I have * box on machine with external ip address and internal one
I'm tring to register to it from to machines - one from innternet (
everything is ok - in sip.conf nat=yes)\
and the other one is in the internal network (in sip.conf - nat=no ) and
it say 403 Forbidden?
Any Ideas ? here are the logs and configs
From the external SIP Client whic registers.
**********************************************************************
Sip read:
REGISTER sip:194.12.230.167 SIP/2.0
Via: SIP/2.0/UDP
213.240.242.42:5060;rport;branch=z9hG4bKBDF5CC31592C4472A643BDD8C314BD09
From: damencho <sip:damencho@194.12.230.167>;tag=4066431665
To: damencho <sip:damencho@194.12.230.167>
Contact: "damencho" <sip:damencho@213.240.242.42:5060>
Call-ID: 7FEA34DBA7E1495F94AEC70F236290EC@194.12.230.167
CSeq: 58756 REGISTER
Expires: 1800
Max-Forwards: 70
User-Agent: X-Lite release 1103m
Content-Length: 0
11 headers, 0 lines
Using latest request as basis request
Sending to 213.240.242.42 : 5060 (non-NAT)
Transmitting (NAT):
SIP/2.0 100 Trying
Via: SIP/2.0/UDP
213.240.242.42:5060;rport;branch=z9hG4bKBDF5CC31592C4472A643BDD8C314BD09;received=213.240.242.42
From: damencho <sip:damencho@194.12.230.167>;tag=4066431665
To: damencho <sip:damencho@194.12.230.167>;tag=as7b1386bf
Call-ID: 7FEA34DBA7E1495F94AEC70F236290EC@194.12.230.167
CSeq: 58756 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:damencho@194.12.230.167>
Content-Length: 0
to 213.240.242.42:5060
-- Registered SIP 'damencho' at 213.240.242.42 port 5060 expires
1800
-- Saved useragent "X-Lite release 1103m" for peer damencho
Transmitting (NAT):
SIP/2.0 200 OK
Via: SIP/2.0/UDP
213.240.242.42:5060;rport;branch=z9hG4bKBDF5CC31592C4472A643BDD8C314BD09;received=213.240.242.42
From: damencho <sip:damencho@194.12.230.167>;tag=4066431665
To: damencho <sip:damencho@194.12.230.167>;tag=as7b1386bf
Call-ID: 7FEA34DBA7E1495F94AEC70F236290EC@194.12.230.167
CSeq: 58756 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Expires: 1800
Contact: <sip:damencho@194.12.230.167>;expires=1800
Date: Wed, 07 Jul 2004 13:23:17 GMT
Content-Length: 0
to 213.240.242.42:5060
Scheduling destruction of call
'7FEA34DBA7E1495F94AEC70F236290EC@194.12.230.167' in 15000 ms
**********************************************************************
From the Client of internal netwrk which won't register
Sip read:
REGISTER sip:10.1.1.2:5060;transport=udp SIP/2.0
Call-ID: f5d566e062ae45182e874e07346c225e@10.1.1.11
CSeq: 1 REGISTER
From: "damian"
<sip:damian@10.1.1.2:5060;transport=udp>;tag=9594508
To: "damian" <sip:damian@10.1.1.2:5060;transport=udp>
Via: SIP/2.0/UDP
10.1.1.11:5060;branch=z9hG4bKa8af7fe34048c635482c15697a6c2ab5
Max-Forwards: 70
Expires: 3600
Contact: "damian" <sip:10.1.1.11:5060;transport=udp>
Content-Length: 0
10 headers, 0 lines
Using latest request as basis request
Sending to 10.1.1.11 : 5060 (NAT)
Transmitting (NAT):
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP
10.1.1.11:5060;branch=z9hG4bKa8af7fe34048c635482c15697a6c2ab5;received=10.1.1.11
From: "damian"
<sip:damian@10.1.1.2:5060;transport=udp>;tag=9594508
To: "damian"
<sip:damian@10.1.1.2:5060;transport=udp>;tag=as1b3e6b06
Call-ID: f5d566e062ae45182e874e07346c225e@10.1.1.11
CSeq: 1 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:damian@10.1.1.2>
Content-Length: 0
*******************************************************
And SIP.conf
[general]
context=sip-internal
language=bg
port=5060
bindaddr=0.0.0.0
[not ok phone]
type=friend
username=user1
callerid="User1"
host=dynamic
nat=no
[ok phone]
type=friend
username=user2
callerid="User2"
host=dynamic
nat=yes
On Wed, 07 Jul 2004 16:50:18 +0300, Damian Minkov <damian@space-comm.com> wrote:> I have * box on machine with external ip address and internal one > I'm tring to register to it from to machines - one from innternet ( > everything is ok - in sip.conf nat=yes)\ > and the other one is in the internal network (in sip.conf - nat=no ) and > it say 403 Forbidden? > Any Ideas ? here are the logs and configs<SNIP>> And SIP.conf > > [general] > context=sip-internal > language=bg > port=5060 > bindaddr=0.0.0.0 >Add some stuff here nat=yes localnet=192.168.0.0/255.255.0.0; All RFC 1918 addresses are local networks localnet=10.0.0.0/255.0.0.0 ; Also RFC1918 localnet=172.16.0.0/12 ; Another RFC1918 with CIDR notation localnet=169.254.0.0/255.255.0.0 ;Zero conf local network> [not ok phone] > type=friend > username=user1 > callerid="User1" > host=dynamic > nat=no > > [ok phone] > type=friend > username=user2 > callerid="User2" > host=dynamic > nat=yes > _______________________________________________ > Asterisk-Users mailing list > Asterisk-Users@lists.digium.com > http://lists.digium.com/mailman/listinfo/asterisk-users > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >
