[Serusers] re-invite problem

[Kostas Marneris]

Hello,

I think that you can solve the problem, by putting the NAT traversal check
before the 'authentication block' where you handle the RE-INVITEs.

I use 'nathelper's module functions' :

                if (nat_uac_test("27")) {
                        # Check flags: (1,2,8,16)
                        setflag(7);
                        force_rport();
                        fix_nated_contact();
                        fix_nated_sdp("3");
                };

                if (!radius_proxy_authorize("yourdomain.com")) {
                        proxy_challenge("yourdomain.com", "0");
                        break;
                };


Hope this helps.


Kostas

olivier.taylor wrote:
> Hello,
> using ser 0.9.6
> 
> The following dialog is a re-invite, the re-invite is initiated by the
> callee after putting the call on hold.
> Problem is that SER answer with a 407 on the wrong port, Invite is
> coming from port 62907 and SER answer to port 5060.
> 
> Problem doesn't occurs for the initial invite.
> We have tried with other Uas without problems, just having problems with
> this Ua (Avaya).
> 
> Any idea?
> 
> Best regards,
> 
> Olivier
> 
> 
> U xxx.xx.xx.xx:62907 -> yy.yyy.yyy.yy:5060
> INVITE sip:990099001 at 192.168.162.187 SIP/2.0.
> Via: SIP/2.0/UDP 192.168.162.181;branch=z9hG4bK309b82ccf.
> Max-Forwards: 70.
> Content-Length: 337.
> To: "QE-A" <sip:990099001 at yy.yyy.yyy.yy>;tag=f7983fe553e1941.
> From: "QE-B" <sip:990099002 at yy.yyy.yyy.yy>;tag=5bf8b4fb69fca84.
> Call-ID: 7c933d3d19bb76c396b995202b18eb97 at yy.yyy.yyy.yy.
> CSeq: 567882513 INVITE.
> Route:
> <sip:990099002 at yy.yyy.yyy.yy:5060;nat=yes;ftag=f7983fe553e1941;lr=on>.
> P-Asserted-Identity: "QE-B" <sip:990099002 at yy.yyy.yyy.yy>.
> Allow: INVITE.
> Allow: CANCEL.
> Allow: OPTIONS.
> Allow: BYE.
> Allow: REFER.
> Allow: INFO.
> Allow: UPDATE.
> Content-Type: application/sdp.
> Contact: "QE-B" <sip:990099002 at 192.168.162.181>.
> Supported: replaces.
> User-Agent: NeuralX MxSF/v3.2.6.26.
> .
> v=0.
> o=990099002 1136076203 1136076205 IN IP4 192.168.162.181.
> s=-.
> c=IN IP4 192.168.162.181.
> t=0 0.
> a=sendonly.
> m=audio 20006 RTP/AVP 0 101 8 18 .
> a=rtpmap:0 PCMU/8000.
> a=rtpmap:101 telephone-event/8000.
> a=rtpmap:8 PCMA/8000.
> a=rtpmap:18 G729/8000.
> a=fmtp:101 0-15.
> a=fmtp:18 annexb=no.
> a=ptime:20.
> a=rtcp:20007 IN IP4 192.168.162.181.
> 
> 
> U yy.yyy.yyy.yy:5060 -> xxx.xx.xx.xx:5060
> SIP/2.0 407 Proxy Authentication Required.
> Via: SIP/2.0/UDP
> 192.168.162.181;branch=z9hG4bK309b82ccf;received=xxx.xx.xx.xx.
> To: "QE-A" <sip:990099001 at yy.yyy.yyy.yy>;tag=f7983fe553e1941.
> From: "QE-B" <sip:990099002 at yy.yyy.yyy.yy>;tag=5bf8b4fb69fca84.
> Call-ID: 7c933d3d19bb76c396b995202b18eb97 at yy.yyy.yyy.yy.
> CSeq: 567882513 INVITE.
> Proxy-Authenticate: Digest realm="yy.yyy.yyy.yy",
> nonce="463f31b81a65dee3419ce3e4bfbecc253410cbf5".
> Server: Sip EXpress router (0.9.6 (i386/freebsd)).
> Content-Length: 0.
> Warning: 392 yy.yyy.yyy.yy:5060 "Noisy feedback tells:  pid=49990
> req_src_ip=xxx.xx.xx.xx req_src_port=62907
> in_uri=sip:990099001 at 192.168.162.187
> out_uri=sip:990099001 at 192.168.162.187 via_cnt==1".
> .
> _______________________________________________
> Serusers mailing list
> Serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
> 
>