i faced a similar situation with my ISP .. they block INBOUND UDP port 5060
which means if i try to register.. the server would receive my registration
message.. but when it sends the acknowledgement .. the ISP Firewall rejects the
message so the server responds with Unauthorized.. i simply changed the port on
the server to 5070 and set my dialer to listen to port 5070 as well (for
inbound messages) and this solved my issue.that was my situation.. so your
problem is in the firewall settings.. just try to look at it and see what is
missing.. and by the way when you send all of your IP sections XXX no one will
assist you as no one will know who is talking to whom.. just like if you go to
a doctor with a prostate problem.. you can't tell him that you won't remove
your clothes off ;)regards
-- Tarek Sawah
Integrated Digital Systems
CCNA, MCSE, RHCE, VoIP USA: +1 386 492 9993
Date: Wed, 23 Jun 2010 08:44:21 -0400
From: ge...@pagestation.com
To: asterisk-users@lists.digium.com
Subject: [asterisk-users] help with sip 401 unauthorized
I am getting a SIP 401 unauthorized message.
My public IP or PIP is being pre-routed with iptables to goto an
internal IP or IIP
All the polycom phones in the office point to the IIP. they work fine.
I have 2 external phones that are registering to the PIP. I see the
register attempt
as I am getting the 401 unauthorized message. For the 2 external phones
both have nat=1 enabled.
remote phone (192.X.X.X) GW internet PIP (prerouted)
(74.X.X.X) internal server (192.X.X.X)
This used to work before I moved the server inside the firewall. What
special setting do I need to
enable to get this working.
Thanks,
Jerry
--- Transmitting (NAT) to X.X.X.X:1024 ---
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP X.X.X.X:5060;branch=z9hG4bK6ea01bc7;received=X.X.X.X
From: sip:x...@x.x.x.x.;user=phone
To: sip:x...@x.x.x.x;user=phone;tag=as21ab1732
Call-ID: 000ff78d-ebb20007-22675f66-5da7e...@x.x.x.x
CSeq: 1196 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO
Supported: replaces
WWW-Authenticate: Digest algorithm=MD5, realm=asterisk, nonce=1c6a6002
Content-Length: 0
[XXX]
type=friend
username=XXX
secret=
dtmfmode=RFC2833
host=dynamic
context=external
rtptimeout=60
qualify=no
canreinvite=yes
nat=yes
disallow=all
allow=ulaw
allow=alaw
allow=gsm
--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
_
The New Busy is not the too busy. Combine all your e-mail accounts with Hotmail.
http://www.windowslive.com/campaign/thenewbusy?tile=multiaccountocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_4--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