I have found same problem with today CVS head and NAT conf in Sip. If i rollback to stable branch or to CVS of few weeks ago works? Some help? Thanks Dimitri On Wednesday 07 July 2004 03:50 pm, Damian Minkov wrote:> I have * box on machine with external ip address and internal one > I'm tring to register to it from to machines - one from innternet ( > everything is ok - in sip.conf nat=yes)\ > and the other one is in the internal network (in sip.conf - nat=no ) and > it say 403 Forbidden? > Any Ideas ? here are the logs and configs > > From the external SIP Client whic registers. > ********************************************************************** > Sip read: > REGISTER sip:194.12.230.167 SIP/2.0 > Via: SIP/2.0/UDP > 213.240.242.42:5060;rport;branch=z9hG4bKBDF5CC31592C4472A643BDD8C314BD09 > From: damencho <sip:damencho@194.12.230.167>;tag=4066431665 > To: damencho <sip:damencho@194.12.230.167> > Contact: "damencho" <sip:damencho@213.240.242.42:5060> > Call-ID: 7FEA34DBA7E1495F94AEC70F236290EC@194.12.230.167 > CSeq: 58756 REGISTER > Expires: 1800 > Max-Forwards: 70 > User-Agent: X-Lite release 1103m > Content-Length: 0 > > > 11 headers, 0 lines > Using latest request as basis request > Sending to 213.240.242.42 : 5060 (non-NAT) > Transmitting (NAT): > SIP/2.0 100 Trying > Via: SIP/2.0/UDP > 213.240.242.42:5060;rport;branch=z9hG4bKBDF5CC31592C4472A643BDD8C314BD09;re >ceived=213.240.242.42 From: damencho > <sip:damencho@194.12.230.167>;tag=4066431665 > To: damencho <sip:damencho@194.12.230.167>;tag=as7b1386bf > Call-ID: 7FEA34DBA7E1495F94AEC70F236290EC@194.12.230.167 > CSeq: 58756 REGISTER > User-Agent: Asterisk PBX > Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER > Contact: <sip:damencho@194.12.230.167> > Content-Length: 0 > > > to 213.240.242.42:5060 > -- Registered SIP 'damencho' at 213.240.242.42 port 5060 expires 1800 > -- Saved useragent "X-Lite release 1103m" for peer damencho > Transmitting (NAT): > SIP/2.0 200 OK > Via: SIP/2.0/UDP > 213.240.242.42:5060;rport;branch=z9hG4bKBDF5CC31592C4472A643BDD8C314BD09;re >ceived=213.240.242.42 From: damencho > <sip:damencho@194.12.230.167>;tag=4066431665 > To: damencho <sip:damencho@194.12.230.167>;tag=as7b1386bf > Call-ID: 7FEA34DBA7E1495F94AEC70F236290EC@194.12.230.167 > CSeq: 58756 REGISTER > User-Agent: Asterisk PBX > Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER > Expires: 1800 > Contact: <sip:damencho@194.12.230.167>;expires=1800 > Date: Wed, 07 Jul 2004 13:23:17 GMT > Content-Length: 0 > > > to 213.240.242.42:5060 > Scheduling destruction of call > '7FEA34DBA7E1495F94AEC70F236290EC@194.12.230.167' in 15000 ms > ********************************************************************** > > > From the Client of internal netwrk which won't register > > Sip read: > REGISTER sip:10.1.1.2:5060;transport=udp SIP/2.0 > Call-ID: f5d566e062ae45182e874e07346c225e@10.1.1.11 > CSeq: 1 REGISTER > From: "damian" <sip:damian@10.1.1.2:5060;transport=udp>;tag=9594508 > To: "damian" <sip:damian@10.1.1.2:5060;transport=udp> > Via: SIP/2.0/UDP > 10.1.1.11:5060;branch=z9hG4bKa8af7fe34048c635482c15697a6c2ab5 > Max-Forwards: 70 > Expires: 3600 > Contact: "damian" <sip:10.1.1.11:5060;transport=udp> > Content-Length: 0 > > > 10 headers, 0 lines > Using latest request as basis request > Sending to 10.1.1.11 : 5060 (NAT) > Transmitting (NAT): > SIP/2.0 403 Forbidden > Via: SIP/2.0/UDP > 10.1.1.11:5060;branch=z9hG4bKa8af7fe34048c635482c15697a6c2ab5;received=10.1 >.1.11 From: "damian" <sip:damian@10.1.1.2:5060;transport=udp>;tag=9594508 > To: "damian" <sip:damian@10.1.1.2:5060;transport=udp>;tag=as1b3e6b06 > Call-ID: f5d566e062ae45182e874e07346c225e@10.1.1.11 > CSeq: 1 REGISTER > User-Agent: Asterisk PBX > Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER > Contact: <sip:damian@10.1.1.2> > Content-Length: 0 > > > ******************************************************* > > And SIP.conf > > [general] > context=sip-internal > language=bg > port=5060 > bindaddr=0.0.0.0 > > [not ok phone] > type=friend > username=user1 > callerid="User1" > host=dynamic > nat=no > > [ok phone] > type=friend > username=user2 > callerid="User2" > host=dynamic > nat=yes > _______________________________________________ > Asterisk-Users mailing list > Asterisk-Users@lists.digium.com > http://lists.digium.com/mailman/listinfo/asterisk-users > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users