[Spce-user] 403 Forbidden to outbound calls

Guilherme Lacerda lacerdaguilherme at gmail.com
Wed Feb 5 15:27:13 EST 2020


Hello Matthias,

I've configured inbound rule as equal as in handbook and link this below. I
tried insert domain, inbound IPs, outbound IPs and again receive 403.

I think Sipwise don't rewrite nether process inbound rule.

Any ideas?

MariaDB [provisioning]> select * from provisioning.voip_peer_inbound_rules;
+----+----------+----------+---------+-------------+---------------+----------+---------+
| id | group_id | field    | pattern | reject_code | reject_reason |
priority | enabled |
+----+----------+----------+---------+-------------+---------------+----------+---------+
|  8 |        1 | ruri_uri | .*      |        NULL | NULL          |
50 |       1 |
+----+----------+----------+---------+-------------+---------------+----------+---------+
1 row in set (0.000 sec)

--


[image: --]
Guilherme Lacerda
[image: http://]about.me/lacerdaguilherme
<http://about.me/lacerdaguilherme?promo=email_sig>



Em qua., 5 de fev. de 2020 às 16:41, Matthias Hohl <
matthias.hohl at telematica.at> escreveu:

> Hello.
>
> It is very simple... see your logs:
>
> „No matching inbound peer rule in any peering group, rejecting call“
>
> You have peering groups without inbound rules, so no call will be
> proceeded over your peering...
>
> Just read the handbook how to setup peerings right... you forget about the
> peering rules.
>
> Btw: your rewrite rules are also not setup right..., sipwise needs e164
> format internally, but you dont rewrite your +55....
>
> Am 05.02.2020 um 19:12 schrieb Guilherme Lacerda <
> lacerdaguilherme at gmail.com>:
>
> 
> Hi,
>
> When a Customer PBX is registered with Sipwise as a regular subscriber in
> SIP Trunking domain. When a customer dials PSTN number, they receive
> following response from Sipwise - Call Failed: 403 Forbidden. I’m not sure
> what I’m forgetting or how do I troubleshoot this problem. Customer PBX is
> based on 2600hz Kazoo
>
> My setup:
> NGCP mr7.5.2 on AWS EC2 (NAT)
>
> Callflow: Kazoo PBX => NGCP => GW/Termination(Thinq.com)
>
> Kazoo PBX = 169.169.169.169
> Internal IP NGCP = 172.31.37.142
> External IP NGCP = 54.54.54.54
>
>
> MariaDB [provisioning]> select * from provisioning.voip_peer_groups;
>
> +----+------------+----------+-------------+---------------------+-------------------+-------------+
> | id | name       | priority | description | peering_contract_id |
> has_inbound_rules | time_set_id |
>
> +----+------------+----------+-------------+---------------------+-------------------+-------------+
> |  1 | Kazoo Peer |        1 |             |                   3 |
>         0 |        NULL |
>
> +----+------------+----------+-------------+---------------------+-------------------+-------------+
> 1 row in set (0.000 sec)
>
> MariaDB [provisioning]> select * from provisioning.voip_peer_hosts;
>
> +----+----------+-------------+---------------+------------------------+------+-----------+--------+-----------+--------+---------+-------+
> | id | group_id | name        | ip            | host                   |
> port | transport | weight | via_route | via_lb | enabled | probe |
>
> +----+----------+-------------+---------------+------------------------+------+-----------+--------+-----------+--------+---------+-------+
> |  1 |        1 | Thinq_Kazoo | 72.15.219.140 | NULL                   |
> 5060 |         1 |      1 | NULL      |      0 |       1 |     0 |
> |  2 |        1 | PBX Kazoo   | 169.169.169.169 | sip3.phonetrack.com.br
> | 5060 |         1 |      1 | NULL      |      0 |       1 |     0 |
>
> +----+----------+-------------+---------------+------------------------+------+-----------+--------+-----------+--------+---------+-------+
> 2 rows in set (0.000 sec)
>
> MariaDB [provisioning]> select * from provisioning.voip_peer_inbound_rules;
>
> +----+----------+----------+---------+-------------+---------------+----------+---------+
> | id | group_id | field    | pattern | reject_code | reject_reason |
> priority | enabled |
>
> +----+----------+----------+---------+-------------+---------------+----------+---------+
> |  8 |        1 | ruri_uri | .*      |        NULL | NULL          |
> 50 |       1 |
>
> +----+----------+----------+---------+-------------+---------------+----------+---------+
> 1 row in set (0.000 sec)
>
>
>
> SNGREP output
>
>
>                                               │SIP/2.0 403 Forbidden
>            169.169.169.169:11000            172.31.37.142:5060
>    127.0.0.1:5060                127.0.0.1:5062  │Via: SIP/2.0/UDP
> 127.0.0.1;branch=z9hG4bK89d3.f6eb3ac078dc260c2d661673e4f6c55f.0
>           ──────────┬─────────          ──────────┬─────────
>  ──────────┬─────────          ──────────┬─────────│Via: SIP/2.0/UDP
> 169.169.169.169:11000
> ;received=169.169.169.169;rport=11000;branch=z9hG4bK63B
>   17:53:50.061111   │        INVITE (SDP)         │
