[Serusers] SIP 304 Temporary moved: sendto returning errno 1

[Andrei Pelinescu-Onciul]

On Aug 07, 2008 at 18:27, Vincent Pelletier <vincent at nexedi.com> wrote:
> Hi.
> 
> I built & installed ser-2.0.0-rc1 on a debian stable amd64.
> When I try to redirect a call (case where destination user redirects before 
> answering), it gets an SIP error 477.
> Corresponding error from SER process running in foreground:
> 
>  0(30330) ERROR: udp_send: 
> sendto(sock,0x2aebd16fc038,1227,0,xx.xx.xx.xx:xxxx,16): Operation not 
> permitted(1)
>  0(30330) msg_send: ERROR: udp_send failed
>  0(30330) ERROR: t_send_branch: sending request on branch 0 failed
>  0(30330) ERROR: sl_reply_error used: Unfortunately error on sending to next 
> hop occurred (477/SL)
> 
> Unfortunately, "1" (EPERM) is not documented in sento manpage, as far as I can 
> see, so it's quite hard to track down that problem.
> 
> Kernel version is: 2.6.24.5-grsec
> iptables is used, but putting netcat in place of SER and the client shows that 
> kernel allows packets to reach client (and more simply, it is possible to do 
> a direct call, it's just redirects which fail).
> 
> It can be a grsec problem, I still have to check that part, but I wanted to 
> take the chance of helpful feedback in the meantime.

So far I saw that error only when there where iptables rules blocking
the send.

Andrei