403 / Forbidden

Support zone
Post Reply
carlosalbffgomes
Posts: 19
Joined: Mon Dec 12, 2011 9:27 pm

403 / Forbidden

Post by carlosalbffgomes » Wed Sep 03, 2014 8:55 am

Hi,

I've been using Vono (GVT) as one of my dial plan voice service providers with no problem up to now on incoming and outcoming calls to Brazil. However, from some time ago, I can receive calls on this provider with no problems but, when I try to do some outgoing call through this voice service provider, I get the SIP 403 / Forbidden response code. The trace of such call is as follows:
SIPTransaction=> SIPTransaction=>Request received udp:67.222.131.147:5070<-udp:67.222.131.147:5060
INVITE sip:2*30260476@sipsorcery.com SIP/2.0
Via: SIP/2.0/UDP 67.222.131.147:5060;branch=z9hG4bK0f97ec56ba4e3cb7dcec6c79a49411a77b524968;rport=5060;received=67.222.131.147
Via: SIP/2.0/UDP 85.244.63.29:5070;branch=z9hG4bK-65323bb4;received=85.244.63.29;rport=5070
To: <sip:2*30260476@sipsorcery.com>
From: "Anonymous" <sip:1021@sipsorcery.com>;tag=ae130eac5e27b5b5o0
Call-ID: 590c6f38-e254ee99@localhost
CSeq: 102 INVITE
Contact: "Anonymous" <sip:1021@85.244.63.29:5070>
Max-Forwards: 69
User-Agent: Linksys/SPA901-5.1.5
Expires: 240
Authorization: Digest username="1021",realm="sipsorcery.com",nonce="20193418701180629927",uri="sip:2*30260476@sipsorcery.com",response="af377518bf1728c2c1d12887d9053cfb",algorithm=MD5
Supported: replaces
Content-Length: 389
Content-Type: application/sdp
Proxy-ReceivedFrom: udp:85.244.63.29:5070
Proxy-ReceivedOn: udp:67.222.131.147:5060
Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER

v=0
o=- 8690 8690 IN IP4 192.168.2.90
s=-
c=IN IP4 85.244.63.29
t=0 0
m=audio 6070 RTP/AVP 8 0 2 4 18 96 97 98 101
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:2 G726-32/8000
a=rtpmap:4 G723/8000
a=rtpmap:18 G729/8000
a=rtpmap:96 G726-40/8000
a=rtpmap:97 G726-24/8000
a=rtpmap:98 G726-16/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
a=sendrecv

DialPlan=> Dialplan trace commenced at 03 Sep 2014 01:44:10:099.
DialPlan=> DBRead sucessful for datakey "Remote-Party-ID".
DialPlan=> Commencing Dial with: 30260476@VSP_2.
DialPlan=> ForkCall commencing call leg to sip:30260476@vono.net.br.
DialPlan=> SIPClientUserAgent Call using alternate outbound proxy of udp:67.222.131.147:5060.
DialPlan=> Switching to sip:30260476@vono.net.br:5060 via udp:67.222.131.147:5060.
DialPlan=> SDP on UAC call had public IP not mangled, RTP socket 85.244.63.29:6070.
SIPTransaction=> Send Request reliable udp:67.222.131.147:5070->udp:67.222.131.147:5060
INVITE sip:30260476@vono.net.br SIP/2.0
Via: SIP/2.0/UDP 67.222.131.147:5070;branch=z9hG4bK5d84128ee39940d496c21be849d6305a;rport
To: <sip:30260476@vono.net.br>
From: "Carlos Alberto Gomes" <sip:caralbffgms$1@vono.net.br>;tag=CTDDEQWJCS
Call-ID: 4633119199094a5491d417f7fdcbe2b9
CSeq: 1 INVITE
Contact: <sip:caralbffgms$1@67.222.131.147:5070>
Max-Forwards: 70
User-Agent: http://www.sipsorcery.com
Content-Length: 389
Content-Type: application/sdp
Proxy-SendFrom: udp:67.222.131.147:5060

v=0
o=- 8690 8690 IN IP4 192.168.2.90
s=-
c=IN IP4 85.244.63.29
t=0 0
m=audio 6070 RTP/AVP 8 0 2 4 18 96 97 98 101
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:2 G726-32/8000
a=rtpmap:4 G723/8000
a=rtpmap:18 G729/8000
a=rtpmap:96 G726-40/8000
a=rtpmap:97 G726-24/8000
a=rtpmap:98 G726-16/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
a=sendrecv

SIPTransaction=> Send Request retransmit 2 udp:67.222.131.147:5070->udp:67.222.131.147:5060
INVITE sip:30260476@vono.net.br SIP/2.0
Via: SIP/2.0/UDP 67.222.131.147:5070;branch=z9hG4bK5d84128ee39940d496c21be849d6305a;rport
To: <sip:30260476@vono.net.br>
From: "Carlos Alberto Gomes" <sip:caralbffgms$1@vono.net.br>;tag=CTDDEQWJCS
Call-ID: 4633119199094a5491d417f7fdcbe2b9
CSeq: 1 INVITE
Contact: <sip:caralbffgms$1@67.222.131.147:5070>
Max-Forwards: 70
User-Agent: http://www.sipsorcery.com
Content-Length: 389
Content-Type: application/sdp
Proxy-SendFrom: udp:67.222.131.147:5060

v=0
o=- 8690 8690 IN IP4 192.168.2.90
s=-
c=IN IP4 85.244.63.29
t=0 0
m=audio 6070 RTP/AVP 8 0 2 4 18 96 97 98 101
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:2 G726-32/8000
a=rtpmap:4 G723/8000
a=rtpmap:18 G729/8000
a=rtpmap:96 G726-40/8000
a=rtpmap:97 G726-24/8000
a=rtpmap:98 G726-16/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
a=sendrecv

SIPTransaction=> Received Response udp:67.222.131.147:5070<-udp:67.222.131.147:5060
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 67.222.131.147:5070;branch=z9hG4bK5d84128ee39940d496c21be849d6305a;rport
To: <sip:30260476@vono.net.br>
From: "Carlos Alberto Gomes" <sip:caralbffgms$1@vono.net.br>;tag=CTDDEQWJCS
Call-ID: 4633119199094a5491d417f7fdcbe2b9
CSeq: 1 INVITE
Content-Length: 0
Proxy-ReceivedFrom: udp:201.86.87.36:5060
Proxy-ReceivedOn: udp:67.222.131.147:5060


DialPlan=> Information response 100 Trying for sip:30260476@vono.net.br.
SIPTransaction=> Received Response udp:67.222.131.147:5070<-udp:67.222.131.147:5060
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 67.222.131.147:5070;branch=z9hG4bK5d84128ee39940d496c21be849d6305a;rport
To: <sip:30260476@vono.net.br>;tag=aprqngfrt-58s1of1000020
From: "Carlos Alberto Gomes" <sip:caralbffgms$1@vono.net.br>;tag=CTDDEQWJCS
Call-ID: 4633119199094a5491d417f7fdcbe2b9
CSeq: 1 INVITE
Content-Length: 0
Proxy-ReceivedFrom: udp:201.86.87.36:5060
Proxy-ReceivedOn: udp:67.222.131.147:5060


SIPTransaction=> Send Request udp:67.222.131.147:5070->udp:67.222.131.147:5060
ACK sip:30260476@vono.net.br SIP/2.0
Via: SIP/2.0/UDP 67.222.131.147:5070;branch=z9hG4bK5d84128ee39940d496c21be849d6305a;rport
To: <sip:30260476@vono.net.br>;tag=aprqngfrt-58s1of1000020
From: "Carlos Alberto Gomes" <sip:caralbffgms$1@vono.net.br>;tag=CTDDEQWJCS
Call-ID: 4633119199094a5491d417f7fdcbe2b9
CSeq: 1 ACK
Max-Forwards: 70
Content-Length: 0
Proxy-SendFrom: udp:67.222.131.147:5060


DialPlan=> Response 403 Forbidden for sip:30260476@vono.net.br.
DialPlan=> Dialplan cleanup for carlosalbffgomes.
DialPlan=> Closing user database connection for carlosalbffgomes.
SIPTransaction=> Send Final Response Reliable udp:67.222.131.147:5070->67.222.131.147:5060
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 67.222.131.147:5060;branch=z9hG4bK0f97ec56ba4e3cb7dcec6c79a49411a77b524968;rport=5060;received=67.222.131.147
Via: SIP/2.0/UDP 85.244.63.29:5070;branch=z9hG4bK-65323bb4;received=85.244.63.29;rport=5070
To: <sip:2*30260476@sipsorcery.com>
From: "Anonymous" <sip:1021@sipsorcery.com>;tag=ae130eac5e27b5b5o0
Call-ID: 590c6f38-e254ee99@localhost
CSeq: 102 INVITE
Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER, REGISTER, SUBSCRIBE
Content-Length: 0


DialPlan=> Dialplan trace completed at 03 Sep 2014 01:44:43:318.
Some idea of what is happening?
Thanks.

Aaron
Site Admin
Posts: 4652
Joined: Thu Jul 12, 2007 12:13 am

Re: 403 / Forbidden

Post by Aaron » Wed Sep 03, 2014 11:54 am

Is your username with vono.net really caralbffgms$1?

It's unusual to have a $ character in a username.

carlosalbffgomes
Posts: 19
Joined: Mon Dec 12, 2011 9:27 pm

Re: 403 / Forbidden

Post by carlosalbffgomes » Wed Sep 03, 2014 1:27 pm

Yes, it's correctly set.
The reason for '$1' is that Vono accepts more than one SIP registration if each one as the '$" followed by a digit. In this case, all registrations are treated as different lines ringing together.
Possible reasons for this sip response are:
1) Outbound proxy needs authentication and sipsorcery are not doing it the way Vono expects;
2) There are an intentional block of sipsorcery ip address.
Any way, the same configuration has worked previously, that't the reason for my question and appreciate any suggestion that might contribute to the discovery of the reason behind such sip code response.
Regards,

Aaron
Site Admin
Posts: 4652
Joined: Thu Jul 12, 2007 12:13 am

Re: 403 / Forbidden

Post by Aaron » Thu Sep 04, 2014 12:52 pm

The 403 Forbidden response is typically sent when the username provided is wrong, that's why I asked about the $ in the username. Perhaps try without the $ and see if that makes any difference. Nothing has changed on the sipsorcery SIP software in the last few months so it's not something new we are doing.

Post Reply