[SR-Users] 403 Proxy forbidden replay for invite that send sip gateway

Klaus Darilion klaus.mailinglists at pernau.at
Wed May 18 17:18:46 CEST 2011


	if(!is_domain_local(“$fd”))
	{
		if(!is_domain_local(“$rd”))
		{
			xlog(“+++++ bad from fd from IP: $fd\n”);
			
			xlog(“+++++ bad from $rd from IP: $rd \n”);

			sl_send_reply(“403”, “Proxy forbidden”);



Neither the From domain nor the request URI's domain are local domains.
Thus the proxy rejects the request to avoid being abused as open relay.

Either instruct the provider to send requests with proper domain in
request URI or add "79.12.254.153" to the local domains. (add
"79.12.254.153" to domain table)

regards
klaus

Am 18.05.2011 16:54, schrieb hala alramli:
> 
> 
>     thanks for your reply Klaus ,attached my config file could you
>     please take a look ,i found the line that send that replay  but i do
>     not know why .? could you help me i am stuck
> 
> 
> 
> 
> 
>     --- *Mer 18/5/11, Klaus Darilion /<klaus.mailinglists at pernau.at>/*ha
>     scritto:
> 
> 
>         Da: Klaus Darilion <klaus.mailinglists at pernau.at>
>         Oggetto: Re: [SR-Users] 403 Proxy forbidden replay for invite
>         that send sip gateway
>         A: sr-users at lists.sip-router.org
>         Data: Mercoledì 18 maggio 2011, 13:04
> 
>         Check your config and verify where 403 is sent. You have
>         something like
> 
>         sl_send_reply("403","Proxy forbidden") in your config.
> 
>         regards
>         Klaus
> 
>         Am 18.05.2011 10:48, schrieb hala alramli:
>         > Hello every body,
>         > could you help me ?
>         >
>         > i bought Geographical DID numbers from gateway provider ,  to 
>         receive
>         > calls from pstn   
>         >
>         > my problem that when gateway send invite my proxy send 403
>         forbidden ,i
>         > dont know why what is wrong ,any help please.
>         >
>         > this is a track for th gateway invite.
>         >
>         > my proxy ip:79.12.254.153
>         > gateway IP :77.239.128.10
>         > my geographical number :0698962030
>         >
>         >
>         >
>         > 
>         >
>         > INVITE sip:0698962030 at 79.12.254.153:5060;user=phone SIP/2.0
>         >
>         > Via: SIP/2.0/UDP
>         77.239.128.10:5060;branch=z9hG4bKf89p48m8dkuco1tumbnfaemc44
>         >
>         > From:
>         >
>         <sip:0289089500 at 10.39.1.16:5060;user=phone>;tag=SDml08d01--45026-1f4d3a5-203bbf09-1f4d3a5
>         >
>         > To: <sip:0698962030 at 10.39.6.207:5060;user=phone>
>         >
>         > Call-ID: SDml08d01-daae53b1c06b7367e53d68ad67a63d13-ao92061
>         >
>         > CSeq: 1 INVITE
>         >
>         > User-Agent: CS2000_NGSS/8.0
>         >
>         > Remote-Party-ID: <sip:0289089500 at 10.39.1.16;user=phone>;
>         party=calling;
>         > privacy=off; screen=yes
>         >
>         > Allow:
>         ACK,BYE,CANCEL,INVITE,OPTIONS,INFO,SUBSCRIBE,REFER,NOTIFY,PRACK
>         >
>         > P-Asserted-Identity: <sip:0289089500 at 10.39.1.16;user=phone>
>         >
>         > Max-Forwards: 69
>         >
>         > Contact: <sip:77.239.128.10:5060;transport=UDP>
>         >
>         > Supported: 100rel
>         >
>         > Content-Type: application/sdp
>         >
>         > Content-Length: 236
>         >
>         > 
>         >
>         > v=0
>         >
>         > o=PVG 1305215180830 1305215180830 IN IP4 77.239.128.10
>         >
>         > s=-
>         >
>         > p=+1 6135555555
>         >
>         > c=IN IP4 77.239.128.10
>         >
>         > t=0 0
>         >
>         > m=audio 49264 RTP/AVP 18 8 0 13 101
>         >
>         > a=rtpmap:101 telephone-event/8000
>         >
>         > a=fmtp:101 0-15
>         >
>         > a=ptime:20
>         >
>         > a=fmtp:18 annexb=no
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > SIP/2.0 403 Proxy forbidden
>         >
>         > Via: SIP/2.0/UDP
>         >
>         77.239.128.10:5060;branch=z9hG4bKf89p48m8dkuco1tumbnfaemc44;rport=5060;received=77.239.128.10
>         >
>         > From:
>         >
>         <sip:0289089500 at 10.39.1.16:5060;user=phone>;tag=SDml08d01--45026-1f4d3a5-203bbf09-1f4d3a5
>         >
>         > To:
>         >
>         <sip:0698962030 at 10.39.6.207:5060;user=phone>;tag=4471d251144740103ef2d5e5631bdc66.799c
>         >
>         > Call-ID: SDml08d01-daae53b1c06b7367e53d68ad67a63d13-ao92061
>         >
>         > CSeq: 1 INVITE
>         >
>         > Server: Kamailio (1.4.4-notls (x86_64/linux))
>         >
>         > Content-Length: 0
