<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri","sans-serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Appear to have found it…. same problem.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Oct 31 12:55:15 softswitch proxy[4823]: NOTICE: <script>: New request - M=REGISTER R=sip:swphone.cloud.com F=sip:52325800060@swphone.cloud.com T=sip:52325800060@swphone.cloud.com IP=126.121.32.231:1250 (127.0.0.1:5060)
ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Oct 31 12:55:15 softswitch proxy[4823]: NOTICE: <script>: Authentication failed, stale nonce - R=sip:swphone.cloud.com ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Oct 31 12:55:16 softswitch proxy[4821]: NOTICE: <script>: New request - M=REGISTER R=sip:swphone.cloud.com F=sip:52325800060@swphone.cloud.com T=sip:52325800060@swphone.cloud.com IP=126.121.32.231:1250 (127.0.0.1:5060)
ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Oct 31 12:55:16 softswitch proxy[4821]: NOTICE: <script>: Authentication failed, stale nonce - R=sip:swphone.cloud.com ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Oct 31 12:55:17 softswitch proxy[4817]: NOTICE: <script>: New request - M=REGISTER R=sip:swphone.cloud.com F=sip:52325800060@swphone.cloud.com T=sip:52325800060@swphone.cloud.com IP=126.121.32.231:1250 (127.0.0.1:5060)
ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Oct 31 12:55:17 softswitch proxy[4817]: NOTICE: <script>: Authentication failed, stale nonce - R=sip:swphone.cloud.com ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F497D"> </span><span style="color:#1F497D"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Spce-user [mailto:spce-user-bounces@lists.sipwise.com]
<b>On Behalf Of </b>Kalen Krueger<br>
<b>Sent:</b> Saturday, November 1, 2014 9:17 AM<br>
<b>To:</b> Daniel Grotti; Matthew Ogden<br>
<b>Cc:</b> spce-user@lists.sipwise.com; Dustin Rollins<br>
<b>Subject:</b> Re: [Spce-user] Troubleshooting an asterisk server that keeps losing registration.<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Actually it appears that one of the unauthorized and register are from a different system….
</span><b>F=sip:2538523566@swphone.cloud.com<o:p></o:p></b></p>
<p class="MsoNormal"><b><o:p> </o:p></b></p>
<p class="MsoNormal"><span style="color:#1F497D">It’s the </span><b>F=sip:5232580006@swphone.cloud.com
</b><span style="color:#1F497D">I’m having problems with.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F497D"> </span><span style="color:#1F497D"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Kalen Krueger <br>
<b>Sent:</b> Saturday, November 1, 2014 9:10 AM<br>
<b>To:</b> 'Daniel Grotti'; 'Matthew Ogden'<br>
<b>Cc:</b> 'spce-user@lists.sipwise.com'; <a href="mailto:dustin@npinfo.com">dustin@npinfo.com</a><br>
<b>Subject:</b> RE: [Spce-user] Troubleshooting an asterisk server that keeps losing registration.<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoPlainText">I see that it's getting blocked via 403 for too many "Consecutive Authentication Failure", but I'm not sure why.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">In going through the logs seems that the asterisk box updates its registration every 60 seconds or so, and then for some reason it decides to do so five times within two seconds, with an OPTIONS stuck in there as well. And out of the
5 REGISTER attempts I’m seeing it got four “S=401 – Unauthorized”, and one “S=200 – OK”… then the block.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Thoughts?<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><b>Oct 31 12:55:15 softswitch lb[3936]: NOTICE: <script>: New request - M=REGISTER R=sip:swphone.cloud.com F=sip:5232580006@swphone.cloud.com T=sip:5232580006@swphone.cloud.com IP=udp:126.121.32.231:1250
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></b></p>
<p class="MsoPlainText">Oct 31 12:55:15 softswitch lb[3936]: NOTICE: <script>: Relaying request, du='sip:127.0.0.1:5062', fs='udp:127.0.0.1:5060' - R=sip:swphone.cloud.com
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:15 softswitch lb[3942]: NOTICE: <script>: Reply from Inbound - S=100 - Trying M=REGISTER IP=udp:127.0.0.1:5062
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:15 softswitch lb[3942]: NOTICE: <script>: Sending reply, fs='udp:126.121.32.156:5060' -
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:15 softswitch lb[3945]: NOTICE: <script>: Reply from Inbound - S=401 - Unauthorized M=REGISTER IP=udp:127.0.0.1:5062
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:15 softswitch lb[3945]: NOTICE: <script>: Sending reply, fs='udp:126.121.32.156:5060' -
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText"><b>Oct 31 12:55:15 softswitch lb[3944]: NOTICE: <script>: New request - M=OPTIONS R=sip:5232580006@126.121.32.231:5060 F=sip:pinger@sipwise.local T=sip:5232580006@126.121.32.231:5060 IP=udp:127.0.0.1:5062
<a href="mailto:ID=46812103-c873ac75-232b4b5@127.0.0.1">ID=46812103-c873ac75-232b4b5@127.0.0.1</a><o:p></o:p></b></p>
<p class="MsoPlainText">Oct 31 12:55:15 softswitch lb[3944]: NOTICE: <script>: Relaying request, du='sip:126.121.32.231:1250', fs='udp:126.121.32.156:5060' - R=sip:5232580006@126.121.32.231:5060
<a href="mailto:ID=46812103-c873ac75-232b4b5@127.0.0.1">ID=46812103-c873ac75-232b4b5@127.0.0.1</a><o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3934]: NOTICE: <script>: New request - M=OPTIONS R=sip:162.211.23.163:5060 F=sip:ping@69.164.175.54 T=sip:ping@162.211.23.163 IP=udp:162.211.23.163:5060 ID=1512CE23-5453E9120009B4BF-D4E20700<o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3934]: NOTICE: <script>: Relaying request, du='sip:127.0.0.1:5062', fs='udp:127.0.0.1:5060' - R=sip:162.211.23.163:5060 ID=1512CE23-5453E9120009B4BF-D4E20700<o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3938]: NOTICE: <script>: Reply from Inbound - S=100 - Trying M=OPTIONS IP=udp:127.0.0.1:5062 ID=1512CE23-5453E9120009B4BF-D4E20700<o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3938]: NOTICE: <script>: Sending reply, fs='udp:126.121.32.156:5060' - ID=1512CE23-5453E9120009B4BF-D4E20700<o:p></o:p></p>
<p class="MsoPlainText"><b>Oct 31 12:55:16 softswitch lb[3931]: NOTICE: <script>: New request - M=REGISTER R=sip:swphone.cloud.com F=sip:5232580006@swphone.cloud.com T=sip:5232580006@swphone.cloud.com IP=udp:126.121.32.231:1250
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></b></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3931]: NOTICE: <script>: Relaying request, du='sip:127.0.0.1:5062', fs='udp:127.0.0.1:5060' - R=sip:swphone.cloud.com
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3940]: NOTICE: <script>: Reply from Inbound - S=100 - Trying M=REGISTER IP=udp:127.0.0.1:5062
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3940]: NOTICE: <script>: Sending reply, fs='udp:126.121.32.156:5060' -
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3943]: NOTICE: <script>: Reply from Inbound - S=401 - Unauthorized M=REGISTER IP=udp:127.0.0.1:5062
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3943]: NOTICE: <script>: Sending reply, fs='udp:126.121.32.156:5060' -
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText"><b>Oct 31 12:55:16 softswitch lb[3930]: NOTICE: <script>: New request - M=REGISTER R=sip:swphone.cloud.com:5060 F=sip:2538523566@swphone.cloud.com:5060;transport=UDP T=sip:2538523566@swphone.cloud.com:5060;transport=UDP IP=udp:69.164.160.210:5060
ID=3c1ccd0-7f000001-13c4-38ead-8b955d57-38ead<o:p></o:p></b></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3930]: NOTICE: <script>: Relaying request, du='sip:127.0.0.1:5062', fs='udp:127.0.0.1:5060' - R=sip:swphone.cloud.com:5060 ID=3c1ccd0-7f000001-13c4-38ead-8b955d57-38ead<o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3941]: NOTICE: <script>: Reply from Inbound - S=100 - Trying M=REGISTER IP=udp:127.0.0.1:5062 ID=3c1ccd0-7f000001-13c4-38ead-8b955d57-38ead<o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3941]: NOTICE: <script>: Sending reply, fs='udp:126.121.32.156:5060' - ID=3c1ccd0-7f000001-13c4-38ead-8b955d57-38ead<o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3939]: NOTICE: <script>: Reply from Inbound - S=401 - Unauthorized M=REGISTER IP=udp:127.0.0.1:5062 ID=3c1ccd0-7f000001-13c4-38ead-8b955d57-38ead<o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3939]: NOTICE: <script>: Sending reply, fs='udp:126.121.32.156:5060' - ID=3c1ccd0-7f000001-13c4-38ead-8b955d57-38ead<o:p></o:p></p>
<p class="MsoPlainText"><b>Oct 31 12:55:16 softswitch lb[3932]: NOTICE: <script>: New request - M=REGISTER R=sip:swphone.cloud.com:5060 F=sip:2538523566@swphone.cloud.com:5060;transport=UDP T=sip:2538523566@swphone.cloud.com:5060;transport=UDP IP=udp:69.164.160.210:5060
ID=3c1ccd0-7f000001-13c4-38ead-8b955d57-38ead<o:p></o:p></b></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3932]: NOTICE: <script>: Relaying request, du='sip:127.0.0.1:5062', fs='udp:127.0.0.1:5060' - R=sip:swphone.cloud.com:5060 ID=3c1ccd0-7f000001-13c4-38ead-8b955d57-38ead<o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3942]: NOTICE: <script>: Reply from Inbound - S=100 - Trying M=REGISTER IP=udp:127.0.0.1:5062 ID=3c1ccd0-7f000001-13c4-38ead-8b955d57-38ead<o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3942]: NOTICE: <script>: Sending reply, fs='udp:126.121.32.156:5060' - ID=3c1ccd0-7f000001-13c4-38ead-8b955d57-38ead<o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3945]: NOTICE: <script>: Reply from Inbound - S=200 - OK M=REGISTER IP=udp:127.0.0.1:5062 ID=3c1ccd0-7f000001-13c4-38ead-8b955d57-38ead<o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:16 softswitch lb[3945]: NOTICE: <script>: Sending reply, fs='udp:126.121.32.156:5060' - ID=3c1ccd0-7f000001-13c4-38ead-8b955d57-38ead<o:p></o:p></p>
<p class="MsoPlainText"><b>Oct 31 12:55:17 softswitch lb[3937]: NOTICE: <script>: New request - M=REGISTER R=sip:swphone.cloud.com F=sip:5232580006@swphone.cloud.com T=sip:5232580006@swphone.cloud.com IP=udp:126.121.32.231:1250
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></b></p>
<p class="MsoPlainText">Oct 31 12:55:17 softswitch lb[3937]: NOTICE: <script>: Relaying request, du='sip:127.0.0.1:5062', fs='udp:127.0.0.1:5060' - R=sip:swphone.cloud.com
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:17 softswitch lb[3944]: NOTICE: <script>: Reply from Inbound - S=100 - Trying M=REGISTER IP=udp:127.0.0.1:5062
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:17 softswitch lb[3944]: NOTICE: <script>: Sending reply, fs='udp:126.121.32.156:5060' -
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText">Oct 31 12:55:17 softswitch lb[3938]: NOTICE: <script>: Reply from Inbound - S=401 - Unauthorized M=REGISTER IP=udp:127.0.0.1:5062
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText"><b>Oct 31 12:55:17 softswitch lb[3938]: WARNING: <script>: Consecutive Authentication Failure for '5232580006@swphone.cloud.com' UA='FPBX-2.11.0(11.7.0)' IP='126.121.32.231' - R=<null>
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></b></p>
<p class="MsoPlainText">Oct 31 12:55:17 softswitch lb[3938]: NOTICE: <script>: Sending reply, fs='udp:126.121.32.156:5060' -
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></p>
<p class="MsoPlainText"><b>Oct 31 12:55:17 softswitch lb[3933]: WARNING: <script>: Subscriber '5232580006@swphone.cloud.com' UA='FPBX-2.11.0(11.7.0)' from IP='126.121.32.231' is temporarily banned, send 403 - R=sip:swphone.cloud.com