>       │                             │         │j583UBcg
>         +0.000458   │ ──────────────────────────> │
>       │                             │         │From: "PhoneTrack SBC3" <
> sip:6685 at 169.169.169.169>;tag=ZXvHUr7N0Fv0B
>   17:53:50.061569   │         100 Trying          │
>       │                             │         │To: <
> sip:+5541998970007 at 54.54.54.54>;tag=95c37a12bff1a2c36d72bf8333176544.7855
>         +0.000064   │ <────────────────────────── │
>       │                             │         │Call-ID:
> 7a263420-4840-11ea-a287-d574145c6a81
>   17:53:50.061633   │                             │
>       │        INVITE (SDP)         │         │CSeq: 15908825 INVITE
>         +0.000299   │                             │
>       │ ──────────────────────────> │         │P-Out-Socket: udp:
> 172.31.37.142:5060
>   17:53:50.061932   │                             │
>       │         100 Trying          │         │P-NGCP-Auth-IP:
> 169.169.169.169
>         +0.002908   │                             │
>       │ <────────────────────────── │         │P-NGCP-Auth-UA: 2600hz
>   17:53:50.064840   │                             │
>       │        403 Forbidden        │         │P-NGCP-Caller-Info:
> <sip:<null>@<null>>;ip=169.169.169.169;port=11000
>         +0.000080   │                             │
>       │ <────────────────────────── │         │Server: Sipwise NGCP Proxy
> 7.X
>   17:53:50.064920   │                             │
>       │             ACK             │         │Content-Length: 0
>         +0.000122   │                             │
>       │ ──────────────────────────> │         │
>   17:53:50.065042   │        403 Forbidden        │
>       │                             │         │
>         +0.005994   │ <────────────────────────── │
>       │                             │         │
>   17:53:50.071036   │             ACK             │
>       │                             │         │
>                     │ ──────────────────────────> │
>       │                             │         │
>                     │                             │
>       │                             │         │
>                     │                             │
>       │                             │         │
>
>
>
> LOGS Proxy
>
> Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: New
> request on proxy - M=INVITE R=«sip:+5541998970007 at 54.54.54.54» F=«
> sip:6685 at 169.169.169.169» T=«sip:+5541998970007 at 54.54.54.54»
> IP=«169.169.169.169»:«11000» («127.0.0.1»:«5060»)
> ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'
> DESTIP=«127.0.0.1»:«5062»
> Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: Sending
> reply S=100 Trying fs='«127.0.0.1»:«5062»' du='«127.0.0.1»:«5060»' - R=«
> sip:+5541998970007 at 54.54.54.54» ID=«9e51f47a-483f-11ea-a241-d574145c6a81»
> UA='2600hz'
> Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Load domain
> preferences for callee - R=«sip:+5541998970007 at 54.54.54.54»
> ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'
> Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Clean
> domain preferences for callee - R=«sip:+5541998970007 at 54.54.54.54»
> ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'
> Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>:
> +++++++++++++++ find caller - R=«sip:+5541998970007 at 54.54.54.54»
> ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'
> Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: Call from
> PSTN - R=«sip:+5541998970007 at 54.54.54.54»
> ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'
> Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: No
> matching inbound peer rule in any peering group, rejecting call - R=«
> sip:+5541998970007 at 54.54.54.54» ID=«9e51f47a-483f-11ea-a241-d574145c6a81»
> UA='2600hz'
> Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Adding
> reply P-NGCP-Caller-Info
> '<sip:«<null>»@«<null>»>;ip=«169.169.169.169»;port=«11000»«»«»' -
> ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='2600hz'
> Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: NOTICE: <script>: Sending
> reply S=403 Forbidden fs='«127.0.0.1»:«5062»' du='«127.0.0.1»:«5060»' - R=«
> sip:+5541998970007 at 54.54.54.54» ID=«9e51f47a-483f-11ea-a241-d574145c6a81»
> UA='2600hz'
> Feb  5 17:47:41 ip-172-31-37-142 proxy[10792]: INFO: <script>: Runtime for
> request INVITE was 2415 usec - ID=«9e51f47a-483f-11ea-a241-d574145c6a81»
> Feb  5 17:47:41 ip-172-31-37-142 proxy[10778]: NOTICE: <script>: New
> request on proxy - M=ACK R=«sip:+5541998970007 at 54.54.54.54» F=«<null>»
> T=«<null>» IP=«<null>»:«<null>» («127.0.0.1»:«5060»)
> ID=«9e51f47a-483f-11ea-a241-d574145c6a81» UA='<null>'
> DESTIP=«127.0.0.1»:«5062»
> --
>
>
> [image: --]
> Guilherme Lacerda
> [image: http://]
> <http://about.me/lacerdaguilherme?promo=email_sig>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20200205/bb10d18b/attachment-0002.html>


More information about the Spce-user mailing list