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > ACK sip:0698962030 at 79.12.254.153:5060;user=phone SIP/2.0
>         >
>         > Via: SIP/2.0/UDP
>         >
>         77.239.128.10:5060;branch=z9hG4bKf89p48m8dkuco1tumbnfaemc44;rport=5060;received=77.239.128.10
>         >
>         > From:
>         >
>         <sip:0289089500 at 10.39.1.16:5060;user=phone>;tag=SDml08d01--45026-1f4d3a5-203bbf09-1f4d3a5
>         >
>         > To:
>         >
>         <sip:0698962030 at 10.39.6.207:5060;user=phone>;tag=4471d251144740103ef2d5e5631bdc66.799c
>         >
>         > Call-ID: SDml08d01-daae53b1c06b7367e53d68ad67a63d13-ao92061
>         >
>         > CSeq: 1 ACK
>         >
>         > Max-Forwards: 69
>         >
>         > Content-Length: 0
>         >
>         > 
>         >
>         >
>         > 
>         >
>         > INVITE sip:0698962030 at 79.12.254.153:5060;user=phone SIP/2.0
>         >
>         > Via: SIP/2.0/UDP
>         77.239.128.10:5060;branch=z9hG4bK4t5g11q75ccl8k5vnbgabnlct2
>         >
>         > From:
>         >
>         <sip:026683011 at 10.39.1.16:5060;user=phone>;tag=SDa7sn401--45026-1f4d3ad-69943699-1f4d3ad
>         >
>         > To: <sip:0698962030 at 10.39.6.207:5060;user=phone>
>         >
>         > Call-ID: SDa7sn401-c505e58e02da5e4449475a8d28dbcb07-ao92061
>         >
>         > CSeq: 1 INVITE
>         >
>         > User-Agent: CS2000_NGSS/8.0
>         >
>         > Remote-Party-ID: <sip:026683011 at 10.39.1.16;user=phone>;
>         party=calling;
>         > privacy=off; screen=yes
>         >
>         > Allow:
>         ACK,BYE,CANCEL,INVITE,OPTIONS,INFO,SUBSCRIBE,REFER,NOTIFY,PRACK
>         >
>         > P-Asserted-Identity: <sip:026683011 at 10.39.1.16;user=phone>
>         >
>         > Max-Forwards: 69
>         >
>         > Contact: <sip:77.239.128.10:5060;transport=UDP>
>         >
>         > Supported: 100rel
>         >
>         > Content-Type: application/sdp
>         >
>         > Content-Length: 236
>         >
>         > 
>         >
>         > v=0
>         >
>         > o=PVG 1305215458700 1305215458700 IN IP4 77.239.128.10
>         >
>         > s=-
>         >
>         > p=+1 6135555555
>         >
>         > c=IN IP4 77.239.128.10
>         >
>         > t=0 0
>         >
>         > m=audio 41892 RTP/AVP 18 8 0 13 101
>         >
>         > a=rtpmap:101 telephone-event/8000
>         >
>         > a=fmtp:101 0-15
>         >
>         > a=ptime:20
>         >
>         > a=fmtp:18 annexb=no
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > SIP/2.0 403 Proxy forbidden
>         >
>         > Via: SIP/2.0/UDP
>         >
>         77.239.128.10:5060;branch=z9hG4bK4t5g11q75ccl8k5vnbgabnlct2;rport=5060;received=77.239.128.10
>         >
>         > From:
>         >
>         <sip:026683011 at 10.39.1.16:5060;user=phone>;tag=SDa7sn401--45026-1f4d3ad-69943699-1f4d3ad
>         >
>         > To:
>         >
>         <sip:0698962030 at 10.39.6.207:5060;user=phone>;tag=4471d251144740103ef2d5e5631bdc66.fe6e
>         >
>         > Call-ID: SDa7sn401-c505e58e02da5e4449475a8d28dbcb07-ao92061
>         >
>         > CSeq: 1 INVITE
>         >
>         > Server: Kamailio (1.4.4-notls (x86_64/linux))
>         >
>         > Content-Length: 0
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         > sip:0698962030 at 79.12.254.153:5060;user=phone SIP/2.0
>         >
>         > Via: SIP/2.0/UDP
>         >
>         77.239.128.10:5060;branch=z9hG4bK4t5g11q75ccl8k5vnbgabnlct2;rport=5060;received=77.239.128.10
>         >
>         > From:
>         >
>         <sip:026683011 at 10.39.1.16:5060;user=phone>;tag=SDa7sn401--45026-1f4d3ad-69943699-1f4d3ad
>         >
>         > To:
>         >
>         <sip:0698962030 at 10.39.6.207:5060;user=phone>;tag=4471d251144740103ef2d5e5631bdc66.fe6e
>         >
>         > Call-ID: SDa7sn401-c505e58e02da5e4449475a8d28dbcb07-ao92061
>         >
>         > CSeq: 1 ACK
>         >
>         > Max-Forwards: 69
>         >
>         > Content-Length: 0
>         >
>         > 
>         >
>         > 
>         >
>         > 
>         >
>         >
>         >
>         > _______________________________________________
>         > SIP Express Router (SER) and Kamailio (OpenSER) - sr-users
>         mailing list
>         > sr-users at lists.sip-router.org
>         > http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
> 
>         _______________________________________________
>         SIP Express Router (SER) and Kamailio (OpenSER) - sr-users
>         mailing list
>         sr-users at lists.sip-router.org
>         http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
> 



More information about the sr-users mailing list