<a href="mailto:ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com">ID=511538593775b82678c14d4a6913ce07@swphone.cloud.com</a><o:p></o:p></b></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">-----Original Message-----<br>
From: Kalen Krueger <br>
Sent: Saturday, November 1, 2014 8:12 AM<br>
To: 'Daniel Grotti'; Matthew Ogden<br>
Cc: <a href="mailto:spce-user@lists.sipwise.com">spce-user@lists.sipwise.com</a><br>
Subject: RE: [Spce-user] Troubleshooting an asterisk server that keeps losing registration.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Matthew, how did you come to the conclusion that it was a stale nonce? I would like to compare what I'm seeing in our asterisk boxes.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">>>>> On 01/27/2014 04:35 PM, Matthew Ogden wrote:<o:p></o:p></p>
<p class="MsoPlainText">>>>>> Did you guys end up making a decision on this? I still have
<o:p></o:p></p>
<p class="MsoPlainText">>>>>> Asterisk subscribers causing auth fail with stale nonce situations.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">-----Original Message-----<o:p></o:p></p>
<p class="MsoPlainText">From: Daniel Grotti [<a href="mailto:dgrotti@sipwise.com"><span style="color:windowtext;text-decoration:none">mailto:dgrotti@sipwise.com</span></a>]<o:p></o:p></p>
<p class="MsoPlainText">Sent: Saturday, November 1, 2014 2:56 AM<o:p></o:p></p>
<p class="MsoPlainText">To: Matthew Ogden<o:p></o:p></p>
<p class="MsoPlainText">Cc: <a href="mailto:spce-user@lists.sipwise.com"><span style="color:windowtext;text-decoration:none">spce-user@lists.sipwise.com</span></a>; Kalen Krueger<o:p></o:p></p>
<p class="MsoPlainText">Subject: RE: [Spce-user] Troubleshooting an asterisk server that keeps losing registration.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Thanks Metthew!<o:p></o:p></p>
<p class="MsoPlainText">Didn't remember that :)<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Daniel<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">On 1 Nov 2014 10:51, Matthew Ogden <<a href="mailto:matthew@tenacit.net"><span style="color:windowtext;text-decoration:none">matthew@tenacit.net</span></a>> wrote:<o:p></o:p></p>
<p class="MsoPlainText">><o:p> </o:p></p>
<p class="MsoPlainText">> Hi Danel & Kalen<o:p></o:p></p>
<p class="MsoPlainText">><o:p> </o:p></p>
<p class="MsoPlainText">> Is this not the same issue I had? Mine was because it's using a stale
<o:p></o:p></p>
<p class="MsoPlainText">> nonce - which NGCP rejects. Basically if you send to many 401s or 407s
<o:p></o:p></p>
<p class="MsoPlainText">> the LB will ban it with a 403.<o:p></o:p></p>
<p class="MsoPlainText">> So we were seeing a lot of asterisk boxes give up (and ours was an
<o:p></o:p></p>
<p class="MsoPlainText">> appliance that cannot retry automatically after 403)<o:p></o:p></p>
<p class="MsoPlainText">><o:p> </o:p></p>
<p class="MsoPlainText">> You can stop spce from blocking stale nonce registrations. See this thread:
<o:p></o:p></p>
<p class="MsoPlainText">> <a href="http://lists.sipwise.com/pipermail/spce-user/2014-January/005712.html">
<span style="color:windowtext;text-decoration:none">http://lists.sipwise.com/pipermail/spce-user/2014-January/005712.html</span></a><o:p></o:p></p>
<p class="MsoPlainText">><o:p> </o:p></p>
<p class="MsoPlainText">> Daniel's suggestion was to add the P-NGCP-Stale header in the proxy,
<o:p></o:p></p>
<p class="MsoPlainText">> and then make the LB only do a 401 if it wasn't present.<o:p></o:p></p>
<p class="MsoPlainText">><o:p> </o:p></p>
<p class="MsoPlainText">> It saved me from a LOT of headaches. <o:p></o:p></p>
<p class="MsoPlainText">><o:p> </o:p></p>
<p class="MsoPlainText">> Thanks again! <o:p></o:p></p>
<p class="MsoPlainText">><o:p> </o:p></p>
<p class="MsoPlainText">><o:p> </o:p></p>
<p class="MsoPlainText">> -----Original Message-----<o:p></o:p></p>
<p class="MsoPlainText">> From: Spce-user [<a href="mailto:spce-user-bounces@lists.sipwise.com"><span style="color:windowtext;text-decoration:none">mailto:spce-user-bounces@lists.sipwise.com</span></a>] On Behalf
<o:p></o:p></p>
<p class="MsoPlainText">> Of Daniel Grotti<o:p></o:p></p>
<p class="MsoPlainText">> Sent: 01 November 2014 10:57 AM<o:p></o:p></p>
<p class="MsoPlainText">> To: Kalen Krueger<o:p></o:p></p>
<p class="MsoPlainText">> Cc: <a href="mailto:spce-user@lists.sipwise.com"><span style="color:windowtext;text-decoration:none">spce-user@lists.sipwise.com</span></a><o:p></o:p></p>
<p class="MsoPlainText">> Subject: Re: [Spce-user] Troubleshooting an asterisk server that keeps
<o:p></o:p></p>
<p class="MsoPlainText">> losing registration.<o:p></o:p></p>
<p class="MsoPlainText">><o:p> </o:p></p>
<p class="MsoPlainText">> Mmm...yes this is well know issue of asterisk. <o:p></o:p></p>
<p class="MsoPlainText">> But spce should send 403 only when a user is blocked. <o:p>
</o:p></p>
<p class="MsoPlainText">> Don't get the scenario when PBX get 403 during a normal registration.
<o:p></o:p></p>
<p class="MsoPlainText">><o:p> </o:p></p>
<p class="MsoPlainText">> In the worst case you can change the 403 reply on spce. But only of
<o:p></o:p></p>
<p class="MsoPlainText">> you really need. This is an asterisk issue.<o:p></o:p></p>
<p class="MsoPlainText">><o:p> </o:p></p>
<p class="MsoPlainText">> Daniel<o:p></o:p></p>
<p class="MsoPlainText">><o:p> </o:p></p>
<p class="MsoPlainText">> On 1 Nov 2014 09:12, Kalen Krueger <<a href="mailto:kalen@npinfo.com"><span style="color:windowtext;text-decoration:none">kalen@npinfo.com</span></a>> wrote:
<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > Upon further review it appears that we’re getting this error out of
<o:p></o:p></p>
<p class="MsoPlainText">> > the blue….<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > Then based on the “Forbidden” (I’m assuming 403 error), it stops
<o:p></o:p></p>
<p class="MsoPlainText">> > trying until we force it to.<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > I’ve added the new option available in the PBX configuration to see
<o:p></o:p></p>
<p class="MsoPlainText">> > if this helps, but I’m just wondering why this would happen out of the blue?<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > register_retry_403=yes<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > ; Treat 403 responses to registrations as if they were<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > ; 401 responses and continue retrying
<o:p></o:p></p>
<p class="MsoPlainText">> >according to normal<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > ; retry rules. <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > Kalen Krueger<o:p></o:p></p>
<p class="MsoPlainText">> > Technical and Project Manager<o:p></o:p></p>
<p class="MsoPlainText">> > NP Information Systems<o:p></o:p></p>
<p class="MsoPlainText">> > <a href="http://www.npinfo.com"><span style="color:windowtext;text-decoration:none">www.npinfo.com</span></a><o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <a href="mailto:kalen@npinfo.com"><span style="color:windowtext;text-decoration:none">kalen@npinfo.com</span></a><o:p></o:p></p>
<p class="MsoPlainText">> > desk: (253) 479-1321<o:p></o:p></p>
<p class="MsoPlainText">> > office: (253) 852-1543<o:p></o:p></p>
<p class="MsoPlainText">> > mobile: (206) 963-1309<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > From: Spce-user [<a href="mailto:spce-user-bounces@lists.sipwise.com"><span style="color:windowtext;text-decoration:none">mailto:spce-user-bounces@lists.sipwise.com</span></a>] On
<o:p></o:p></p>
<p class="MsoPlainText">> > Behalf Of Kalen Krueger<o:p></o:p></p>
<p class="MsoPlainText">> > Sent: Friday, October 31, 2014 4:00 PM<o:p></o:p></p>
<p class="MsoPlainText">> > To: <a href="mailto:spce-user@lists.sipwise.com"><span style="color:windowtext;text-decoration:none">spce-user@lists.sipwise.com</span></a><o:p></o:p></p>
