New subject: Unable to make SIP Calls (403 Forbidden - Domain Not Served)

14 Apr 2020

Hello,

I think this thread is for Users maillist.

Anyway, first of all start scscf in debug mode and test. Then have a look
on the logs.

There is only one place in the scscf configuration where you can get
"Domain not served":

if (uri == myself || uri =~ "tel:.*") {
        if (!term_impu_registered("location")) {

            xlog("L_DBG", "We need to do an UNREG server SAR
assignemnt");
            assign_server_unreg("UNREG_SAR_REPLY", "location",
"term");
            exit;
        }
} else {
        sl_send_reply("403","Forbidden - Domain not served");
        exit();
}

I personally got the same error some time ago and I didn't have enough time
to debug it. That's why I just commented all the code above so scscf can
proceed to :

route(term);

This is a temporary workaround but it is working fine for me. Most likely
this is something important but it stays in the todo to debug it in the
near future.

Regards,
Pavel Siderov

На пн, 13.04.2020 г. в 22:38 &lt;sr-dev-request(a)lists.kamailio.org&gt; написа:

...

 Date: Tue, 14 Apr 2020 01:07:14 +0530
 From: Pavithra M &lt;pavimohan3096(a)gmail.com&gt;
 To: "Kamailio (SER) - Development Mailing List"
         &lt;sr-dev(a)lists.kamailio.org&gt;
 Subject: Re: [sr-dev] Unable to make SIP Calls (403 Forbidden - Domain
         Not Served)
 Message-ID:
         <CAJvDr=+
 UKZ66o1ZQ-EmQ5xc70AEnZ3fJzoNair1ctCanB1DyvA(a)mail.gmail.com&gt;
 Content-Type: text/plain; charset="utf-8"

 Hi ,

 I have configured kamailio as an IMS server as VM based .

 PCSCF - 10.x.x.179
 ICSCF - 10.x.x.79
 SCSCF - 10.x.x.73
 HSS - 10.x.x.75

 I am using zoiper client for testing the call flow . The *registration is
 happening properly* in my both zoiper clients for hss configured users
 (alice and bob).
 When i am making an *INVITE , *I am getting *403 Forbidden - Domain not
 served *error from SCSCF.

 The Call Flow for invite is as follows . call from alice(a)sip.example.com

 zoiper1 (UE) -> PCSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
 PCSCF -> SCSCF (  INVITE sip:bob@sip.example.com;transport=UDP )
 SCSCF -> PCSCF (100 trying)
 SCSCF -> ICSCF   ( INVITE sip:bob@sip.example.com;transport=UDP )
 ICSCF -> SCSCF (100 trying)
 ICSCF -> SCSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
 SCSCF -> ICSCF (100 trying)
 SCSCF -> ICSCF (*403 Forbidden - Domain not served*)
 ICSCF -> SCSCF (Request: ACK sip:bob@sip.example.com | )
 ICSCF -> SCSCF ( 403 Forbidden - Domain not served )
 SCSCF -> PCSCF ( 403 Forbidden - Domain not served )
 PCSCF -> UE ( 403 Forbidden - Domain not served )

 Below are the alias configuration i have done in pcscf,icscf,scscf nodes
 *PCSCF.CFG*
 # IP-Adress for incoming SIP-Traffic, in the following format:

 # SIP / UDP
 listen=udp:10.x.x.179:4060
 # SIP / TCP
 listen=tcp:10.x.x.179:4060
 # SIP / TCP/TLS
 listen=tls:10.x.x.179:4060

 # IPSEC / UDP
 #!define IPSEC_LISTEN_ADDR "0.0.0.0"
 #!define IPSEC_CLIENT_PORT 5062
 #!define IPSEC_SERVER_PORT 5063
 #alias="sip.example.com:4060"
 alias=pcscf.sip.example.com:4060

 #!define MY_WS_PORT 80
 #!define MY_WSS_PORT 443

 #!define PCSCF_URL "sip:pcscf.sip.example.com:4060"

 #!define TCP_PROCESSES 8

 #!subst "/NETWORKNAME/sip.example.com/"
 #!subst "/HOSTNAME/pcscf.sip.example.com/"

 *ICSCF.CFG*

 # SIP / UDP
 listen=udp:10.x.x.79:4070
 # SIP / TCP
 listen=tcp:10.x.x.79:4070
 # SIP / TCP/TLS
 listen=tls:10.x.x.79:4071

 alias="icscf.sip.example.com:4070"

 #!define NETWORKNAME "sip.example.com"
 #!define HOSTNAME "icscf.sip.example.com"

 *SCSCF.CFG*

 # SIP / UDP
 listen=udp:10.x.x.73:4080
 # SIP / TCP
 listen=tcp:10.x.x.73:4080
 # SIP / TCP/TLS
 listen=tls:10.x.x.73:4081

 #!define NETWORKNAME "sip.example.com"
 #!define HOSTNAME "scscf.sip.example.com"
 #!define URI "sip:scscf.sip.example.com:4080"
 alias=scscf.sip.example.com:4080

 # ENUM-Server to query:
 #!define ENUM_SUFFIX "scscf.sip.example.com."

 Kindly let me know where i am missing . Kindly need help in this issue
 since the registration is happening successfully and dropping in the INVITE
 level.
 Kindly help. 

Re: [sr-dev] Unable to make SIP Calls (403 Forbidden - Domain Not Served)