Dismiss Notice
We would like to remind you that we’re updating our login process for all 3CX forums whereby you will be able to login with the same credentials you use for the Partner or Customer Portal. Click here to read more.

403 Forbidden

Discussion in '3CX Phone System - General' started by raheel, Feb 12, 2010.

Thread Status:
Not open for further replies.
  1. raheel

    Joined:
    Feb 12, 2010
    Messages:
    2
    Likes Received:
    0
    I am new to the 3cx phone system and cannot figure out this annoying problem. I have a server setup with 5 extensions, everything works inside the office, but noting outside. all I get is Forbidden 403 -

    I am useing 3 GrandStream GPX2000 a 3CX VOIP client and also iSip Simples Software in iPhone, All Hareware and software shows "Forbidden 403", although they register with the server okay - Extension status change to Green.

    I have copied the log below hoping to get an answer open, All appropriate on the router are open
    looking forward to getting an answer, thanks



    22:47:15.109 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:14.718 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:14.312 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:47:13.484 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:13.187 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:12.765 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:47:11.937 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:10.734 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:10.562 [CM502001]: Source info: From: "EXT55"<sip:55@sample.sip.com>;tag=82zusxyx05dasbahojmllztqud4yzzje<sip:10@sample.sip.com>
    22:47:10.562 [CM503013]: Call(5): Incoming call rejected, caller is unknown; msg=SipReq: INVITE 10@sample.sip.com tid=Pj5ofrvlobc7c0ef150hdpqhyb-v8upq.z cseq=INVITE contact=55@10.1.1.11:1024 / 11937 from(wire)
    22:47:10.546 [CM500002]: Info on incoming INVITE:
    INVITE sip:10@sample.sip.com SIP/2.0
    Via: SIP/2.0/UDP 10.1.1.11:1024;rport=1024;branch=z9hG4bKPj5ofrvlobc7c0ef150hdpqhyb-v8upq.z;received=63.29.231.217
    Max-Forwards: 70
    Contact: <sip:55@10.1.1.11:1024;transport=UDP>
    To: <sip:10@sample.sip.com>
    From: "EXT55"<sip:55@sample.sip.com>;tag=82zusxyx05dasbahojmllztqud4yzzje
    Call-ID: bexfzayfbvkgnwmh.fklgzywhiu8ojdf
    CSeq: 11937 INVITE
    Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, PUBLISH, REFER, MESSAGE, OPTIONS
    Proxy-Authorization: Digest username="55",realm="3CXPhoneSystem",nonce="414d535c01856e4e82:a55d184c20ca621b468e05363cef2f4f",uri="sip:10@sample.sip.com",response="d6df2f094eb565007f66f9dd9cce7d48",algorithm=MD5
    Supported: 100rel, norefersub
    User-Agent: iSip v3.1/iPhoneOS
    Content-Length: 0

    22:47:10.359 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:47:10.265 [CM500002]: Unidentified incoming call. Review INVITE and adjust source identification:
    INVITE sip:10@sample.sip.com SIP/2.0
    Via: SIP/2.0/UDP 10.1.1.11:1024;rport=1024;branch=z9hG4bKPjbfw-mt15c6qnqzzqr7s6p8ccugmyyfyy;received=63.29.231.217
    Max-Forwards: 70
    Contact: <sip:55@10.1.1.11:1024;transport=UDP>
    To: <sip:10@sample.sip.com>
    From: "EXT55"<sip:55@sample.sip.com>;tag=82zusxyx05dasbahojmllztqud4yzzje
    Call-ID: bexfzayfbvkgnwmh.fklgzywhiu8ojdf
    CSeq: 11936 INVITE
    Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, PUBLISH, REFER, MESSAGE, OPTIONS
    Supported: 100rel, norefersub
    User-Agent: iSip v3.1/iPhoneOS
    Content-Length: 0

    22:47:10.265 [CM302001]: Authorization system can not identify source of: SipReq: INVITE 10@sample.sip.com tid=Pjbfw-mt15c6qnqzzqr7s6p8ccugmyyfyy cseq=INVITE contact=55@10.1.1.11:1024 / 11936 from(wire)
    22:47:09.484 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:09.093 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:08.671 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:47:07.859 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:07.453 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:07.031 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:47:06.203 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:05.812 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:05.390 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:47:04.671 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:04.265 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:26.593 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:24.421 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:23.609 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:45:22.390 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:21.140 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:20.328 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:45:18.078 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:18.031 [CM503013]: Call(4): Incoming call rejected, caller is unknown; msg=SipReq: INVITE 99@sample.sip.com tid=Pji3hknvevfgolyehwq42s4xpugrd.7get cseq=INVITE contact=55@10.1.1.11:1024 / 5622 from(wire)
    INVITE sip:99@sample.sip.com SIP/2.0
    Max-Forwards: 70
    To: <sip:99@sample.sip.com>
    Call-ID: jlveis2yzr7lxrlqwdvzbmwdek-mrpq-
    Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, PUBLISH, REFER, MESSAGE, OPTIONS
    Supported: 100rel, norefersub
    Content-Length: 0
    22:45:17.796 [CM500002]: Unidentified incoming call. Review INVITE and adjust source identification:
    Via: SIP/2.0/UDP 10.1.1.11:1024;rport=1024;branch=z9hG4bKPjbcll-r7duwazzjorjxmpmy0jhcyl4akj;received=63.29.231.217
    Contact: <sip:55@10.1.1.11:1024;transport=UDP>
    From: "EXT55"<sip:55@sample.sip.com>;tag=g1eq4jgaqwczk1uf25wvu0piao8s2nhy
    CSeq: 5621 INVITE
    Supported: 100rel, norefersub
    Content-Length: 0
    22:45:17.796 [CM302001]: Authorization system can not identify source of: SipReq: INVITE 99@sample.sip.com tid=Pjbcll-r7duwazzjorjxmpmy0jhcyl4akj cseq=INVITE contact=55@10.1.1.11:1024 / 5621 from(wire)
    22:45:16.953 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:16.140 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:45:14.000 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:13.000 Active calls counted toward license limit: []
    22:45:12.468 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:11.765 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:11.093 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:5060/55]
    22:44:09.000 Active calls counted toward license limit: []
    22:43:05.000 Active calls counted toward license limit: []
    22:42:01.000 Active calls counted toward license limit: []
     
  2. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    11,073
    Likes Received:
    323
    Do you have the remote extensions set to use STUN? Are the external sets registering to a fixed public IP of the 3CX end, or are you using a DynDNS service to point them to the PBX?
     
  3. raheel

    Joined:
    Feb 12, 2010
    Messages:
    2
    Likes Received:
    0
    I am using Dyndmic DNS at the 3CX server end. Dyndmic DNS is good as I have other remote applications working just fine. Also I did not realise that there is somehting special I have to do for remote extensions in 3CX end. The GrandStream Phone I am using remotely has "stun.3cx.com" defined in Stun Server (see attachment).
     

    Attached Files:

  4. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    11,073
    Likes Received:
    323
    Not too sure why Ext 55 is registering and un-registering so often, should be set for every 30 minutes or a bit less. I take it that your DynDNS is the sample.sip.com. Is the problem only with the iPhone? Using wiFi or mobile providers data plan?
     
Thread Status:
Not open for further replies.