[Users] Can't rewritehostport to PSTN gateway

Kenny Chua strain15 at yahoo.com
Wed Jun 28 07:19:09 CEST 2006


Hi everybody,

I'm having problems rewritehostport to PSTN gateway. It gives me the 403 Forbidden error. Here is the error:

SEND TIME: 130027089
SEND >> 
ACK sip:0013373038435 at test.com SIP/2.0
Via: SIP/2.0/UDP70.xxx.xxx.xxx:5060;rport;branch=z9hG4bK437FA12BFB124DA68EB569C02212327D
From: Kenny <sip:200 at test.com>;tag=1187743606
To: <sip:0013373038435 at test.com>;tag=eb9822f1ed1b15a932bf98c097b3aaca.befd
Contact: <sip:200 at 70.xxx.xxx.xxx:5060>
Call-ID: 67A1BB1A-C737-4C24-B7AF-19E9C92C2B47 at 192.168.1.30
CSeq: 9401 ACK
Max-Forwards: 70
Content-Length: 0


SEND TIME: 130027095
SEND >> 70.xxx.xxx.xxx:5060
INVITE sip:0013373038435 at test.com SIP/2.0
Via: SIP/2.0/UDP70.xxx.xxx.xxx:5060;rport;branch=z9hG4bKF16D7EAC63D6463A8624A802F5BB4908
From: Kenny <sip:200 at test.com>;tag=1187743606
To: <sip:0013373038435 at test.com>
Contact: <sip:200 at 70.xxx.xxx.xxx:5060>
Call-ID: 67A1BB1A-C737-4C24-B7AF-19E9C92C2B47 at 192.168.1.30
CSeq: 9402 INVITE
Proxy-Authorization: Digest username="200",realm="test.com",nonce="44a21eb77c572fc09155f89521700490cb8a87ef",response="75921f5f225efeaeb0177e3353769190",uri="sip:0013373038435 at test.com"
Max-Forwards: 70
Content-Type: application/sdp
User-Agent: X-Lite release 1105x
Content-Length: 308

v=0
o=200 130026958 130027078 IN IP470.xxx.xxx.xxx
s=X-Lite
c=IN IP4 70.xxx.xxx.xxx
t=0 0
m=audio 8000 RTP/AVP 0 8 3 98 97 101
a=rtpmap:0 pcmu/8000
a=rtpmap:8 pcma/8000
a=rtpmap:3 gsm/8000
a=rtpmap:98 iLBC/8000
a=rtpmap:97 speex/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=sendrecv

RECEIVE TIME: 130027172
RECEIVE << 70.xxx.xxx.xxx:5060
SIP/2.0 100 trying -- your call is important to us
Via: SIP/2.0/UDP 70.xxx.xxx.xxx:5060;rport=5060;branch=z9hG4bKF16D7EAC63D6463A8624A802F5BB4908;received=192.168.1.1
From: Kenny <sip:200 at test.com>;tag=1187743606
To: <sip:0013373038435 at test.com>
Call-ID: 67A1BB1A-C737-4C24-B7AF-19E9C92C2B47 at 192.168.1.30
CSeq: 9402 INVITE
Server: OpenSer (1.0.1 (i386/linux))
Content-Length: 0
Warning: 392 192.168.1.6:5060 "Noisy feedback tells:  pid=4989 req_src_ip=192.168.1.1 req_src_port=5060 in_uri=sip:0013373038435 at test.com out_uri=sip:13373038435 at pstn.gateway:5060 via_cnt==1"


RECEIVE TIME: 130027371
RECEIVE << 70.xxx.xxx.xxx:5060
SIP/2.0 403 Forbidden
To: <sip:0013373038435 at test.com>;tag=3360460030-876466
From: Kenny <sip:200 at test.com>;tag=1187743606
Call-ID: 67A1BB1A-C737-4C24-B7AF-19E9C92C2B47 at 192.168.1.30
CSeq: 9402 INVITE
Contact: sip:13373038435 at 65.xxx.xxx.xxx:5060
Via: SIP/2.0/UDP 70.xxx.xxx.xxx:5060;received=192.168.1.1;rport=5060;branch=z9hG4bKF16D7EAC63D6463A8624A802F5BB4908
Content-Length: 0


