I have a snom 821 that cannot receive calls. When I dial the phone from any other phone, I receive a message stating "Call forbidden by administrator." I can however call out on the snom just fine. This is the only phone that seems to be exhibiting this behavior. I have tried setting the phone up using manual configuration as here: http://www.3cx.com/sip-phones/snom.html I have also tried setting up provisioning as here: http://www.3cx.com/sip-phones/Snom-provisioning.html I have reset the phone to factory defaults. The phone had firmware version 8.4.31. I have tried upgrading it to 8.4.32, but still no joy. Looking at the server activity log shows the following: 13:15:13.520 [CM503008]: Call(55): Call is terminated 13:15:12.090 [CM504001]: Ext.8512: new contact is registered. Contact(s): [sip:firstname.lastname@example.org:5060/8512] 13:15:08.982 Session 3895 of leg C:55.1 is confirmed 13:15:08.581 [CM503007]: Call(55): Device joined: sip:EndCall@127.0.0.1:40600;rinstance=21dd99820fea3b50 13:15:08.575 [CM503007]: Call(55): Device joined: sip:email@example.com:5062 13:15:08.573 [MS210005] C:55.1:Answer provided. Connection(proxy mode):192.168.2.1:7322(7323) 13:15:08.570 [MS210001] C:55.3:Answer received. RTP connection[unsecure]: 127.0.0.1:40720(40721) 13:15:08.568 Remote SDP is set for legC:55.3 13:15:08.565 [CM503002]: Call(55): Alerting sip:EndCall@127.0.0.1:40600;rinstance=21dd99820fea3b50 13:15:08.423 [CM503025]: Call(55): Calling Unknown:Ext.EndCall@[Dev:sip:EndCall@127.0.0.1:40600;rinstance=21dd99820fea3b50] 13:15:08.421 [MS210004] C:55.3:Offer provided. Connection(proxy mode): 127.0.0.1:7326(7327) 13:15:08.363 [CM503016]: Call(55): Attempt to reach <sip:firstname.lastname@example.org> failed. Reason: Forbidden 13:15:08.358 [CM503003]: Call(55): Call to sip:email@example.com has failed; Cause: 403 Use Proxy; from IP:192.168.2.107:3072 13:15:08.310 [CM503025]: Call(55): Calling Ext:Ext.1107@[Dev:sip:firstname.lastname@example.org:3072] 13:15:08.308 [MS210006] C:55.2:Offer provided. Connection(by pass mode): 192.168.2.108:11798(11799) 13:15:08.269 [CM503004]: Call(55): Route 1: Ext:Ext.1107@[Dev:sip:email@example.com:3072] 13:15:08.268 [CM503010]: Making route(s) to <sip:firstname.lastname@example.org> 13:15:08.268 [MS210000] C:55.1:Offer received. RTP connection: 192.168.2.108:11798(11799) 13:15:08.267 Remote SDP is set for legC:55.1 13:15:08.267 [CM505001]: Ext.1108: Device info: Device Identified: [Man: Yealink;Mod: T22;Rev: General] Capabilities:[reinvite, no-replaces, unable-no-sdp, no-recvonly] UserAgent: [Yealink SIP-T22P 18.104.22.168] PBX contact: [sip:email@example.com:5060] 13:15:08.258 [CM503001]: Call(55): Incoming call from Ext.1108 to <sip:firstname.lastname@example.org> 13:15:08.248 [CM500002]: Info on incoming INVITE: INVITE sip:email@example.com SIP/2.0 Via: SIP/2.0/UDP 192.168.2.108:5062;branch=z9hG4bK216931468 Max-Forwards: 70 Contact: <sip:firstname.lastname@example.org:5062> To: <sip:email@example.com> From: "T22P"<sip:firstname.lastname@example.org>;tag=1250742924 Call-ID: email@example.com CSeq: 2 INVITE Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE Proxy-Authorization: Digest username="1108",realm="3CXPhoneSystem",nonce="414d535c0468659b43:17dfb5f05c6a05e762a11384cb6ccfc5",uri="sip:firstname.lastname@example.org",response="8edaee0754a5e2c7295e62b20ff31499",algorithm=MD5 Supported: replaces User-Agent: Yealink SIP-T22P 22.214.171.124 Allow-Events: talk, hold, conference, refer, check-sync Content-Length: 0 I'm just not sure where else to go with this in order to get the phone to accept incoming calls.