";expires=50 Supported: path, gruu User-Agent: Aastra 6867i/5.0.0.2036 Content-Length: 0 ------------------------------------------------------------------------ send 673 bytes to udp/[73.191.9.70]:5060 at 21:08:21.598579: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bKbd8b1eda1ecbbd9cd;received=73.191.9.70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060>;tag=2ycp7HpgvjvXD Call-ID: 3bba3912bea9e310 CSeq: 2114352392 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.2.22+git~20140309T212137Z~65fed130e5~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: path, replaces WWW-Authenticate: Digest realm="MY-FQDN", nonce="c49443eb-f0e9-461c-8072-d3d4551f6c8e", algorithm=MD5, qop="auth" Content-Length: 0 ------------------------------------------------------------------------ recv 769 bytes from udp/[73.191.9.70]:14883 at 21:08:22.603481: ------------------------------------------------------------------------ REGISTER sip:MY-FQDN:5060 SIP/2.0 Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bKbd8b1eda1ecbbd9cd Route: <sip:MY-FQDN:5060;lr> Max-Forwards: 70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060> Call-ID: 3bba3912bea9e310 CSeq: 2114352392 REGISTER Accept-Language: en Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, OPTIONS, UPDATE, PRACK, SUBSCRIBE, INFO, PUBLISH Allow-Events: aastra-xml, vdp-session, talk, hold, conference, LocalModeStatus Contact: "Jay" <sip:120@192.168.2.143:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-1000-8000-00085D6D9FE5>";expires=50 Supported: path, gruu User-Agent: Aastra 6867i/5.0.0.2036 Content-Length: 0 ------------------------------------------------------------------------ send 673 bytes to udp/[73.191.9.70]:5060 at 21:08:22.603692: ------------------------------------------------------------------------ SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 192.168.2.143:5060;branch=z9hG4bKbd8b1eda1ecbbd9cd;received=73.191.9.70 From: "Jay" <sip:120@MY-FQDN:5060>;tag=847eb00afa To: "Jay" <sip:120@MY-FQDN:5060>;tag=2ycp7HpgvjvXD Call-ID: 3bba3912bea9e310 CSeq: 2114352392 REGISTER User-Agent: FreeSWITCH-mod_sofia/1.2.22+git~20140309T212137Z~65fed130e5~64bit Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: path, replaces WWW-Authenticate: Digest realm="MY-FQDN", nonce="c49443eb-f0e9-461c-8072-d3d4551f6c8e", algorithm=MD5, qop="auth" Content-Length: 0 _________________________________________________________________________ Professional FreeSWITCH Services sales@freeswitch.com<mailto:sales@freeswitch.com> https://freeswitch.com Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com