Discarded message, because of blocked User-Agent: BadUA Recv Req REGISTER from xxx:5060 tid=13940601 Call-ID=236159410:

[NoFate]

Guys, what does the message mean below?
i am new, just setup 4 SIP extensions, using google cloud as hosting , all 4 extensions i have turned off this option :
Disallow use of extension outside the LAN (Remote extensions using Direct SIP or STUN will be blocked)

I have 4 SIP clients i want to register, 3 of them are working fine, 1 always gives an error on registration... what can be the cause?
the username and password i filled in , are from the "extensions / phone provisioning " tab, they are correct

i also looked, no IP's are in blacklist

where are those blocked user agents?

thnx in advance


01/22/2021 12:10:07 AM - Discarded message, because of blocked User-Agent: BadUA Recv Req REGISTER from xxx:5060 tid=240562287 Call-ID=236159410: REGISTER sip:[email protected]3cx.be:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.0.71:5060;rport=5060;branch=z9hG4bK240562287;received=84.195.119.95
Max-Forwards: 70
Contact: <sip:[email protected]:5060;line=da9443014bd6bc3>
To: DS-KH9310 <sip:[email protected]3cx.be>
From: DS-KH9310 <sip:[email protected]3cx.be>;tag=979587453
Call-ID: 236159410 CSeq: 3 REGISTER
Expires: 1800
Content-Type: text/xml
User-Agent: eXosip/3.6.0 Content-Length: 133

 

[YiannisH_3CX]

Hi @NoFate

Your registration is indeed blocked by the PBX because of the user agent of your SIP client. Unfortunately the list of known malicious user agents is being automatically downloaded by the PBX so even if you remove it it will come back.
I would recommend using the 3CX client which is designed to work with the system.

 

[NoFate]

hi @YiannisH_3CX , thnx for feedback
but where are those malicious user agents stored? how can i remove them? cant seem to find it ...

also, i am trying to register an Hikvision Intercom, the outdoor system registers fine, the indoor not ... want to play/change setting with auth id vs userid ... but i need to remove the blocked first

so i cant use the 3CX client in my case

 

[YiannisH_3CX]

Like I mentioned if you did somehow removed the user agent from the list of blocked user agents the PBX will re-download the list and replace the changes. This is a security feature of the PBX so it can update the list and download new user agents. Every time this happens the whole list is rewritten.
As for the Hikvision intercom we have not tested it so we cannot help you configure or in fact guarantee that it works with 3CX.
The devices that we support and we know are working can be found here: https://www.3cx.com/docs/

 

[NoFate]

huh, wtf, i setup first 3cx on 3cx public cloud, then moved my instance to my google private cloud, i was testing yesterday with 4 sip clients
now i login, and with the same hostname, my private cloud is gone, and is redirecting me to the 3cx cloud version? all my config is gone?

if i look here : https://customer.3cx.com/prm/subscriptions.aspx , i still see its using the "private cloud"

 

[NoFate]

no , i didnt remove the block user agents list , where can i see that list? then i know this is actually causing it ...

 

[NoFate]

verry strange, if i login on portal : i see this :

3CX Standard
Free 8 7VB7-GB5D-xxxx 21 Jan 2022 Private Cloud
[Switch to Hosted]

if i actually login in to that portal , i see this =>>

Information
xxxx.my3cx.beFQDN
206.189.7.148 Static

this is not the google private cloud,

i noticed first, because i had to use my old admin password , no idea why this is happening

 

[YiannisH_3CX]

huh, wtf, i setup first 3cx on 3cx public cloud, then moved my instance to my google private cloud, i was testing yesterday with 4 sip clients
now i login, and with the same hostname, my private cloud is gone, and is redirecting me to the 3cx cloud version? all my config is gone?

How did you move your instance? If the 3CX cloud instance was not deleted then you need to follow these instructions to have it remove: https://www.3cx.com/community/threads/delete-instance-hosted-by-3cx.75573/
If both are online then the DNS will move back and forth between the 2.

 

[NoFate]

ahh, thats why, ok, i didnt indeed remove the old instance

ok, thnx ... now back to that blocked user agents, can i see it somewhere in the system ?

 

[YiannisH_3CX]

I will send you a p.m.