SEND TIME: 130027372
SEND >>70.xxx.xxx.xxx:5060
ACK sip:0013373038435 at test.comSIP/2.0
Via: SIP/2.0/UDP 70.xxx.xxx.xxx:5060;rport;branch=z9hG4bKF16D7EAC63D6463A8624A802F5BB4908
From: Kenny <sip:200 at test.com>;tag=1187743606
To: <sip:0013373038435 at test.com>;tag=3360460030-876466
Contact: <sip:200 at 70.xxx.xxx.xxx:5060>
Call-ID: 67A1BB1A-C737-4C24-B7AF-19E9C92C2B47 at 192.168.1.30
CSeq: 9402 ACK
Max-Forwards: 70
Content-Length: 0


********************************Openser.cfg********************************************


debug=3
fork=yes
log_stderror=no

listen=192.168.1.6       
alias=test.com
port=5060
children=32

dns=no
rev_dns=no
fifo="/tmp/openser_fifo"
fifo_db_url="mysql://openser:openserrw@localhost/openser"

loadmodule "/usr/local/lib/openser/modules/mysql.so"
loadmodule "/usr/local/lib/openser/modules/sl.so"
loadmodule "/usr/local/lib/openser/modules/tm.so"
loadmodule "/usr/local/lib/openser/modules/rr.so"
loadmodule "/usr/local/lib/openser/modules/maxfwd.so"
loadmodule "/usr/local/lib/openser/modules/usrloc.so"
loadmodule "/usr/local/lib/openser/modules/registrar.so"
loadmodule "/usr/local/lib/openser/modules/auth.so"
loadmodule "/usr/local/lib/openser/modules/auth_db.so"
loadmodule "/usr/local/lib/openser/modules/uri.so"
loadmodule "/usr/local/lib/openser/modules/uri_db.so"
loadmodule "/usr/local/lib/openser/modules/nathelper.so"
loadmodule "/usr/local/lib/openser/modules/avpops.so"
loadmodule "/usr/local/lib/openser/modules/textops.so"
loadmodule "/usr/local/lib/openser/modules/xlog.so"

modparam("auth_db|uri_db|usrloc", "db_url",
    "mysql://openser:openserrw@localhost/openser")
modparam("auth_db", "calculate_ha1", 1)
modparam("auth_db", "password_column", "password")

modparam("nathelper", "natping_interval", 30) 
modparam("nathelper", "ping_nated_only", 1)   
modparam("nathelper", "rtpproxy_sock", "/var/run/rtpproxy.sock")

modparam("usrloc", "db_mode", 2)

modparam("registrar", "nat_flag", 6)

modparam("rr", "enable_full_lr", 1)

modparam("tm", "fr_inv_timer", 27)
modparam("tm", "fr_inv_timer_avp", "inv_timeout")

route {

    # -----------------------------------------------------------------
    # Sanity Check Section
    # -----------------------------------------------------------------
    if (!mf_process_maxfwd_header("10")) {
        sl_send_reply("483", "Too Many Hops");
        exit;
    };

    if (msg:len > max_len) {
        sl_send_reply("513", "Message Overflow");
        exit;
    };

    # -----------------------------------------------------------------
    # Record Route Section
    # -----------------------------------------------------------------
    if (method!="REGISTER") {
        record_route();
    };

    if (method=="BYE" || method=="CANCEL") {
        unforce_rtp_proxy();
        t_relay();
        exit;
    } 

    # -----------------------------------------------------------------
    # Loose Route Section
    # -----------------------------------------------------------------
    if (loose_route()) {

        if ((method=="INVITE" || method=="REFER") && !has_totag()) {
            xlog("Does not have to tag, FORBIDDEN\n");
            sl_send_reply("403", "Forbidden");
            exit;
        };

        if (method=="INVITE") {

            if (!proxy_authorize("","subscriber")) {
                proxy_challenge("","0");
                exit;
            } else if (!check_from()) {
                sl_send_reply("403", "Use From=ID");
                exit;
            };
            consume_credentials();

            if (nat_uac_test("19")) {
                setflag(6);
                force_rport();
                xlog("Forcing rtpport\n");
                fix_nated_contact();
            };
            force_rtp_proxy("l");
        };
        route(1);
        return;
    };

