<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div dir="ltr">Hello.</div><div dir="ltr"><br></div><div dir="ltr">It is very simple... see your logs:</div><div dir="ltr"><br></div><div dir="ltr"><span style="-webkit-text-size-adjust: auto; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">„No matching inbound peer rule in any peering group, rejecting call“</span></div><div dir="ltr"><span style="-webkit-text-size-adjust: auto; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);"><br></span></div><div dir="ltr"><font color="#000000"><span style="caret-color: rgb(0, 0, 0); -webkit-text-size-adjust: auto; background-color: rgb(255, 255, 255);">You have peering groups without inbound rules, so no call will be proceeded over your peering...</span></font></div><div dir="ltr"><font color="#000000"><span style="caret-color: rgb(0, 0, 0); -webkit-text-size-adjust: auto; background-color: rgb(255, 255, 255);"><br></span></font></div><div dir="ltr"><font color="#000000"><span style="caret-color: rgb(0, 0, 0); -webkit-text-size-adjust: auto; background-color: rgb(255, 255, 255);">Just read the handbook how to setup peerings right... you forget about the peering rules.</span></font></div><div dir="ltr"><font color="#000000"><span style="caret-color: rgb(0, 0, 0); -webkit-text-size-adjust: auto; background-color: rgb(255, 255, 255);"><br></span></font></div><div dir="ltr"><font color="#000000"><span style="caret-color: rgb(0, 0, 0); -webkit-text-size-adjust: auto; background-color: rgb(255, 255, 255);">Btw: your rewrite rules are also not setup right..., sipwise needs e164 format internally, but you dont rewrite your +55....</span></font></div><div dir="ltr"><br><blockquote type="cite">Am 05.02.2020 um 19:12 schrieb Guilherme Lacerda <lacerdaguilherme@gmail.com>:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div dir="ltr"><div>Hi,</div><div><br></div><div>When a Customer PBX is registered with Sipwise as a regular subscriber in SIP Trunking domain. When a customer dials PSTN number, they receive following response from Sipwise - Call Failed: 403 Forbidden. I’m not sure what I’m forgetting or how do I troubleshoot this problem. Customer PBX is based on 2600hz Kazoo</div><div><br></div><div>My setup:</div><div>NGCP mr7.5.2 on AWS EC2 (NAT)<br><br>Callflow: Kazoo PBX => NGCP => GW/Termination(Thinq.com)<br><br>Kazoo PBX = 169.169.169.169<br>Internal IP NGCP = 172.31.37.142<br>External IP NGCP = 54.54.54.54<br><br><br></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">MariaDB [provisioning]> select * from provisioning.voip_peer_groups;<br>+----+------------+----------+-------------+---------------------+-------------------+-------------+<br>| id | name | priority | description | peering_contract_id | has_inbound_rules | time_set_id |<br>+----+------------+----------+-------------+---------------------+-------------------+-------------+<br>| 1 | Kazoo Peer | 1 | | 3 | 0 | NULL |<br>+----+------------+----------+-------------+---------------------+-------------------+-------------+<br>1 row in set (0.000 sec)<br><br>MariaDB [provisioning]> select * from provisioning.voip_peer_hosts;<br>+----+----------+-------------+---------------+------------------------+------+-----------+--------+-----------+--------+---------+-------+<br>| id | group_id | name | ip | host | port | transport | weight | via_route | via_lb | enabled | probe |<br>+----+----------+-------------+---------------+------------------------+------+-----------+--------+-----------+--------+---------+-------+<br>| 1 | 1 | Thinq_Kazoo | 72.15.219.140 | NULL | 5060 | 1 | 1 | NULL | 0 | 1 | 0 |<br>| 2 | 1 | PBX Kazoo | 169.169.169.169 | <a href="http://sip3.phonetrack.com.br">sip3.phonetrack.com.br</a> | 5060 | 1 | 1 | NULL | 0 | 1 | 0 |<br>+----+----------+-------------+---------------+------------------------+------+-----------+--------+-----------+--------+---------+-------+<br>2 rows in set (0.000 sec)<br><br>MariaDB [provisioning]> select * from provisioning.voip_peer_inbound_rules;<br>+----+----------+----------+---------+-------------+---------------+----------+---------+<br>| id | group_id | field | pattern | reject_code | reject_reason | priority | enabled |<br>+----+----------+----------+---------+-------------+---------------+----------+---------+<br>| 8 | 1 | ruri_uri | .* | NULL | NULL | 50 | 1 |<br>+----+----------+----------+---------+-------------+---------------+----------+---------+<br>1 row in set (0.000 sec)<br><br><br><br>SNGREP output<br><br> │SIP/2.0 403 Forbidden<br> <a href="http://169.169.169.169:11000">169.169.169.169:11000</a> <a href="http://172.31.37.142:5060">172.31.37.142:5060</a> <a href="http://127.0.0.1:5060">127.0.0.1:5060</a> <a href="http://127.0.0.1:5062">127.0.0.1:5062</a> │Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK89d3.f6eb3ac078dc260c2d661673e4f6c55f.0<br> ──────────┬───────── ──────────┬───────── ──────────┬───────── ──────────┬─────────│Via: SIP/2.0/UDP 169.169.169.169:11000;received=169.169.169.169;rport=11000;branch=z9hG4bK63B<br> 17:53:50.061111 │ INVITE (SDP) │ │ │ │j583UBcg<br> +0.000458 │ ──────────────────────────> │ │ │ │From: "PhoneTrack SBC3" <<a href="mailto:sip%3A6685@169.169.169.169">sip:6685@169.169.169.169</a>>;tag=ZXvHUr7N0Fv0B<br> 17:53:50.061569 │ 100 Trying │ │ │ │To: <<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>>;tag=95c37a12bff1a2c36d72bf8333176544.7855<br> +0.000064 │ <────────────────────────── │ │ │ │Call-ID: 7a263420-4840-11ea-a287-d574145c6a81<br> 17:53:50.061633 │ │ │ INVITE (SDP) │ │CSeq: 15908825 INVITE<br> +0.000299 │ │ │ ──────────────────────────> │ │P-Out-Socket: udp:<a href="http://172.31.37.142:5060">172.31.37.142:5060</a><br> 17:53:50.061932 │ │ │ 100 Trying │ │P-NGCP-Auth-IP: 169.169.169.169<br> +0.002908 │ │ │ <────────────────────────── │ │P-NGCP-Auth-UA: 2600hz<br> 17:53:50.064840 │ │ │ 403 Forbidden │ │P-NGCP-Caller-Info: <sip:<null>@<null>>;ip=169.169.169.169;port=11000<br> +0.000080 │ │ │ <────────────────────────── │ │Server: Sipwise NGCP Proxy 7.X<br> 17:53:50.064920 │ │ │ ACK │ │Content-Length: 0<br> +0.000122 │ │ │ ──────────────────────────> │ │<br> 17:53:50.065042 │ 403 Forbidden │ │ │ │<br> +0.005994 │ <────────────────────────── │ │ │ │<br> 17:53:50.071036 │ ACK │ │ │ │<br> │ ──────────────────────────> │ │ │ │<br> │ │ │ │ │<br> │ │ │ │ │<br><br><br><br>LOGS Proxy<br><br>Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: New request on proxy - M=INVITE R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» F=«<a href="mailto:sip%3A6685@169.169.169.169">sip:6685@169.169.169.169</a>» T=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» IP=«169.169.169.169»:«11000» («127.0.0.1»:«5060») ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz' DESTIP=«127.0.0.1»:«5062»<br>Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: Sending reply S=100 Trying fs='«127.0.0.1»:«5062»' du='«127.0.0.1»:«5060»' - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Load domain preferences for callee - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Clean domain preferences for callee - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: +++++++++++++++ find caller - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: Call from PSTN - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: No matching inbound peer rule in any peering group, rejecting call - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Adding reply P-NGCP-Caller-Info '<sip:«<null>»@«<null>»>;ip=«169.169.169.169»;port=«11000»«»«»' - ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: Sending reply S=403 Forbidden fs='«127.0.0.1»:«5062»' du='«127.0.0.1»:«5060»' - R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'<br>Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Runtime for request INVITE was 2415 usec - ID=«9e51f47a-483f-11ea-a241-d574145c6a81»<br>Feb 5 17:47:41 ip-172-31-37-142 proxy[10778]: NOTICE: <script>: New request on proxy - M=ACK R=«<a href="mailto:sip%3A%2B5541998970007@54.54.54.54">sip:+5541998970007@54.54.54.54</a>» F=«<null>» T=«<null>» IP=«<null>»:«<null>» («127.0.0.1»:«5060») ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='<null>' DESTIP=«127.0.0.1»:«5062»<br>--<br><table border="0" cellpadding="0" cellspacing="0" style="margin:0px;padding:0px;border:0px;outline:0px;font-size:14px;font-family:proxima-nova-1,proxima-nova-2,Tahoma,Helvetica,Verdana,sans-serif;vertical-align:baseline;border-spacing:0px;color:rgb(51,51,51);line-height:18.2000007629395px"><tbody style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td style="padding:0px;border:0px;outline:0px;font-style:inherit;font-size:0px;font-family:inherit;vertical-align:baseline;width:auto;height:30px"> </td></tr><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td style="padding:0px;border:0px;outline:0px;font-style:inherit;font-family:inherit;vertical-align:baseline;width:auto"><div style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;line-height:0"><a href="http://about.me/lacerdaguilherme?promo=email_sig" style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;color:rgb(43,130,173);text-decoration:none;display:inline-block" target="_blank"><table border="0" cellpadding="0" cellspacing="0" style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;border-spacing:0px"><tbody style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td align="left" valign="top" style="padding:0px;border:0px;outline:0px;font-style:inherit;font-family:inherit;vertical-align:top;width:auto;line-height:1"><img alt="--" width="0" height="0" style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;display:block;width:0px;height:0px;overflow:hidden" data-unique-identifier=""><div style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:bold;font-style:inherit;font-size:18px;font-family:proxima-nova-1,Proxima-Nova,Helvetica,Arial,sans-serif;vertical-align:baseline;line-height:1;color:rgb(51,51,51)">Guilherme Lacerda</div><div style="margin:3px 0px 0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-size:12px;font-family:proxima-nova-1,Proxima-Nova,Helvetica,Arial,sans-serif;vertical-align:baseline"><img alt="http://" width="0" height="0" style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;display:block;width:0px;height:0px;overflow:hidden" data-unique-identifier=""></div></td></tr></tbody></table></a></div></td></tr><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td style="padding:0px;border:0px;outline:0px;font-style:inherit;font-size:0px;font-family:inherit;vertical-align:baseline;width:auto;height:20px"></td></tr></tbody></table></div></div></div></div>
</div></blockquote></body></html>