8 May
2007
8 May
'07
11:36 a.m.
Hello,
I think that you can solve the problem, by putting the NAT traversal check
before the 'authentication block' where you handle the RE-INVITEs.
I use 'nathelper's module functions' :
if (nat_uac_test("27")) {
# Check flags: (1,2,8,16)
setflag(7);
force_rport();
fix_nated_contact();
fix_nated_sdp("3");
};
if (!radius_proxy_authorize("yourdomain.com")) {
proxy_challenge("yourdomain.com", "0");
break;
};
Hope this helps.
Kostas
olivier.taylor wrote:
Hello,
using ser 0.9.6
The following dialog is a re-invite, the re-invite is initiated by the
callee after putting the call on hold.
Problem is that SER answer with a 407 on the wrong port, Invite is
coming from port 62907 and SER answer to port 5060.
Problem doesn't occurs for the initial invite.
We have tried with other Uas without problems, just having problems with
this Ua (Avaya).
Any idea?
Best regards,
Olivier
U xxx.xx.xx.xx:62907 -> yy.yyy.yyy.yy:5060
INVITE sip:990099001@192.168.162.187 SIP/2.0.
Via: SIP/2.0/UDP 192.168.162.181;branch=z9hG4bK309b82ccf.
Max-Forwards: 70.
Content-Length: 337.
To: "QE-A" <sip:990099001@yy.yyy.yyy.yy>;tag=f7983fe553e1941.
From: "QE-B" <sip:990099002@yy.yyy.yyy.yy>;tag=5bf8b4fb69fca84.
Call-ID: 7c933d3d19bb76c396b995202b18eb97(a)yy.yyy.yyy.yy.
CSeq: 567882513 INVITE.
Route:
<sip:990099002@yy.yyy.yyy.yy:5060;nat=yes;ftag=f7983fe553e1941;lr=on>.
P-Asserted-Identity: "QE-B" <sip:990099002@yy.yyy.yyy.yy>.
Allow: INVITE.
Allow: CANCEL.
Allow: OPTIONS.
Allow: BYE.
Allow: REFER.
Allow: INFO.
Allow: UPDATE.
Content-Type: application/sdp.
Contact: "QE-B" <sip:990099002@192.168.162.181>.
Supported: replaces.
User-Agent: NeuralX MxSF/v3.2.6.26.
.
v=0.
o=990099002 1136076203 1136076205 IN IP4 192.168.162.181.
s=-.
c=IN IP4 192.168.162.181.
t=0 0.
a=sendonly.
m=audio 20006 RTP/AVP 0 101 8 18 .
a=rtpmap:0 PCMU/8000.
a=rtpmap:101 telephone-event/8000.
a=rtpmap:8 PCMA/8000.
a=rtpmap:18 G729/8000.
a=fmtp:101 0-15.
a=fmtp:18 annexb=no.
a=ptime:20.
a=rtcp:20007 IN IP4 192.168.162.181.
U yy.yyy.yyy.yy:5060 -> xxx.xx.xx.xx:5060
SIP/2.0 407 Proxy Authentication Required.
Via: SIP/2.0/UDP
192.168.162.181;branch=z9hG4bK309b82ccf;received=xxx.xx.xx.xx.
To: "QE-A" <sip:990099001@yy.yyy.yyy.yy>;tag=f7983fe553e1941.
From: "QE-B" <sip:990099002@yy.yyy.yyy.yy>;tag=5bf8b4fb69fca84.
Call-ID: 7c933d3d19bb76c396b995202b18eb97(a)yy.yyy.yyy.yy.
CSeq: 567882513 INVITE.
Proxy-Authenticate: Digest realm="yy.yyy.yyy.yy",
nonce="463f31b81a65dee3419ce3e4bfbecc253410cbf5".
Server: Sip EXpress router (0.9.6 (i386/freebsd)).
Content-Length: 0.
Warning: 392 yy.yyy.yyy.yy:5060 "Noisy feedback tells: pid=49990
req_src_ip=xxx.xx.xx.xx req_src_port=62907
in_uri=sip:990099001@192.168.162.187
out_uri=sip:990099001@192.168.162.187 via_cnt==1".
.
_______________________________________________
Serusers mailing list
Serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers