403 Forbidden

Discussion in '3CX Phone System - General' started by raheel, Feb 12, 2010.

Thread Status:
Not open for further replies.
  1. raheel

    Joined:
    Feb 12, 2010
    Messages:
    2
    Likes Received:
    0
    I am new to the 3cx phone system and cannot figure out this annoying problem. I have a server setup with 5 extensions, everything works inside the office, but noting outside. all I get is Forbidden 403 -

    I am useing 3 GrandStream GPX2000 a 3CX VOIP client and also iSip Simples Software in iPhone, All Hareware and software shows "Forbidden 403", although they register with the server okay - Extension status change to Green.

    I have copied the log below hoping to get an answer open, All appropriate on the router are open
    looking forward to getting an answer, thanks



    22:47:15.109 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:14.718 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:14.312 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:47:13.484 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:13.187 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:12.765 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:47:11.937 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:10.734 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:10.562 [CM502001]: Source info: From: "EXT55"<sip:55@sample.sip.com>;tag=82zusxyx05dasbahojmllztqud4yzzje<sip:10@sample.sip.com>
    22:47:10.562 [CM503013]: Call(5): Incoming call rejected, caller is unknown; msg=SipReq: INVITE 10@sample.sip.com tid=Pj5ofrvlobc7c0ef150hdpqhyb-v8upq.z cseq=INVITE contact=55@10.1.1.11:1024 / 11937 from(wire)
    22:47:10.546 [CM500002]: Info on incoming INVITE:
    INVITE sip:10@sample.sip.com SIP/2.0
    Via: SIP/2.0/UDP 10.1.1.11:1024;rport=1024;branch=z9hG4bKPj5ofrvlobc7c0ef150hdpqhyb-v8upq.z;received=63.29.231.217
    Max-Forwards: 70
    Contact: <sip:55@10.1.1.11:1024;transport=UDP>
    To: <sip:10@sample.sip.com>
    From: "EXT55"<sip:55@sample.sip.com>;tag=82zusxyx05dasbahojmllztqud4yzzje
    Call-ID: bexfzayfbvkgnwmh.fklgzywhiu8ojdf
    CSeq: 11937 INVITE
    Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, PUBLISH, REFER, MESSAGE, OPTIONS
    Proxy-Authorization: Digest username="55",realm="3CXPhoneSystem",nonce="414d535c01856e4e82:a55d184c20ca621b468e05363cef2f4f",uri="sip:10@sample.sip.com",response="d6df2f094eb565007f66f9dd9cce7d48",algorithm=MD5
    Supported: 100rel, norefersub
    User-Agent: iSip v3.1/iPhoneOS
    Content-Length: 0

    22:47:10.359 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:47:10.265 [CM500002]: Unidentified incoming call. Review INVITE and adjust source identification:
    INVITE sip:10@sample.sip.com SIP/2.0
    Via: SIP/2.0/UDP 10.1.1.11:1024;rport=1024;branch=z9hG4bKPjbfw-mt15c6qnqzzqr7s6p8ccugmyyfyy;received=63.29.231.217
    Max-Forwards: 70
    Contact: <sip:55@10.1.1.11:1024;transport=UDP>
    To: <sip:10@sample.sip.com>
    From: "EXT55"<sip:55@sample.sip.com>;tag=82zusxyx05dasbahojmllztqud4yzzje
    Call-ID: bexfzayfbvkgnwmh.fklgzywhiu8ojdf
    CSeq: 11936 INVITE
    Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, PUBLISH, REFER, MESSAGE, OPTIONS
    Supported: 100rel, norefersub
    User-Agent: iSip v3.1/iPhoneOS
    Content-Length: 0

    22:47:10.265 [CM302001]: Authorization system can not identify source of: SipReq: INVITE 10@sample.sip.com tid=Pjbfw-mt15c6qnqzzqr7s6p8ccugmyyfyy cseq=INVITE contact=55@10.1.1.11:1024 / 11936 from(wire)
    22:47:09.484 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:09.093 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:08.671 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:47:07.859 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:07.453 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:07.031 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:47:06.203 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:05.812 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:05.390 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:47:04.671 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:47:04.265 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:26.593 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:24.421 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:23.609 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:45:22.390 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:21.140 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:20.328 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:45:18.078 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:18.031 [CM503013]: Call(4): Incoming call rejected, caller is unknown; msg=SipReq: INVITE 99@sample.sip.com tid=Pji3hknvevfgolyehwq42s4xpugrd.7get cseq=INVITE contact=55@10.1.1.11:1024 / 5622 from(wire)
    INVITE sip:99@sample.sip.com SIP/2.0
    Max-Forwards: 70
    To: <sip:99@sample.sip.com>
    Call-ID: jlveis2yzr7lxrlqwdvzbmwdek-mrpq-
    Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, PUBLISH, REFER, MESSAGE, OPTIONS
    Supported: 100rel, norefersub
    Content-Length: 0
    22:45:17.796 [CM500002]: Unidentified incoming call. Review INVITE and adjust source identification:
    Via: SIP/2.0/UDP 10.1.1.11:1024;rport=1024;branch=z9hG4bKPjbcll-r7duwazzjorjxmpmy0jhcyl4akj;received=63.29.231.217
    Contact: <sip:55@10.1.1.11:1024;transport=UDP>
    From: "EXT55"<sip:55@sample.sip.com>;tag=g1eq4jgaqwczk1uf25wvu0piao8s2nhy
    CSeq: 5621 INVITE
    Supported: 100rel, norefersub
    Content-Length: 0
    22:45:17.796 [CM302001]: Authorization system can not identify source of: SipReq: INVITE 99@sample.sip.com tid=Pjbcll-r7duwazzjorjxmpmy0jhcyl4akj cseq=INVITE contact=55@10.1.1.11:1024 / 5621 from(wire)
    22:45:16.953 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:16.140 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
    22:45:14.000 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:13.000 Active calls counted toward license limit: []
    22:45:12.468 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:11.765 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:1024;transport=UDP/55]
    22:45:11.093 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:55@63.29.231.217:5060/55]
    22:44:09.000 Active calls counted toward license limit: []
    22:43:05.000 Active calls counted toward license limit: []
    22:42:01.000 Active calls counted toward license limit: []
     
  2. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    10,848
    Likes Received:
    299
    Do you have the remote extensions set to use STUN? Are the external sets registering to a fixed public IP of the 3CX end, or are you using a DynDNS service to point them to the PBX?
     
  3. raheel

    Joined:
    Feb 12, 2010
    Messages:
    2
    Likes Received:
    0
    I am using Dyndmic DNS at the 3CX server end. Dyndmic DNS is good as I have other remote applications working just fine. Also I did not realise that there is somehting special I have to do for remote extensions in 3CX end. The GrandStream Phone I am using remotely has "stun.3cx.com" defined in Stun Server (see attachment).
     

    Attached Files:

  4. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    10,848
    Likes Received:
    299
    Not too sure why Ext 55 is registering and un-registering so often, should be set for every 30 minutes or a bit less. I take it that your DynDNS is the sample.sip.com. Is the problem only with the iPhone? Using wiFi or mobile providers data plan?
     
Thread Status:
Not open for further replies.