[Freeswitch-users] FS on Public IP adrress

Fri Feb 18 23:49:54 MSK 2011

Lloyd Thomas,

I just noticed you reply me directly. Please post the answer to the mailing
list. This will help someone in the future.

===========

Call-ID:        2d9a6489-7762dc9c-a2fb31a7 at 192.168.101.11
User:           1000 at 188.222.85.33
Contact:        "user" <sip:1000 at 192.168.101.11:5060>
Agent:          PolycomSoundPointIP-SPIP_550-UA/3.2.3.1734
Status:         Registered(UDP)(unknown) EXP(2011-02-18 21:33:10)
EXPSECS(6838)
Host:           phiFS1
IP:             188.222.85.32
Port:           38532
Auth-User:      1000
Auth-Realm:     188.222.85.33
MWI-Account:    1000 at 188.222.85.33

Call-ID:        70202574-4ecbe83f-71727f5e at 192.168.101.12
User:           1001 at 188.222.85.33
Contact:        "user" <sip:1001 at 192.168.101.12:5060>
Agent:          PolycomSoundPointIP-SPIP_550-UA/3.2.3.1734
Status:         Registered(UDP)(unknown) EXP(2011-02-18 21:35:24)
EXPSECS(6972)
Host:           phiFS1
IP:             188.222.85.32
Port:           38596
Auth-User:      1001
Auth-Realm:     188.222.85.33
MWI-Account:    1001 at 188.222.85.33

Total items returned: 2

=================

Here is the Solution for the problem...

1. Add the following to the user 1000.xml and 1001.xml

<param name="sip-force-contact" value="NDLB-connectile-dysfunction"/>

2.sip_profiles/internal.xml make sure the following line enable.

<param name="NDLB-force-rport" value="safe"/>

3. Reload the profiles / Reload settings

4. Reboot the phone

---

in your registration the following not correct.  see both NAT show 5060

Contact:        "user" <sip:1000 at 192.168.101.11:5060>

Contact:        "user" <sip:1001 at 192.168.101.12:5060>

Thanks
Lloyd
On Fri, Feb 18, 2011 at 2:27 PM, Steven Ayre <steveayre at gmail.com> wrote:

> What's the error?
>
> "Rejected by acl "domains". Falling back to Digest auth."?
>
> That means that the IP wasn't in the ACL, so it's going to do a Digest
> password authentication. It rejects the 1st INVITE with a 407 which contains
> a challenge which allows the client to send another INVITE with the digest
> of the password to authenticate by password.
>
> If you're authenticating by password, then that message is completely
> normal.
>
> How do you want to authenticate the phones? By IP or by password?
>
> -Steve
>
>
>
> On 18 February 2011 17:48, lloyd thomas <lloydie.t at gmail.com> wrote:
>
>> I have put my FS box on a public IP address so that it can serve phones at
>> remote sites. I have not set up any providers on it yet.
>> I would like to make an internal call between two extensions, but I get
>> the following error when I try to call
>>
>> freeswitch at internal> [DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV
>> HEADER [Content-Type] = [log/data]
>> [DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER
>> [Content-Length] = [121]
>> [DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [Log-Level] =
>> [7]
>> [DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [Text-Channel]
>> = [0]
>> [DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [Log-File] =
>> [sofia.c]
>> [DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [Log-Func] =
>> [sofia_handle_sip_i_invite]
>> [DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [Log-Line] =
>> [6081]
>> [DEBUG] libs/esl/src/esl.c:985 esl_recv_event() RECV HEADER [User-Data] =
>> []
>> [DEBUG] libs/esl/src/esl.c:1111 esl_recv_event() RECV MESSAGE
>> Event-Name: SOCKET_DATA
>> Content-Type: log/data
>> Content-Length: 121
>> Log-Level: 7
>> Text-Channel: 0
>> Log-File: sofia.c
>> Log-Func: sofia_handle_sip_i_invite
>> Log-Line: 6081
>> User-Data: _undef_
>>
>> 2011-02-18 17:41:40.638553 [DEBUG] sofia.c:6081 IP 188.221.84.33 Rejected
>> by acl "domains". Falling back to Digest auth.
>>
>> 2011-02-18 17:41:40.638553 [DEBUG] sofia.c:6081 IP 188.221.84.33 Rejected
>> by acl "domains". Falling back to Digest auth.
>>
>>
>> I am using two polycom 550's to test this.
>> Any Ideas?
>>
>> Thanks Lloydie T
>>
>>
>>
>> _______________________________________________
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20110218/d151eb1c/attachment-0001.html 