[SR-Users] REGISTER OK but on send "407 Proxy Authentication Required" with no ACK

Tue Jan 29 06:41:40 CET 2013

Hi all,

I am trying to set up a fax gateway in the following way:

PSTN-GW (10.1.1.150) <--> Kamailio (10.1.1.148:5123) <--> t38modem
(10.1.1.148:6050) <--> Hylafax

PSTN-GW is a standalone Berofix appliance and Kamailio 3.3.3, t38modem
1.2 and Hylafax 6.0.3 running on the same host under Redhat EL6.

I used the default kamailio.cfg and just adjusted the PSTN route pattern
to "if(!($rU=~"^(\+|00|0)[1-9][0-9]{3,20}$"))", to route all calls
starting with 0 to the PSTN-GW.

Both PSTN-GW and t38modem Successfully register to Kamailio but when I
try to send out a fax from t38modem, Kamailio doesn't ACK the
Proxy-Authorization request and t38modem terminates the call:

<siptrace>

05:49:11.158157 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 986)
    10.1.1.148.6050 > 10.1.1.148.5123: UDP, length 958
E..... at .@.Y.
.d.
.d.........INVITE sip:030987654321 at 10.1.1.148:5123 SIP/2.0
Route: <sip:10.1.1.148:5123;lr>
Date: Tue, 29 Jan 2013 04:49:11 GMT
CSeq: 1 INVITE
Via: SIP/2.0/UDP
10.1.1.148:6050;branch=z9hG4bK020144e4-3c68-e211-98e4-005056bd002b;rport
User-Agent: T38Modem/1.2.0
From: "root"
<sip:030123456789 at 10.1.1.148:5123>;tag=169d43e4-3c68-e211-98e4-005056bd002b
Call-ID: 16a243e4-3c68-e211-98e4-005056bd002b at myhost.mydomain.local
Organization: Vyacheslav Frolov
To: <sip:030987654321 at 10.1.1.148:5123>
Contact: <sip:030123456789 at 10.1.1.148:6050>
Allow:
INVITE,ACK,OPTIONS,BYE,CANCEL,SUBSCRIBE,NOTIFY,REFER,MESSAGE,INFO,PING
Content-Type: application/sdp
Content-Length: 262
Max-Forwards: 70

v=0
o=- 1359434951 1 IN IP4 10.1.1.148
s=Opal SIP Session
c=IN IP4 10.1.1.148
t=0 0
m=audio 5008 RTP/AVP 8 101 100
a=sendrecv
a=rtpmap:8 PCMA/8000/1
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16,32,36
a=rtpmap:100 NSE/8000
a=fmtp:100 192-193

05:49:11.158927 IP (tos 0x10, ttl 64, id 28825, offset 0, flags [none],
proto UDP (17), length 584)
    10.1.1.148.5123 > 10.1.1.148.6050: UDP, length 556
E..Hp... at .*.
.d.
.d......4.oSIP/2.0 407 Proxy Authentication Required
CSeq: 1 INVITE
Via: SIP/2.0/UDP
10.1.1.148:6050;branch=z9hG4bK020144e4-3c68-e211-98e4-005056bd002b;rport=6050
From: "root"
<sip:030123456789 at 10.1.1.148:5123>;tag=169d43e4-3c68-e211-98e4-005056bd002b
Call-ID: 16a243e4-3c68-e211-98e4-005056bd002b at myhost.mydomain.local
To:
<sip:030987654321 at 10.1.1.148:5123>;tag=75c88a497c1ef184e8ac0d2e60c130e4.0580
Proxy-Authenticate: Digest realm="10.1.1.148",
nonce="UQdV81EHVMeoOdE8gs8P4V1EFJAb79/W"
Server: kamailio (3.3.3 (x86_64/linux))
Content-Length: 0

05:49:11.160273 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 501)
    10.1.1.148.6050 > 10.1.1.148.5123: UDP, length 473
E..... at .@.[.
.d.
.d.........ACK sip:030987654321 at 10.1.1.148:5123 SIP/2.0
Route: <sip:10.1.1.148:5123;lr>
CSeq: 1 ACK
Via: SIP/2.0/UDP
10.1.1.148:6050;branch=z9hG4bK020144e4-3c68-e211-98e4-005056bd002b;rport
From: "root"
<sip:030123456789 at 10.1.1.148:5123>;tag=169d43e4-3c68-e211-98e4-005056bd002b
Call-ID: 16a243e4-3c68-e211-98e4-005056bd002b at myhost.mydomain.local
To:
<sip:030987654321 at 10.1.1.148:5123>;tag=75c88a497c1ef184e8ac0d2e60c130e4.0580
Content-Length: 0
Max-Forwards: 70

05:49:11.166542 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 1195)
    10.1.1.148.6050 > 10.1.1.148.5123: UDP, length 1167
E..... at .@.Y.
.d.
.d.........INVITE sip:030987654321 at 10.1.1.148:5123 SIP/2.0
Route: <sip:10.1.1.148:5123;lr>
Date: Tue, 29 Jan 2013 04:49:11 GMT
CSeq: 2 INVITE
Via: SIP/2.0/UDP
10.1.1.148:6050;branch=z9hG4bK146145e4-3c68-e211-98e4-005056bd002b;rport
User-Agent: T38Modem/1.2.0
From: "root"
<sip:030123456789 at 10.1.1.148:5123>;tag=169d43e4-3c68-e211-98e4-005056bd002b
Call-ID: 16a243e4-3c68-e211-98e4-005056bd002b at myhost.mydomain.local
Organization: Vyacheslav Frolov
To: <sip:030987654321 at 10.1.1.148:5123>
Contact: <sip:030123456789 at 10.1.1.148:6050>
Proxy-Authorization: Digest username="979", realm="10.1.1.148",
nonce="UQdV81EHVMeoOdE8gs8P4V1EFJAb79/W",
uri="sip:030987654321 at 10.1.1.148:5123", algorithm=MD5,
response="48d896ef41a71720b29c56230858582f"
Allow:
INVITE,ACK,OPTIONS,BYE,CANCEL,SUBSCRIBE,NOTIFY,REFER,MESSAGE,INFO,PING
Content-Type: application/sdp
Content-Length: 262
Max-Forwards: 70

v=0
o=- 1359434951 1 IN IP4 10.1.1.148
s=Opal SIP Session
c=IN IP4 10.1.1.148
t=0 0
m=audio 5008 RTP/AVP 8 101 100
a=sendrecv
a=rtpmap:8 PCMA/8000/1
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16,32,36
a=rtpmap:100 NSE/8000
a=fmtp:100 192-193

05:49:11.167573 IP (tos 0x10, ttl 64, id 28826, offset 0, flags [none],
proto UDP (17), length 584)
    10.1.1.148.5123 > 10.1.1.148.6050: UDP, length 556
E..Hp... at .*.
.d.
.d......4.oSIP/2.0 407 Proxy Authentication Required
CSeq: 2 INVITE
Via: SIP/2.0/UDP
10.1.1.148:6050;branch=z9hG4bK146145e4-3c68-e211-98e4-005056bd002b;rport=6050
From: "root"
<sip:030123456789 at 10.1.1.148:5123>;tag=169d43e4-3c68-e211-98e4-005056bd002b
Call-ID: 16a243e4-3c68-e211-98e4-005056bd002b at myhost.mydomain.local
To:
<sip:030987654321 at 10.1.1.148:5123>;tag=75c88a497c1ef184e8ac0d2e60c130e4.263a
Proxy-Authenticate: Digest realm="10.1.1.148",
nonce="UQdV81EHVMeoOdE8gs8P4V1EFJAb79/W"
Server: kamailio (3.3.3 (x86_64/linux))
Content-Length: 0

05:49:11.169220 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
UDP (17), length 710)
    10.1.1.148.6050 > 10.1.1.148.5123: UDP, length 682
E..... at .@.Z.
.d.
.d.........ACK sip:030987654321 at 10.1.1.148:5123 SIP/2.0
Route: <sip:10.1.1.148:5123;lr>
CSeq: 2 ACK
Via: SIP/2.0/UDP
10.1.1.148:6050;branch=z9hG4bK146145e4-3c68-e211-98e4-005056bd002b;rport
From: "root"
<sip:030123456789 at 10.1.1.148:5123>;tag=169d43e4-3c68-e211-98e4-005056bd002b
Call-ID: 16a243e4-3c68-e211-98e4-005056bd002b at myhost.mydomain.local
To:
<sip:030987654321 at 10.1.1.148:5123>;tag=75c88a497c1ef184e8ac0d2e60c130e4.263a
Proxy-Authorization: Digest username="979", realm="10.1.1.148",
nonce="UQdV81EHVMeoOdE8gs8P4V1EFJAb79/W",
uri="sip:030987654321 at 10.1.1.148:5123", algorithm=MD5,
response="3056b266b15a92f5cc8cc8e1c073fbcb"
Content-Length: 0
Max-Forwards: 70

</siptrace>

What do I have to adjust to make this work?
Any help and pointers highly appreciated.

Thanks in advance and greetings,
Carsten.

-- 
Blinkenlichten (Maass & Sacha GbR) - Open Source Solutions
Weigandufer 45 - 12059 Berlin - http://www.blinkenlichten.de
FON: ++49 +30 13896247 - MAIL: cm at blinkenlichten.de
FAX: ++49 +30 13896249 - PGP:  Key Id 0x2CBCA806
St.Nr. 16/274/61636