Hello,
I think that you can solve the problem, by putting the NAT traversal check before the 'authentication block' where you handle the RE-INVITEs.
I use 'nathelper's module functions' :
if (nat_uac_test("27")) { # Check flags: (1,2,8,16) setflag(7); force_rport(); fix_nated_contact(); fix_nated_sdp("3"); };
if (!radius_proxy_authorize("yourdomain.com")) { proxy_challenge("yourdomain.com", "0"); break; };
Hope this helps.
Kostas
olivier.taylor wrote:
Hello, using ser 0.9.6
The following dialog is a re-invite, the re-invite is initiated by the callee after putting the call on hold. Problem is that SER answer with a 407 on the wrong port, Invite is coming from port 62907 and SER answer to port 5060.
Problem doesn't occurs for the initial invite. We have tried with other Uas without problems, just having problems with this Ua (Avaya).
Any idea?
Best regards,
Olivier
U xxx.xx.xx.xx:62907 -> yy.yyy.yyy.yy:5060 INVITE sip:990099001@192.168.162.187 SIP/2.0. Via: SIP/2.0/UDP 192.168.162.181;branch=z9hG4bK309b82ccf. Max-Forwards: 70. Content-Length: 337. To: "QE-A" sip:990099001@yy.yyy.yyy.yy;tag=f7983fe553e1941. From: "QE-B" sip:990099002@yy.yyy.yyy.yy;tag=5bf8b4fb69fca84. Call-ID: 7c933d3d19bb76c396b995202b18eb97@yy.yyy.yyy.yy. CSeq: 567882513 INVITE. Route: sip:990099002@yy.yyy.yyy.yy:5060;nat=yes;ftag=f7983fe553e1941;lr=on. P-Asserted-Identity: "QE-B" sip:990099002@yy.yyy.yyy.yy. Allow: INVITE. Allow: CANCEL. Allow: OPTIONS. Allow: BYE. Allow: REFER. Allow: INFO. Allow: UPDATE. Content-Type: application/sdp. Contact: "QE-B" sip:990099002@192.168.162.181. Supported: replaces. User-Agent: NeuralX MxSF/v3.2.6.26. . v=0. o=990099002 1136076203 1136076205 IN IP4 192.168.162.181. s=-. c=IN IP4 192.168.162.181. t=0 0. a=sendonly. m=audio 20006 RTP/AVP 0 101 8 18 . a=rtpmap:0 PCMU/8000. a=rtpmap:101 telephone-event/8000. a=rtpmap:8 PCMA/8000. a=rtpmap:18 G729/8000. a=fmtp:101 0-15. a=fmtp:18 annexb=no. a=ptime:20. a=rtcp:20007 IN IP4 192.168.162.181.
U yy.yyy.yyy.yy:5060 -> xxx.xx.xx.xx:5060 SIP/2.0 407 Proxy Authentication Required. Via: SIP/2.0/UDP 192.168.162.181;branch=z9hG4bK309b82ccf;received=xxx.xx.xx.xx. To: "QE-A" sip:990099001@yy.yyy.yyy.yy;tag=f7983fe553e1941. From: "QE-B" sip:990099002@yy.yyy.yyy.yy;tag=5bf8b4fb69fca84. Call-ID: 7c933d3d19bb76c396b995202b18eb97@yy.yyy.yyy.yy. CSeq: 567882513 INVITE. Proxy-Authenticate: Digest realm="yy.yyy.yyy.yy", nonce="463f31b81a65dee3419ce3e4bfbecc253410cbf5". Server: Sip EXpress router (0.9.6 (i386/freebsd)). Content-Length: 0. Warning: 392 yy.yyy.yyy.yy:5060 "Noisy feedback tells: pid=49990 req_src_ip=xxx.xx.xx.xx req_src_port=62907 in_uri=sip:990099001@192.168.162.187 out_uri=sip:990099001@192.168.162.187 via_cnt==1". . _______________________________________________ Serusers mailing list Serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers