On 08/09/2013 01:34 PM, Klaus Darilion wrote: > It seems that there is a NAT-ALG between the client and the proxy which > rewrites the VIa header and Contact header. > These ALGs are quite often buggy and should be avoided. Further, as the ALG > rewrites the IP addresses, it may be that > your configuration does not detect the client as NATed and thus does not NAT > traversal.
I forgot to say that I'm using a slightly modified default v4.0.x cfg file. So WITH_NAT and backend on postgresql. That's it. > > You can try: > > a) comment all "nat_uac_test()" functions in your config and force NAT > traversal always. This may help against the > broken ALG > > b) move to a different port, e.g. port 4567. Many ALGs trigger the rewrite if > they see messages to/from port 5060. > > c) use TLS, then the ALG can not rewrite the message I'll try all the above > > regards > Klaus > > On 09.08.2013 13:22, Roberto Fichera wrote: >> Hi All, >> >> I'm try to setup kamilio v4.0.2 under a Fedora18 64bits having a public >> address >> in order to bridge calls between UDP and TCP clients. Everything works pretty >> fine between UDP clients even if behind NAT. But as soon as one TCP client >> is being called I'm getting this below on kamailio side. Note that the port >> is wrong >> and the TCP client doesn't get aliased nor tcp port remappend or received >> field >> is set: >> >> Call-ID: 23306738-94b3-49b5-b7e8-dc1b8a8061db >> CSeq: 50696 REGISTER >> User-Agent: PJSUA v2.1-svn Linux-3.10.5.44/x86_64/glibc-2.17 >> Supported: outbound, path >> Contact: >> <sip:528@94.94.X.X:1117;transport=TCP;ob>;reg-id=1;+sip.instance="<urn:uuid:00000000-0000-0000-0000-0000be3c954f>" >> Expires: 300 >> Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, INFO, SUBSCRIBE, NOTIFY, >> REFER, MESSAGE, OPTIONS >> Content-Length: 0 >> >> >> SIP/2.0 401 Unauthorized >> Via: SIP/2.0/TCP >> 94.94.X.X:56120;rport=56120;branch=z9hG4bKPj75004c2a-7ba3-4807-805c-a3ac8016e5b7;alias >> From: <sip:528@test.domain;hide>;tag=93cc1d8e-9ccc-4d36-8587-923ff44daf89 >> To: <sip:528@test.domain;hide>;tag=333a0370df4a40d5d5a0c21bb156e2a6.aab2 >> Call-ID: 23306738-94b3-49b5-b7e8-dc1b8a8061db >> CSeq: 50696 REGISTER >> WWW-Authenticate: Digest realm="test.domain", >> nonce="UgOcJlIDmvotaQR8dxYacL2fFlyotlC2" >> Server: kamailio (4.0.2 (x86_64/linux)) >> Content-Length: 0 >> >> >> REGISTER sip:test.domain;transport=tcp;hide SIP/2.0 >> Via: SIP/2.0/TCP >> 94.94.X.X:56120;rport;branch=z9hG4bKPja2e404d0-9812-4b7b-b86b-3f3b1a27d204;alias >> Max-Forwards: 70 >> From: <sip:528@test.domain;hide>;tag=93cc1d8e-9ccc-4d36-8587-923ff44daf89 >> To: <sip:528@test.domain;hide> >> Call-ID: 23306738-94b3-49b5-b7e8-dc1b8a8061db >> CSeq: 50697 REGISTER >> User-Agent: PJSUA v2.1-svn Linux-3.10.5.44/x86_64/glibc-2.17 >> Supported: outbound, path >> Contact: >> <sip:528@94.94.X.X:1117;transport=TCP;ob>;reg-id=1;+sip.instance="<urn:uuid:00000000-0000-0000-0000-0000be3c954f>" >> Expires: 300 >> Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, INFO, SUBSCRIBE, NOTIFY, >> REFER, MESSAGE, OPTIONS >> Authorization: Digest username="528@test.domain", realm="test.domain", >> nonce="UgOcJlIDmvotaQR8dxYacL2fFlyotlC2", >> uri="sip:test.domain;transport=tcp;hide", >> response="d6e93d582744a3cf12cc48989f66872e" >> Content-Length: 0 >> >> >> SIP/2.0 200 OK >> Via: SIP/2.0/TCP >> 94.94.X.X:56120;rport=56120;branch=z9hG4bKPja2e404d0-9812-4b7b-b86b-3f3b1a27d204;alias >> From: <sip:528@test.domain;hide>;tag=93cc1d8e-9ccc-4d36-8587-923ff44daf89 >> To: <sip:528@test.domain;hide>;tag=333a0370df4a40d5d5a0c21bb156e2a6.d863 >> Call-ID: 23306738-94b3-49b5-b7e8-dc1b8a8061db >> CSeq: 50697 REGISTER >> Contact: >> <sip:528@94.94.X.X:1117;transport=TCP;ob>;expires=300;+sip.instance="<urn:uuid:00000000-0000-0000-0000-0000be3c954f>";reg-id=1 >> >> Server: kamailio (4.0.2 (x86_64/linux)) >> Content-Length: 0 >> >> Thus, kamailio trigger this error: >> Aug 9 09:20:47 proxy /usr/sbin/kamailio[3553]: ERROR: <core> >> [tcp_main.c:4247]: handle_tcpconn_ev(): connect >> 94.94.X.X:1117 failed >> >> From the client side (pjsua client) the log looks: >> >> >> REGISTER sip:test.domain;transport=tcp;hide SIP/2.0 >> Via: SIP/2.0/TCP >> 192.168.2.90:56120;rport;branch=z9hG4bKPj75004c2a-7ba3-4807-805c-a3ac8016e5b7;alias >> Max-Forwards: 70 >> From: <sip:528@test.domain;hide>;tag=93cc1d8e-9ccc-4d36-8587-923ff44daf89 >> To: <sip:528@test.domain;hide> >> Call-ID: 23306738-94b3-49b5-b7e8-dc1b8a8061db >> CSeq: 50696 REGISTER >> User-Agent: PJSUA v2.1-svn Linux-3.10.5.44/x86_64/glibc-2.17 >> Supported: outbound, path >> Contact: >> <sip:528@192.168.2.90:5060;transport=TCP;ob>;reg-id=1;+sip.instance="<urn:uuid:00000000-0000-0000-0000-0000be3c954f>" >> Expires: 300 >> Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, INFO, SUBSCRIBE, NOTIFY, >> REFER, MESSAGE, OPTIONS >> Content-Length: 0 >> >> >> --end msg-- >> SIP/2.0 401 Unauthorized >> Via: SIP/2.0/TCP >> 192.168.2.90:56120;rport=56120;branch=z9hG4bKPj75004c2a-7ba3-4807-805c-a3ac8016e5b7;alias >> From: <sip:528@test.domain;hide>;tag=93cc1d8e-9ccc-4d36-8587-923ff44daf89 >> To: <sip:528@test.domain;hide>;tag=333a0370df4a40d5d5a0c21bb156e2a6.aab2 >> Call-ID: 23306738-94b3-49b5-b7e8-dc1b8a8061db >> CSeq: 50696 REGISTER >> WWW-Authenticate: Digest realm="test.domain", >> nonce="UgOcJlIDmvotaQR8dxYacL2fFlyotlC2" >> Server: kamailio (4.0.2 (x86_64/linux)) >> Content-Length: 0 >> >> >> --end msg-- >> REGISTER sip:test.domain;transport=tcp;hide SIP/2.0 >> Via: SIP/2.0/TCP >> 192.168.2.90:56120;rport;branch=z9hG4bKPja2e404d0-9812-4b7b-b86b-3f3b1a27d204;alias >> Max-Forwards: 70 >> From: <sip:528@test.domain;hide>;tag=93cc1d8e-9ccc-4d36-8587-923ff44daf89 >> To: <sip:528@test.domain;hide> >> Call-ID: 23306738-94b3-49b5-b7e8-dc1b8a8061db >> CSeq: 50697 REGISTER >> User-Agent: PJSUA v2.1-svn Linux-3.10.5.44/x86_64/glibc-2.17 >> Supported: outbound, path >> Contact: >> <sip:528@192.168.2.90:5060;transport=TCP;ob>;reg-id=1;+sip.instance="<urn:uuid:00000000-0000-0000-0000-0000be3c954f>" >> Expires: 300 >> Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, INFO, SUBSCRIBE, NOTIFY, >> REFER, MESSAGE, OPTIONS >> Authorization: Digest username="528@test.domain", realm="test.domain", >> nonce="UgOcJlIDmvotaQR8dxYacL2fFlyotlC2", >> uri="sip:test.domain;transport=tcp;hide", >> response="d6e93d582744a3cf12cc48989f66872e" >> Content-Length: 0 >> >> >> --end msg-- >> SIP/2.0 200 OK >> Via: SIP/2.0/TCP >> 192.168.2.90:56120;rport=56120;branch=z9hG4bKPja2e404d0-9812-4b7b-b86b-3f3b1a27d204;alias >> From: <sip:528@test.domain;hide>;tag=93cc1d8e-9ccc-4d36-8587-923ff44daf89 >> To: <sip:528@test.domain;hide>;tag=333a0370df4a40d5d5a0c21bb156e2a6.d863 >> Call-ID: 23306738-94b3-49b5-b7e8-dc1b8a8061db >> CSeq: 50697 REGISTER >> Contact: >> <sip:528@192.168.2.90:5060;transport=TCP;ob>;expires=300;+sip.instance="<urn:uuid:00000000-0000-0000-0000-0000be3c954f>";reg-id=1 >> >> Server: kamailio (4.0.2 (x86_64/linux)) >> Content-Length: 0 >> >> >> --end msg-- >> REGISTER sip:test.domain;transport=tcp;hide SIP/2.0 >> Via: SIP/2.0/TCP >> 192.168.2.90:56120;rport;branch=z9hG4bKPj3f8c138b-df5e-40a1-8482-fa792c362291;alias >> Max-Forwards: 70 >> From: <sip:528@test.domain;hide>;tag=2256e1a1-bad1-4f02-a9ff-45ff349f2c52 >> To: <sip:528@test.domain;hide> >> Call-ID: 23306738-94b3-49b5-b7e8-dc1b8a8061db >> CSeq: 50698 REGISTER >> User-Agent: PJSUA v2.1-svn Linux-3.10.5.44/x86_64/glibc-2.17 >> Supported: outbound, path >> Contact: >> <sip:528@192.168.2.90:5060;transport=TCP;ob>;reg-id=1;+sip.instance="<urn:uuid:00000000-0000-0000-0000-0000be3c954f>" >> Expires: 300 >> Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, INFO, SUBSCRIBE, NOTIFY, >> REFER, MESSAGE, OPTIONS >> Content-Length: 0 >> >> >> --end msg-- >> SIP/2.0 401 Unauthorized >> Via: SIP/2.0/TCP >> 192.168.2.90:56120;rport=56120;branch=z9hG4bKPj3f8c138b-df5e-40a1-8482-fa792c362291;alias >> From: <sip:528@test.domain;hide>;tag=2256e1a1-bad1-4f02-a9ff-45ff349f2c52 >> To: <sip:528@test.domain;hide>;tag=333a0370df4a40d5d5a0c21bb156e2a6.15dd >> Call-ID: 23306738-94b3-49b5-b7e8-dc1b8a8061db >> CSeq: 50698 REGISTER >> WWW-Authenticate: Digest realm="test.domain", >> nonce="UgOdTVIDnCHViWa5LC/JUVsF0HRn4wA5" >> Server: kamailio (4.0.2 (x86_64/linux)) >> Content-Length: 0 >> >> >> --end msg-- >> REGISTER sip:test.domain;transport=tcp;hide SIP/2.0 >> Via: SIP/2.0/TCP >> 192.168.2.90:56120;rport;branch=z9hG4bKPj9539d611-09a9-4cac-bd29-bfe68132c058;alias >> Max-Forwards: 70 >> From: <sip:528@test.domain;hide>;tag=2256e1a1-bad1-4f02-a9ff-45ff349f2c52 >> To: <sip:528@test.domain;hide> >> Call-ID: 23306738-94b3-49b5-b7e8-dc1b8a8061db >> CSeq: 50699 REGISTER >> User-Agent: PJSUA v2.1-svn Linux-3.10.5.44/x86_64/glibc-2.17 >> Supported: outbound, path >> Contact: >> <sip:528@192.168.2.90:5060;transport=TCP;ob>;reg-id=1;+sip.instance="<urn:uuid:00000000-0000-0000-0000-0000be3c954f>" >> Expires: 300 >> Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, INFO, SUBSCRIBE, NOTIFY, >> REFER, MESSAGE, OPTIONS >> Authorization: Digest username="528@test.domain", realm="test.domain", >> nonce="UgOdTVIDnCHViWa5LC/JUVsF0HRn4wA5", >> uri="sip:test.domain;transport=tcp;hide", >> response="3d2ed2fc1da090f592424cfa5804943e" >> Content-Length: 0 >> >> >> --end msg-- >> SIP/2.0 200 OK >> Via: SIP/2.0/TCP >> 192.168.2.90:56120;rport=56120;branch=z9hG4bKPj9539d611-09a9-4cac-bd29-bfe68132c058;alias >> From: <sip:528@test.domain;hide>;tag=2256e1a1-bad1-4f02-a9ff-45ff349f2c52 >> To: <sip:528@test.domain;hide>;tag=333a0370df4a40d5d5a0c21bb156e2a6.cf79 >> Call-ID: 23306738-94b3-49b5-b7e8-dc1b8a8061db >> CSeq: 50699 REGISTER >> Contact: >> <sip:528@192.168.2.90:5060;transport=TCP;ob>;expires=300;+sip.instance="<urn:uuid:00000000-0000-0000-0000-0000be3c954f>";reg-id=1 >> >> Server: kamailio (4.0.2 (x86_64/linux)) >> Content-Length: 0 >> >> Does anyone can show me how solve this problem? >> >> Thanks in advance, >> Roberto Fichera. >> >> _______________________________________________ >> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list >> sr-users@lists.sip-router.org >> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users >> > _______________________________________________ SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list sr-users@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
