So I've found out that NAT has nothing to do with it.  The bit about things
working when the NAT device is removed was wrong.

So my question becomes:  Why would Kamailio ignore a 401 rather sending it
to a failure route?

Thanks in advance,
Marc


On Mon, Mar 3, 2014 at 9:10 AM, Marc Soda <ms...@coredial.com> wrote:

> I forget to mention, the nat device is in front of the Kamailio servers,
> not the endpoints.
>
>
> On Fri, Feb 28, 2014 at 6:22 PM, Marc Soda <ms...@coredial.com> wrote:
>
>> I have a Kamailio server setup which is registers to a back end server on
>> behalf of endpoints.  The endpoints can register to Kamailio but Kamailio
>> is failing to register to the server when I put a NAT device in front of
>> it.  Without the NAT device it works fine.
>>
>> The problem is the 401 that comes back seems to be ignored by Kamailio.
>>  I have a failure route setup to auth, but it is never hit.  I see the 401
>> in onrely_route, but not the failure_route.  I'm assuming it's a NAT issue
>> because removing the device fixes the issue.
>>
>> Anyone have any ideas?
>>
>> The 401 being ignored:
>>
>> SIP/2.0 401 Unauthorized
>> Via: SIP/2.0/UDP
>> 10.0.10.11;branch=z9hG4bKe5d6.178378f7.0;received=198.XXX.XXX.XXX
>> Via: SIP/2.0/UDP 127.0.0.1:12354
>> ;rport=6545;received=198.XXX.YYY.YYY;branch=z9hG4bK-1879-1-3
>> From: <sip:sip7878_s...@64.yyy.yyy.yyy>;tag=1
>> To: <sip:sip7878_s...@64.yyy.yyy.yyy>;tag=as00e32130
>> Call-ID: 1-1879@127.0.0.1
>> CSeq: 2 REGISTER
>> User-Agent: CoreDialPBX
>> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO
>>  Supported: replaces
>> WWW-Authenticate: Digest algorithm=MD5, realm="fe-c7c5-9o.domain.com",
>> nonce="151e4f60"
>> Content-Length: 0
>>
>> Thanks,
>> Marc
>>
>
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

Reply via email to