    # -----------------------------------------------------------------
    # Call Type Processing Section
    # -----------------------------------------------------------------
    if (uri!=myself) {
        route(4);
        route(1);
        return;
    };

    if (method=="ACK") {
        route(1);
        return;
    } else if (method=="CANCEL") {
        route(1);
        return;
    } else if (method=="INVITE") {
        route(3);
        return;
    } else  if (method=="REGISTER") {
        route(2);
        return;
    };

    lookup("aliases");
    if (uri!=myself) {
        route(4);
        route(1);
        return;
    };

    if (!lookup("location")) {
        sl_send_reply("404", "User Not Found");
        return;
    };

    route(1);
}

route[1] {

    # -----------------------------------------------------------------
    # Default Message Handler
    # -----------------------------------------------------------------

    t_on_reply("1");

    if (!t_relay()) {
        if (method=="INVITE" && isflagset(6)) {
            unforce_rtp_proxy();
            xlog("Unforce RTP proxy2\n");
        };
        xlog("Dunno why forbidden\n");
        sl_reply_error();
        xlog("Forbidden4\n");
    };
    
}

route[2] {

    # -----------------------------------------------------------------
    # REGISTER Message Handler
    # ----------------------------------------------------------------

    if (!search("^Contact:[ ]*\*") && nat_uac_test("19")) {
        setflag(6);
        fix_nated_register();
        force_rport();
    };

    sl_send_reply("100", "Trying");

    if (!www_authorize("","subscriber")) {
        www_challenge("","0");
        exit;
    };

    if (!check_to()) {
        sl_send_reply("401", "Unauthorized");
        return;
    };

    consume_credentials();

    if (!save("location")) {
        sl_reply_error();
    };
}

route[3] {

    # -----------------------------------------------------------------
    # INVITE Message Handler
    # -----------------------------------------------------------------

    if (!proxy_authorize("","subscriber")) {
        proxy_challenge("","0");
        exit;
    } else if (!check_from()) {
        sl_send_reply("403", "Use From=ID");
        exit;
    };

    consume_credentials();

    if (nat_uac_test("19")) {
        setflag(6);
        xlog("Setflag cos behind NAT\n");
    }
    
    
    
    lookup("aliases");
    if (uri!=myself) {
        route(4);
        route(1);
        return;
    };
    
    if (uri=~"^sip:00[0-9]*@") {        # International PSTN
        xlog("International PSTN\n");
        strip(2);
        route(4);
        route(5);
        return;
    };
    

    if (!lookup("location")) {
        sl_send_reply("404", "User Not Found");
        return;
    };

    route(4);
    route(1);
}

route[4] {

    # -----------------------------------------------------------------
    # NAT Traversal Section
    # -----------------------------------------------------------------

    if (isflagset(6)) {
        force_rport();
        fix_nated_contact();
        force_rtp_proxy();
        xlog("NAT Traversal Section\n");
    }
}

route[5] {

    # -----------------------------------------------------------------
    # PSTN Handler
    # -----------------------------------------------------------------
    xlog("Routing to PSTN gateway\n");
    rewritehostport("pstn.gateway:5060"); 
    
    avp_write("i:45", "inv_timeout");

    route(1);
    xlog("Routed to PSTN gateway\n");
}


onreply_route[1] {

    if (isflagset(6) && status=~"(180)|(183)|2[0-9][0-9]") {
        if (!search("^Content-Length:[ ]*0")) {
            force_rtp_proxy();
        };
    };

    if (nat_uac_test("1")) {
        fix_nated_contact();
    };
}


 		
---------------------------------
Talk is cheap. Use Yahoo! Messenger to make PC-to-Phone calls.  Great rates starting at 1¢/min.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.kamailio.org/pipermail/users/attachments/20060627/4b41e7e8/attachment.htm 


More information about the Users mailing list