<p class="MsoPlainText">> > Subject: [Spce-user] Troubleshooting an asterisk server that keeps
<o:p></o:p></p>
<p class="MsoPlainText">> > losing registration.<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > We’ve got one particular PBX we’re having a problem with. At
<o:p></o:p></p>
<p class="MsoPlainText">> > seemingly random intervals <a href="sip:wise"><span style="color:windowtext;text-decoration:none">sip:wise</span></a> thinks it’s lost registration,
<o:p></o:p></p>
<p class="MsoPlainText">> > while the PBX still thinks it’s registered. Therefore
<a href="sip:wise"><span style="color:windowtext;text-decoration:none">sip:wise</span></a>
<o:p></o:p></p>
<p class="MsoPlainText">> > forwards the calls to the caller wave have listed in “Call Forward Unavailable”.<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > We’ve been working on this for several weeks… trying different
<o:p></o:p></p>
<p class="MsoPlainText">> > things… and I need to reach out for some guidance. What
<o:p></o:p></p>
<p class="MsoPlainText">> > information can provide to the community that would helpful?<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > We’re running mr3.4.2 and the subscriber is FreePBX 2.11.0.37.
<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > Here’s a screenshot (some info scrubbed) of our trunk setup in
<o:p></o:p></p>
<p class="MsoPlainText">> > FreePBX, and the registration in sip:wise… in case we have something
<o:p></o:p></p>
<p class="MsoPlainText">> > obviously wrong. I’m happy to collect tsharks, etc. to assist….<o:p></o:p></p>
<p class="MsoPlainText">> > Just feel at this point like I’m running in circles.<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > Thanks ahead of time for any guidance. <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > Kalen Krueger<o:p></o:p></p>
<p class="MsoPlainText">> > Technical and Project Manager<o:p></o:p></p>
<p class="MsoPlainText">> > NP Information Systems<o:p></o:p></p>
<p class="MsoPlainText">> > <a href="http://www.npinfo.com"><span style="color:windowtext;text-decoration:none">www.npinfo.com</span></a><o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <a href="mailto:kalen@npinfo.com"><span style="color:windowtext;text-decoration:none">kalen@npinfo.com</span></a><o:p></o:p></p>
<p class="MsoPlainText">> > desk: (253) 479-1321<o:p></o:p></p>
<p class="MsoPlainText">> > office: (253) 852-1543<o:p></o:p></p>
<p class="MsoPlainText">> > mobile: (206) 963-1309<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > ________________________________<o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > <o:p></o:p></p>
<p class="MsoPlainText">> > This email and any files transmitted with it are confidential and
<o:p></o:p></p>
<p class="MsoPlainText">> > intended solely for the use of the individual or entity to whom they are addressed.<o:p></o:p></p>
<p class="MsoPlainText">> > If you have received this email in error please notify the system manager.
<o:p></o:p></p>
<p class="MsoPlainText">> > Please note that any views or opinions presented in this email are
<o:p></o:p></p>
<p class="MsoPlainText">> > solely those of the author and do not necessarily represent those of the company.<o:p></o:p></p>
<p class="MsoPlainText">> _______________________________________________<o:p></o:p></p>
<p class="MsoPlainText">> Spce-user mailing list<o:p></o:p></p>
<p class="MsoPlainText">> <a href="mailto:Spce-user@lists.sipwise.com"><span style="color:windowtext;text-decoration:none">Spce-user@lists.sipwise.com</span></a><o:p></o:p></p>
<p class="MsoPlainText">> <a href="https://lists.sipwise.com/listinfo/spce-user">
<span style="color:windowtext;text-decoration:none">https://lists.sipwise.com/listinfo/spce-user</span></a><o:p></o:p></p>
</div>
</body>
</html>