<div dir="ltr"><div>Hi,</div><div><br></div><div>When a Customer PBX is registered with Sipwise as a regular subscriber in SIP Trunking domain. When a customer dials PSTN number, they receive following response from Sipwise - Call Failed: 403 Forbidden. I’m not sure what I’m forgetting or how do I troubleshoot this problem. Customer PBX is based on 2600hz Kazoo</div><div><br></div><div>My setup:</div><div>NGCP mr7.5.2 on AWS EC2 (NAT)<br><br>Callflow: Kazoo PBX => NGCP => GW/Termination(Thinq.com)<br><br>Kazoo PBX = 169.169.169.169<br>Internal IP NGCP = 172.31.37.142<br>External IP NGCP = 54.54.54.54<br><br><br></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">MariaDB [provisioning]> select * from provisioning.voip_peer_groups;<br>+----+------------+----------+-------------+---------------------+-------------------+-------------+<br>| id | name       | priority | description | peering_contract_id | has_inbound_rules | time_set_id |<br>+----+------------+----------+-------------+---------------------+-------------------+-------------+<br>|  1 | Kazoo Peer |        1 |             |                   3 |                 0 |        NULL |<br>+----+------------+----------+-------------+---------------------+-------------------+-------------+<br>1 row in set (0.000 sec)<br><br>MariaDB [provisioning]> select * from provisioning.voip_peer_hosts;<br>+----+----------+-------------+---------------+------------------------+------+-----------+--------+-----------+--------+---------+-------+<br>| id | group_id | name        | ip            | host                   | port | transport | weight | via_route | via_lb | enabled | probe |<br>+----+----------+-------------+---------------+------------------------+------+-----------+--------+-----------+--------+---------+-------+<br>|  1 |        1 | Thinq_Kazoo | 72.15.219.140 | NULL                   | 5060 |         1 |      1 | NULL      |      0 |       1 |     0 |<br>|  2 |        1 | PBX Kazoo   | 169.169.169.169 | <a href="http://sip3.phonetrack.com.br">sip3.phonetrack.com.br</a> | 5060 |         1 |      1 | NULL      |      0 |       1 |     0 |<br>+----+----------+-------------+---------------+------------------------+------+-----------+--------+-----------+--------+---------+-------+<br>2 rows in set (0.000 sec)<br><br>MariaDB [provisioning]> select * from provisioning.voip_peer_inbound_rules;<br>+----+----------+----------+---------+-------------+---------------+----------+---------+<br>| id | group_id | field    | pattern | reject_code | reject_reason | priority | enabled |<br>+----+----------+----------+---------+-------------+---------------+----------+---------+<br>|  8 |        1 | ruri_uri | .*      |        NULL | NULL          |       50 |       1 |<br>+----+----------+----------+---------+-------------+---------------+----------+---------+<br>1 row in set (0.000 sec)<br><br><br><br>SNGREP output<br><br>                                                                                                                        │SIP/2.0 403 Forbidden<br>           <a href="http://169.169.169.169:11000">169.169.169.169:11000</a>            <a href="http://172.31.37.142:5060">172.31.37.142:5060</a>              <a href="http://127.0.0.1:5060">127.0.0.1:5060</a>                <a href="http://127.0.0.1:5062">127.0.0.1:5062</a>  │Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK89d3.f6eb3ac078dc260c2d661673e4f6c55f.0<br>          ──────────┬─────────          ──────────┬─────────          ──────────┬─────────          ──────────┬─────────│Via: SIP/2.0/UDP 169.169.169.169:11000;received=169.169.169.169;rport=11000;branch=z9hG4bK63B<br>  17:53:50.061111   │        INVITE (SDP)         │                             │                             │         │j583UBcg<br>        +0.000458   │ ──────────────────────────> │                             │                             │         │From: "PhoneTrack SBC3" <<a href="mailto:sip%3A6685@169.169.169.169">sip:6685@169.169.169.169</a>>;tag=ZXvHUr7N0Fv0B<br>  17:53:50.061569   │         100 Trying          │                             │                             │         │To: <<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>>;tag=95c37a12bff1a2c36d72bf8333176544.7855<br>        +0.000064   │ <────────────────────────── │                             │                             │         │Call-ID: 7a263420-4840-11ea-a287-d574145c6a81<br>  17:53:50.061633   │                             │                             │        INVITE (SDP)         │         │CSeq: 15908825 INVITE<br>        +0.000299   │                             │                             │ ──────────────────────────> │         │P-Out-Socket: udp:<a href="http://172.31.37.142:5060">172.31.37.142:5060</a><br>  17:53:50.061932   │                             │                             │         100 Trying          │         │P-NGCP-Auth-IP: 169.169.169.169<br>        +0.002908   │                             │                             │ <────────────────────────── │         │P-NGCP-Auth-UA: 2600hz<br>  17:53:50.064840   │                             │                             │        403 Forbidden        │         │P-NGCP-Caller-Info: <sip:<null>@<null>>;ip=169.169.169.169;port=11000<br>        +0.000080   │                             │                             │ <────────────────────────── │         │Server: Sipwise NGCP Proxy 7.X<br>  17:53:50.064920   │                             │                             │             ACK             │         │Content-Length: 0<br>        +0.000122   │                             │                             │ ──────────────────────────> │         │<br>  17:53:50.065042   │        403 Forbidden        │                             │                             │         │<br>        +0.005994   │ <────────────────────────── │                             │                             │         │<br>  17:53:50.071036   │             ACK             │                             │                             │         │<br>                    │ ──────────────────────────> │                             │                             │         │<br>                    │                             │                             │                             │         │<br>                    │                             │                             │                             │         │<br><br><br><br>LOGS Proxy<br><br>Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: New request on proxy - M=INVITE R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» F=«<a href="mailto:sip%3A6685@169.169.169.169">sip:6685@169.169.169.169</a>» T=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» IP=«169.169.169.169»:«11000» («127.0.0.1»:«5060») ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz' DESTIP=«127.0.0.1»:«5062»<br>Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: Sending reply S=100 Trying fs='«127.0.0.1»:«5062»' du='«127.0.0.1»:«5060»' - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Load domain preferences for callee - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Clean domain preferences for callee - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: +++++++++++++++ find caller - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: Call from PSTN - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: No matching inbound peer rule in any peering group, rejecting call - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Adding reply P-NGCP-Caller-Info '<sip:«<null>»@«<null>»>;ip=«169.169.169.169»;port=«11000»«»«»' - ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: Sending reply S=403 Forbidden fs='«127.0.0.1»:«5062»' du='«127.0.0.1»:«5060»' - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Runtime for request INVITE was 2415 usec - ID=«9e51f47a-483f-11ea-a241-d574145c6a81»<br>Feb  5 17:47:41 ip-172-31-37-142 proxy[10778]: NOTICE: <script>: New request on proxy - M=ACK R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» F=«<null>» T=«<null>» IP=«<null>»:«<null>» («127.0.0.1»:«5060») ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='<null>' DESTIP=«127.0.0.1»:«5062»<br>--<br><table border="0" cellpadding="0" cellspacing="0" style="margin:0px;padding:0px;border:0px;outline:0px;font-size:14px;font-family:proxima-nova-1,proxima-nova-2,Tahoma,Helvetica,Verdana,sans-serif;vertical-align:baseline;border-spacing:0px;color:rgb(51,51,51);line-height:18.2000007629395px"><tbody style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td style="padding:0px;border:0px;outline:0px;font-style:inherit;font-size:0px;font-family:inherit;vertical-align:baseline;width:auto;height:30px"> </td></tr><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td style="padding:0px;border:0px;outline:0px;font-style:inherit;font-family:inherit;vertical-align:baseline;width:auto"><div style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;line-height:0"><a href="http://about.me/lacerdaguilherme?promo=email_sig" style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;color:rgb(43,130,173);text-decoration:none;display:inline-block" target="_blank"><table border="0" cellpadding="0" cellspacing="0" style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;border-spacing:0px"><tbody style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td align="left" valign="top" style="padding:0px;border:0px;outline:0px;font-style:inherit;font-family:inherit;vertical-align:top;width:auto;line-height:1"><img alt="--" width="0" height="0" style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;display:block;width:0px;height:0px;overflow:hidden"><div style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:bold;font-style:inherit;font-size:18px;font-family:proxima-nova-1,Proxima-Nova,Helvetica,Arial,sans-serif;vertical-align:baseline;line-height:1;color:rgb(51,51,51)">Guilherme Lacerda</div><div style="margin:3px 0px 0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-size:12px;font-family:proxima-nova-1,Proxima-Nova,Helvetica,Arial,sans-serif;vertical-align:baseline"><img alt="http://" width="0" height="0" style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;display:block;width:0px;height:0px;overflow:hidden"></div></td></tr></tbody></table></a></div></td></tr><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td style="padding:0px;border:0px;outline:0px;font-style:inherit;font-size:0px;font-family:inherit;vertical-align:baseline;width:auto;height:20px"></td></tr></tbody></table></div></div></div></div>