403 Forbidden

[raheel]

I am new to the 3cx phone system and cannot figure out this annoying problem. I have a server setup with 5 extensions, everything works inside the office, but noting outside. all I get is Forbidden 403 -

I am useing 3 GrandStream GPX2000 a 3CX VOIP client and also iSip Simples Software in iPhone, All Hareware and software shows "Forbidden 403", although they register with the server okay - Extension status change to Green.

I have copied the log below hoping to get an answer open, All appropriate on the router are open
looking forward to getting an answer, thanks



22:47:15.109 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:47:14.718 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:47:14.312 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
22:47:13.484 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:47:13.187 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:47:12.765 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
22:47:11.937 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:47:10.734 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:47:10.562 [CM502001]: Source info: From: "EXT55"<sip:[email protected]>;tag=82zusxyx05dasbahojmllztqud4yzzje<sip:[email protected]>
22:47:10.562 [CM503013]: Call(5): Incoming call rejected, caller is unknown; msg=SipReq: INVITE [email protected] tid=Pj5ofrvlobc7c0ef150hdpqhyb-v8upq.z cseq=INVITE [email protected]:1024 / 11937 from(wire)
22:47:10.546 [CM500002]: Info on incoming INVITE:
INVITE sip:[email protected] SIP/2.0
Via: SIP/2.0/UDP 10.1.1.11:1024;rport=1024;branch=z9hG4bKPj5ofrvlobc7c0ef150hdpqhyb-v8upq.z;received=63.29.231.217
Max-Forwards: 70
Contact: <sip:[email protected]:1024;transport=UDP>
To: <sip:[email protected]>
From: "EXT55"<sip:[email protected]>;tag=82zusxyx05dasbahojmllztqud4yzzje
Call-ID: bexfzayfbvkgnwmh.fklgzywhiu8ojdf
CSeq: 11937 INVITE
Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, PUBLISH, REFER, MESSAGE, OPTIONS
Proxy-Authorization: Digest username="55",realm="3CXPhoneSystem",nonce="414d535c01856e4e82:a55d184c20ca621b468e05363cef2f4f",uri="sip:[email protected]",response="d6df2f094eb565007f66f9dd9cce7d48",algorithm=MD5
Supported: 100rel, norefersub
User-Agent: iSip v3.1/iPhoneOS
Content-Length: 0

22:47:10.359 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
22:47:10.265 [CM500002]: Unidentified incoming call. Review INVITE and adjust source identification:
INVITE sip:[email protected] SIP/2.0
Via: SIP/2.0/UDP 10.1.1.11:1024;rport=1024;branch=z9hG4bKPjbfw-mt15c6qnqzzqr7s6p8ccugmyyfyy;received=63.29.231.217
Max-Forwards: 70
Contact: <sip:[email protected]:1024;transport=UDP>
To: <sip:[email protected]>
From: "EXT55"<sip:[email protected]>;tag=82zusxyx05dasbahojmllztqud4yzzje
Call-ID: bexfzayfbvkgnwmh.fklgzywhiu8ojdf
CSeq: 11936 INVITE
Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, PUBLISH, REFER, MESSAGE, OPTIONS
Supported: 100rel, norefersub
User-Agent: iSip v3.1/iPhoneOS
Content-Length: 0

22:47:10.265 [CM302001]: Authorization system can not identify source of: SipReq: INVITE [email protected] tid=Pjbfw-mt15c6qnqzzqr7s6p8ccugmyyfyy cseq=INVITE [email protected]:1024 / 11936 from(wire)
22:47:09.484 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:47:09.093 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:47:08.671 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
22:47:07.859 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:47:07.453 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:47:07.031 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
22:47:06.203 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:47:05.812 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:47:05.390 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
22:47:04.671 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:47:04.265 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:45:26.593 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:45:24.421 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:45:23.609 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
22:45:22.390 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:45:21.140 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:45:20.328 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
22:45:18.078 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:45:18.031 [CM503013]: Call(4): Incoming call rejected, caller is unknown; msg=SipReq: INVITE [email protected] tid=Pji3hknvevfgolyehwq42s4xpugrd.7get cseq=INVITE [email protected]:1024 / 5622 from(wire)
INVITE sip:[email protected] SIP/2.0
Max-Forwards: 70
To: <sip:[email protected]>
Call-ID: jlveis2yzr7lxrlqwdvzbmwdek-mrpq-
Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, PUBLISH, REFER, MESSAGE, OPTIONS
Supported: 100rel, norefersub
Content-Length: 0
22:45:17.796 [CM500002]: Unidentified incoming call. Review INVITE and adjust source identification:
Via: SIP/2.0/UDP 10.1.1.11:1024;rport=1024;branch=z9hG4bKPjbcll-r7duwazzjorjxmpmy0jhcyl4akj;received=63.29.231.217
Contact: <sip:[email protected]:1024;transport=UDP>
From: "EXT55"<sip:[email protected]>;tag=g1eq4jgaqwczk1uf25wvu0piao8s2nhy
CSeq: 5621 INVITE
Supported: 100rel, norefersub
Content-Length: 0
22:45:17.796 [CM302001]: Authorization system can not identify source of: SipReq: INVITE [email protected] tid=Pjbcll-r7duwazzjorjxmpmy0jhcyl4akj cseq=INVITE [email protected]:1024 / 5621 from(wire)
22:45:16.953 [CM504002]: Ext.55: a contact is unregistered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:45:16.140 [CM504002]: Ext.55: a contact is unregistered. Contact(s): []
22:45:14.000 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:45:13.000 Active calls counted toward license limit: []
22:45:12.468 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:45:11.765 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:1024;transport=UDP/55]
22:45:11.093 [CM504001]: Ext.55: new contact is registered. Contact(s): [sip:[email protected]:5060/55]
22:44:09.000 Active calls counted toward license limit: []
22:43:05.000 Active calls counted toward license limit: []
22:42:01.000 Active calls counted toward license limit: []

 

[leejor]

Do you have the remote extensions set to use STUN? Are the external sets registering to a fixed public IP of the 3CX end, or are you using a DynDNS service to point them to the PBX?

 

[raheel]

I am using Dyndmic DNS at the 3CX server end. Dyndmic DNS is good as I have other remote applications working just fine. Also I did not realise that there is somehting special I have to do for remote extensions in 3CX end. The GrandStream Phone I am using remotely has "stun.3cx.com" defined in Stun Server (see attachment).

 

[leejor]

Not too sure why Ext 55 is registering and un-registering so often, should be set for every 30 minutes or a bit less. I take it that your DynDNS is the sample.sip.com. Is the problem only with the iPhone? Using wiFi or mobile providers data plan?