[Spce-user] 403 Forbidden to outbound calls
Guilherme Lacerda
lacerdaguilherme at gmail.com
Wed Feb 5 13:10:53 EST 2020
Hi,
When a Customer PBX is registered with Sipwise as a regular subscriber in
SIP Trunking domain. When a customer dials PSTN number, they receive
following response from Sipwise - Call Failed: 403 Forbidden. I’m not sure
what I’m forgetting or how do I troubleshoot this problem. Customer PBX is
based on 2600hz Kazoo
My setup:
NGCP mr7.5.2 on AWS EC2 (NAT)
Callflow: Kazoo PBX => NGCP => GW/Termination(Thinq.com)
Kazoo PBX = 169.169.169.169
Internal IP NGCP = 172.31.37.142
External IP NGCP = 54.54.54.54
MariaDB [provisioning]> select * from provisioning.voip_peer_groups;
+----+------------+----------+-------------+---------------------+-------------------+-------------+
| id | name | priority | description | peering_contract_id |
has_inbound_rules | time_set_id |
+----+------------+----------+-------------+---------------------+-------------------+-------------+
| 1 | Kazoo Peer | 1 | | 3 |
0 | NULL |
+----+------------+----------+-------------+---------------------+-------------------+-------------+
1 row in set (0.000 sec)
MariaDB [provisioning]> select * from provisioning.voip_peer_hosts;
+----+----------+-------------+---------------+------------------------+------+-----------+--------+-----------+--------+---------+-------+
| id | group_id | name | ip | host |
port | transport | weight | via_route | via_lb | enabled | probe |
+----+----------+-------------+---------------+------------------------+------+-----------+--------+-----------+--------+---------+-------+
| 1 | 1 | Thinq_Kazoo | 72.15.219.140 | NULL |
5060 | 1 | 1 | NULL | 0 | 1 | 0 |
| 2 | 1 | PBX Kazoo | 169.169.169.169 | sip3.phonetrack.com.br |
5060 | 1 | 1 | NULL | 0 | 1 | 0 |
+----+----------+-------------+---------------+------------------------+------+-----------+--------+-----------+--------+---------+-------+
2 rows in set (0.000 sec)
MariaDB [provisioning]> select * from provisioning.voip_peer_inbound_rules;
+----+----------+----------+---------+-------------+---------------+----------+---------+
| id | group_id | field | pattern | reject_code | reject_reason |
priority | enabled |
+----+----------+----------+---------+-------------+---------------+----------+---------+
| 8 | 1 | ruri_uri | .* | NULL | NULL |
50 | 1 |
+----+----------+----------+---------+-------------+---------------+----------+---------+
1 row in set (0.000 sec)
SNGREP output
│SIP/2.0 403 Forbidden
169.169.169.169:11000 172.31.37.142:5060
127.0.0.1:5060 127.0.0.1:5062 │Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bK89d3.f6eb3ac078dc260c2d661673e4f6c55f.0
──────────┬───────── ──────────┬─────────
──────────┬───────── ──────────┬─────────│Via: SIP/2.0/UDP
169.169.169.169:11000;received=169.169.169.169;rport=11000;branch=z9hG4bK63B
17:53:50.061111 │ INVITE (SDP) │
│ │ │j583UBcg
+0.000458 │ ──────────────────────────> │
│ │ │From: "PhoneTrack SBC3" <
sip:6685 at 169.169.169.169>;tag=ZXvHUr7N0Fv0B
17:53:50.061569 │ 100 Trying │
│ │ │To: <
sip:+5541998970007 at 54.54.54.54>;tag=95c37a12bff1a2c36d72bf8333176544.7855
+0.000064 │ <────────────────────────── │
│ │ │Call-ID:
7a263420-4840-11ea-a287-d574145c6a81
17:53:50.061633 │ │
│ INVITE (SDP) │ │CSeq: 15908825 INVITE
+0.000299 │ │
│ ──────────────────────────> │ │P-Out-Socket: udp:
172.31.37.142:5060
17:53:50.061932 │ │
│ 100 Trying │ │P-NGCP-Auth-IP: 169.169.169.169
+0.002908 │ │
│ <────────────────────────── │ │P-NGCP-Auth-UA: 2600hz
17:53:50.064840 │ │
│ 403 Forbidden │ │P-NGCP-Caller-Info:
<sip:<null>@<null>>;ip=169.169.169.169;port=11000
+0.000080 │ │
│ <────────────────────────── │ │Server: Sipwise NGCP Proxy 7.X
17:53:50.064920 │ │
│ ACK │ │Content-Length: 0
+0.000122 │ │
│ ──────────────────────────> │ │
17:53:50.065042 │ 403 Forbidden │
│ │ │
+0.005994 │ <────────────────────────── │
│ │ │
17:53:50.071036 │ ACK │
│ │ │
│ ──────────────────────────> │
│ │ │
│ │
│ │ │
│ │
│ │ │
LOGS Proxy
Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: New
request on proxy - M=INVITE R=«sip:+5541998970007 at 54.54.54.54» F=«
sip:6685 at 169.169.169.169» T=«sip:+5541998970007 at 54.54.54.54»
IP=«169.169.169.169»:«11000» («127.0.0.1»:«5060»)
ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'
DESTIP=«127.0.0.1»:«5062»
Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: Sending
reply S=100 Trying fs='«127.0.0.1»:«5062»' du='«127.0.0.1»:«5060»' - R=«
sip:+5541998970007 at 54.54.54.54» ID=«9e51f47a-483f-11ea-a241-d574145c6a81»
UA='2600hz'
Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Load domain
preferences for callee - R=«sip:+5541998970007 at 54.54.54.54»
ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'
Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Clean domain
preferences for callee - R=«sip:+5541998970007 at 54.54.54.54»
ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'
Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>:
+++++++++++++++ find caller - R=«sip:+5541998970007 at 54.54.54.54»
ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'
Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: Call from
PSTN - R=«sip:+5541998970007 at 54.54.54.54»
ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'
Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: No
matching inbound peer rule in any peering group, rejecting call - R=«
sip:+5541998970007 at 54.54.54.54» ID=«9e51f47a-483f-11ea-a241-d574145c6a81»
UA='2600hz'
Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Adding reply
P-NGCP-Caller-Info
'<sip:«<null>»@«<null>»>;ip=«169.169.169.169»;port=«11000»«»«»' -
ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'
Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: Sending
reply S=403 Forbidden fs='«127.0.0.1»:«5062»' du='«127.0.0.1»:«5060»' - R=«
sip:+5541998970007 at 54.54.54.54» ID=«9e51f47a-483f-11ea-a241-d574145c6a81»
UA='2600hz'
Feb 5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Runtime for
request INVITE was 2415 usec - ID=«9e51f47a-483f-11ea-a241-d574145c6a81»
Feb 5 17:47:41 ip-172-31-37-142 proxy[10778]: NOTICE: <script>: New
request on proxy - M=ACK R=«sip:+5541998970007 at 54.54.54.54» F=«<null>»
T=«<null>» IP=«<null>»:«<null>» («127.0.0.1»:«5060»)
ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='<null>'
DESTIP=«127.0.0.1»:«5062»
--
[image: --]
Guilherme Lacerda
[image: http://]
<http://about.me/lacerdaguilherme?promo=email_sig>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20200205/439e7292/attachment-0001.html>
More information about the Spce-user
mailing list