403 Forbidden/INVITE Outbound calls Twilio

[NKDTech]

Hello,

I have looked throughout this forum to see if previous posts can solve my issue, I can see many 403 topics but none have helped resolve my issue.
I have followed both guides completely, some guidance would be appreciated.

https://www.twilio.com/blog/build-voip-system-twilio-3cx-python
https://www.3cx.com/docs/twilio-elastic-sip-trunking/

Inbound calls work fine, it's only when I dial numbers outbound.

Twilio ACL: using correct AWS Host Public IP
Hosted: AWS 3CX Server (3CXPhoneSystem 18.0.4.965)
Sip Trunk: Twilio Elastic Sip Trunk
Country: Australia Only
Server Outbound Rules:


Errors from 3CX: (note: i have omitted/edited the below usernames, numbers, and particulars for security)

08/23/2022 11:39:34 PM - ~Target=Unknown:+61412345678@(Ln.10000@Twilio)
08/23/2022 11:39:34 PM - Leg L:6.1[Extn:100] is terminated: Cause: BYE from PBX
08/23/2022 11:39:34 PM - Terminated from "LASTNAME, FIRSTNAME"<sip:[email protected]>;tag=161eb46a to <sip:****@127.0.0.1:5060>;tag=ee51a22d; reason: Rejected
08/23/2022 11:39:34 PM - L:6.1[Extn:100] Sending: OnSendResp Send 403/INVITE from 0.0.0.0:0 tid=652e201bae824c70 Call-ID=4wiYkuLnbBSGLkVm9MAMlQ..:
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK-524287-1---652e201bae824c70;rport=5063
To: <sip:****@127.0.0.1:5060>;tag=ee51a22d
From: "LASTNAME, FIRSTNAME"<sip:[email protected]>;tag=161eb46a
Call-ID: 4wiYkuLnbBSGLkVm9MAMlQ..
CSeq: 2 INVITE
Warning: 499 ip-172-31-36-49.ap-southeast-2.compute.internal "Forbidden"
Content-Length: 0

08/23/2022 11:39:34 PM - SendMsg from <sip:****@127.0.0.1:5060>;tag=ee51a22d to "LASTNAME, FIRSTNAME"<sip:[email protected]>;tag=161eb46a
08/23/2022 11:39:34 PM - Call(C:6) is terminated
08/23/2022 11:39:34 PM - [CM503020]: Call(C:6): Normal call termination. Call originator: Extn:100. Reason: Forbidden
08/23/2022 11:39:34 PM - [CM503016]: Call(C:6): Attempt to reach <sip:****@127.0.0.1:5060> from Extn:100 has failed. Reason: Forbidden
08/23/2022 11:39:34 PM - [Flow] Current call diversion path:[]
08/23/2022 11:39:34 PM - L:6.1[Extn:100] failed to reach Line:10000>>+61412345678, reason Forbidden
08/23/2022 11:39:34 PM - RerouteReq
08/23/2022 11:39:34 PM - Leg L:6.2[Line:10000>>+61412345678] is terminated: Cause: 403 Forbidden/INVITE from 54.252.254.66:5060
08/23/2022 11:39:34 PM - L:6.2[Line:10000>>+61412345678] got Terminated Recv 403/INVITE from 54.252.254.66:5060 tid=668df332988abb32 Call-ID=dLHt4HJbgORuWzgzEhjM8A..:
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 172.31.36.49:5060;received=AWS-IP X.X.X.X;branch=z9hG4bK-524287-1---668df332988abb32;rport=5060
Contact: <sip:172.21.138.171:5060>
To: <sip:[email protected]:5060>;tag=61594086_c3356d0b_9707ec30-fed3-401c-9cf1-41cfdc782f03
From: <sip:[email protected]:5060>;tag=615dbb4a
Call-ID: dLHt4HJbgORuWzgzEhjM8A..
CSeq: 1 INVITE
Server: Twilio
X-Twilio-TlsPolicy: TLSv1.2+
Content-Length: 0

08/23/2022 11:39:34 PM - Terminated from <sip:[email protected]:5060>;tag=61594086_c3356d0b_9707ec30-fed3-401c-9cf1-41cfdc782f03 to <sip:[email protected]:5060>;tag=615dbb4a; reason: Error
08/23/2022 11:39:34 PM - Call to T:Line:10000>>+61412345678@[Dev:sip:[email protected]:5060] from L:6.1[Extn:100] failed, cause: Cause: 403 Forbidden/INVITE from 54.252.254.66:5060
08/23/2022 11:39:34 PM - L:6.2[Line:10000>>+61412345678] got Failure: Failure Recv 403/INVITE from 54.252.254.66:5060 tid=668df332988abb32 Call-ID=dLHt4HJbgORuWzgzEhjM8A..:
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 172.31.36.49:5060;received=AWS-IP X.X.X.X;branch=z9hG4bK-524287-1---668df332988abb32;rport=5060
Contact: <sip:172.21.138.171:5060>
To: <sip:[email protected]:5060>;tag=61594086_c3356d0b_9707ec30-fed3-401c-9cf1-41cfdc782f03
From: <sip:[email protected]:5060>;tag=615dbb4a
Call-ID: dLHt4HJbgORuWzgzEhjM8A..
CSeq: 1 INVITE
Server: Twilio
X-Twilio-TlsPolicy: TLSv1.2+
Content-Length: 0

08/23/2022 11:39:34 PM - [CM503003]: Call(C:6): Call to <sip:[email protected]:5060> has failed; Cause: 403 Forbidden/INVITE from 54.252.254.66:5060
08/23/2022 11:39:34 PM - Session 434 has failed in leg L:6.2[Line:10000>>+61412345678] ; Cause: 403 Forbidden/INVITE from 54.252.254.66:5060
08/23/2022 11:39:34 PM - Failure from <sip:[email protected]:5060>;tag=61594086_c3356d0b_9707ec30-fed3-401c-9cf1-41cfdc782f03 to <sip:[email protected]:5060>;tag=615dbb4a
08/23/2022 11:39:34 PM - [CM503025]: Call(C:6): Calling T:Line:10000>>+61412345678@[Dev:sip:[email protected]:5060] for L:6.1[Extn:100]
08/23/2022 11:39:34 PM - Route to L:6.2[Line:10000>>+61412345678] sends Invite-OUT Send Req INVITE from 54.252.254.66:5060 tid=668df332988abb32 Call-ID=dLHt4HJbgORuWzgzEhjM8A..:
INVITE sip:[email protected]:5060 SIP/2.0
Via: SIP/2.0/ ;branch=z9hG4bK-524287-1---668df332988abb32;rport
Max-Forwards: 70
Contact: <sip:USERNAME@AWS-IP X.X.X.X:5060>
To: <sip:[email protected]:5060>
From: <sip:[email protected]:5060>;tag=615dbb4a
Call-ID: dLHt4HJbgORuWzgzEhjM8A..
CSeq: 1 INVITE
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE, UPDATE
Content-Type: application/sdp
Supported: replaces, timer
User-Agent: 3CXPhoneSystem 18.0.4.965 (965)
P-Asserted-Identity: <sip:[email protected]:5060>
Remote-Party-ID: <sip:[email protected]:5060>;party=calling
Content-Length: 217

v=0
o=3cxPS 32788351618646016 33992670967758849 IN IP4 AWS-IP X.X.X.X
s=3cxPS Audio call
c=IN IP4 AWS-IP X.X.X.X
t=0 0
m=audio 9026 RTP/AVP 0 101
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=sendrecv
08/23/2022 11:39:34 PM - Outbound CID reformat rule for DN:10000 is disabled (<Rules />)
08/23/2022 11:39:34 PM - Dev(846394170):[sip:[email protected]:5060 / USERNAME]: PBX contact is public IP: <sip:USERNAME@AWS-IP X.X.X.X:5060/UDP>
08/23/2022 11:39:34 PM - SLA is globally disabled
08/23/2022 11:39:34 PM - Added leg L:6.2[Line:10000>>+61412345678] <-> L:6.1[Extn:100]
08/23/2022 11:39:34 PM - [Flow] Call(C:6): making call from L:6.1[Extn:100] to T:Line:10000>>+61412345678@[Dev:sip:[email protected]:5060]
08/23/2022 11:39:34 PM - [CM503027]: Call(C:6): From: Extn:100 ("LASTNAME, FIRSTNAME" <sip:[email protected]:0>)  to  T:Line:10000>>+61412345678@[Dev:sip:[email protected]:5060]
08/23/2022 11:39:34 PM - [CM503004]: Call(C:6): Route 1: from L:6.1[Extn:100] to T:Line:10000>>+61412345678@[Dev:sip:[email protected]:5060]
08/23/2022 11:39:34 PM - Outbound CID reformat rule for DN:10000 is disabled (<Rules />)
08/23/2022 11:39:34 PM - Line limit check: Current # of calls for line Lc:10000([USER=45954]@Twilio[/USER][<sip:[email protected]:5060/UDP>]) is 0; limit is 4
08/23/2022 11:39:34 PM - Call(C:6): Call from Extn:100 to ****matches outbound rule 'National'
08/23/2022 11:39:34 PM - [Flow] Call(C:6): has built target endpoint: Out#:>>Rule{National}>>****for call from L:6.1[Extn:100]
08/23/2022 11:39:34 PM - [Flow] Target endpoint for ****is Out#:>>Rule{National}>>****
08/23/2022 11:39:34 PM - Selected prefix: 0
08/23/2022 11:39:34 PM - Looking for outbound rule: dialed = [****], processed: [****]; from-ext:
08/23/2022 11:39:34 PM - [Flow] Building target endpoint to ****from "LASTNAME, FIRSTNAME" <sip:[email protected]:0>
08/23/2022 11:39:34 PM - [CM503010]: Call(C:6): Making route(s) from Extn:100 to <sip:****@127.0.0.1:5060/UDP>
08/23/2022 11:39:34 PM - Remote SDP is set for leg L:6.1[Extn:100]
08/23/2022 11:39:34 PM - [CM505001]: Endpoint Extn:100: Device info: Device Not Identified: User Agent not matched; Capabilities:[reinvite, replaces, able-no-sdp, recvonly] UserAgent: [3CX WebRTC proxy] PBX contact: [sip:[email protected]:5060]
08/23/2022 11:39:34 PM - Inbound DID: ''; Phonebook Name: ''
08/23/2022 11:39:34 PM - [CM500002]: Call(C:6): Info on incoming INVITE from Extn:100:
Invite-IN Recv Req INVITE from 127.0.0.1:5063 tid=652e201bae824c70 Call-ID=4wiYkuLnbBSGLkVm9MAMlQ..:
INVITE sip:****@127.0.0.1:5060 SIP/2.0
Via: SIP/2.0/UDP 127.0.0.1:5063;branch=z9hG4bK-524287-1---652e201bae824c70;rport=5063
Max-Forwards: 70
Contact: <sip:[email protected]:5063;rinstance=2732a5ebcb4e7951>
To: <sip:****@127.0.0.1:5060>
From: "LASTNAME, FIRSTNAME"<sip:[email protected]>;tag=161eb46a
Call-ID: 4wiYkuLnbBSGLkVm9MAMlQ..
CSeq: 2 INVITE
Subject:
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE
Content-Type: application/sdp
Proxy-Authorization: Digest username="asdfasdf",realm="3CXPhoneSystem",nonce="414d53596304d89682:a50a71dfb6ba6fdf2c860bae899b488a",uri="sip:****@127.0.0.1:5060",response="46adbfbd87e5be3593f4ba1eb5f4d9e1",algorithm=MD5
Supported: replaces
User-Agent: 3CX WebRTC proxy
Content-Length: 629

 

[Pierre_3CX]

Hi,
As the error code comes from Twilio server (as can be seen from "403/INVITE from 54.252.254.66:5060" and "SIP/2.0 403 Forbidden ... Server: Twilio") you should reach the provider support about it, perhaps outbound calls or destination are disabled on your account level.