[Kamailio-Users] Firewall and auth

[Andreas Granig]

Juha,

Seems you're right, I managed to register with sipsak using -p for 
outbound proxy, and also with Qutecom, if uri is set to the 172.17.10.50 
ip. Funny thing is that linphone refuses to register (error code for 
"wrong password" in Kamailio) although the Authorization header looks 
the same regarding uri/realm/username tokens.

Well, gonna look deeper, but it makes me wonder a little...

Andreas

Juha Heinanen wrote:
> Andreas Granig writes:
> 
>  > So how does the IP of Kamailio actually influence authentication? Do I 
>  > have to set something special on Kamailio to make this work?
> 
> i don't think ip addresses have anything to do with authentication.  in
> your example, request uri should have the domain the registration is
> for, i.e., 172.17.10.50, but that should not affect authentication.
> 
>  > Authorization: Digest username="sipwise1", realm="172.17.10.50", 
>  > nonce="4a06e2820000000a80c173db2d166fedb7d8d1e933c97855", 
>  > uri="sip:1.2.3.4", response="de645a701a7c507c47a5278923bce54b", 
>  > algorithm=MD5.
> 
> compare this to a working register from sipsak.
> 
> -- juha