[Serusers] Problem with REGISTER

[Jiri Kuthan]

There are several reasons:

1) you are trying to impersonate someone else which we don't like.
(Or possibly someone else is trying to impersonate you).
If we permitted digestusername "dheeraj" to manipulate contacts of AOR
"san at iptel.org", that would be a real security pain.

#
U 2003/12/20 07:07:02.039699 202.54.98.63:10131 -> 195.37.77.101:5060
REGISTER sip:iptel.org SIP/2.0.
Via: SIP/2.0/UDP 202.54.98.63:5060.
From: sip:san at iptel.org.
To: sip:san at iptel.org.
Call-ID: 00075012-14e60350-64ceec11-054fc72d at 202.54.98.63.
CSeq: 102 REGISTER.
User-Agent: CSCO/5.
Contact: <sip:san at 202.54.98.63:5060>.Authorization: Digest username="dheeraj",realm="iptel.org",uri="sip:iptel.org",response="78627be55d4c2912675be0d29f99cd96",nonce="3fe3e831e2daf98432cbc4ca1dc8a6c73849fda5",algorithm=md5.
Content-Length: 0.
Expires: 3600.
.

#
U 2003/12/20 07:07:02.041306 195.37.77.101:5060 -> 202.54.98.63:5060
SIP/2.0 403 That is ugly -- use To=id in REGISTERs.
Via: SIP/2.0/UDP 202.54.98.63:5060.
From: sip:san at iptel.org.
To: sip:san at iptel.org;tag=794fe65c16edfdf45da4fc39a5d2867c.8e59.Call-ID: 00075012-14e60350-64ceec11-054fc72d at 202.54.98.63.
CSeq: 102 REGISTER.
Server: Sip EXpress router (0.8.12-tcp_nonb (i386/linux)).
Content-Length: 0.Warning: 392 195.37.77.101:5060 "Noisy feedback tells:  pid=22929 req_src_ip=202.54.98.63 req_src_port=10131 in_uri=sip:iptel.org out_uri=sip:iptel.org via_cnt==1".

2) we don't accept requests with IP addresses in r-uris as opposed to 
   DNS names. We don't like them either. Use names.

U 2003/12/20 15:58:39.878330 195.37.77.101:5060 -> 24.7.100.83:5060
SIP/2.0 403 Use domain name in SIP -- we deny IP addresses -- sorry.

I suspect both error messages are pretty self-explanatory -- what is
the problem?

-jiri


At 12:35 PM 12/20/2003, Santosh Subramanian, Noida wrote:
>could you please tell me why the following REGISTER request is not getting 401 response..? 
>I am struggling with this problem for the past two days. Kindly update me.
> 
>REGISTER sip:iptel.org:5060 SIP/2.0  ( if I change sip:iptel.org as sip:195.37.77.101, I am getting 403 response from iptel.org)
>Via: SIP/2.0/UDP 192.168.14.200:5060;branch=z9hG4bK1436934251
>From: san <sip:san at iptel.org>;tag=501424250
>To: san <sip:san at iptel.org>
>Call-ID: <mailto:323191517 at 192.168.14.200>323191517 at 192.168.14.200
>CSeq: 1 REGISTER
>Contact: san <sip:san at 192.168.14.200:5060>
>max-forwards: 50
>user-agent: oSIP-ua/0.8.1
>expires: 3600
>Content-Length: 0
> 
> 
>Thankyou
>Santhosh.S
>_______________________________________________
>Serusers mailing list
>serusers at lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers

--
Jiri Kuthan            http://iptel.org/~jiri/