I have a similar problem. Topology: sip-ua -> kamailio (topos) -> kamailio -> freeswitch After setting the hold state on the client phone, the SIP BYE message from the freeswitch will have mixed-up Route headers. I also use record_route() for re-INVITES, can it be the source of the problem?