User cannot call externally Forbidden 403

[Oleksii]

Hi!

We reinstalled the PBX from scratch on V20
We have 4 sip trunks to a local SIP provider.

Outgoing calls do not work now.
We have an Outbound Rule in which we remove the 9 prefix and send calls to trunks.
We get the following errors:
Call or Registration to 0500010101@(Ln.10000@441234567) has failed. sip:188.163.111.1:5060; lr replied: Forbidden (403)

Also I see an error:
Line limit check: Current # of calls for line Lc:10000(@441234567[<sip:[email protected]:5060/UDP>]) is 0; limit is 1

I've tried creating trunks from a template and by hand.
There are no outgoing calls.

Help me figure it out, is this a PBX configuration error or a problem with the provider?

How do I view the detailed log log?

 

[fxbastler]

How do I view the detailed log log?

Dashboard / Activity Logs / Settings / Medium or Verbose / OK and refresh from time to time

Help me figure it out, is this a PBX configuration error or a problem with the provider?

Can you connect to the provider and make calls using a regular softphone (e.g. phoner lite portable, language also available in english)? If yes, then it's probably a 3CX configuration problem.

 

[Oleksii]

Can you connect to the provider and make calls using a regular softphone (e.g. phoner lite portable, language also available in english)? If yes, then it's probably a 3CX configuration problem.

I tried..
This is a problem in the PBX configuration.
I don't understand what exactly.

 

[fxbastler]

maybe outgoing rules, check them (post a screenshot) and check the activity log after a call

 

[Oleksii]

Looks like I found a bug.
The PBX generates the CallerId as
"+"Country code""City code""City number""extension number"

The operator does not understand this at all.

Where to set the CallerId and specify that the PBX does not change it?

 

[fxbastler]

https://www.3cx.com/blog/docs/voip-provider-template/

 

[fxbastler]

"+"Country code""City code""City number""extension number"

The operator does not understand this at all.

That's not entirely wrong. What does the provider expect?

 

[Oleksii]

I used the template for both my country and GenericSip
Same mistake.
Should I make my own?

 

[Oleksii]

That's not entirely wrong. What does the provider expect?

I don't know yet
I asked a question, waiting for logs from him.
But from the same network, PhonerLite works without any questions at all.

 

[Oleksii]

10/09/2024 8:24:12.565 PM Lsip{1096/17.2/UAC[Terminated&OfferSent]} termination message:
InvTERM Recv 403/INVITE from 188.163.1.1:5060 tid=91a6e42b5f5cf261 Call-ID=hG7hIjmbSLd_TU2SZrXbNQ..:
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 172.1.1.1:5060;branch=z9hG4bK-524287-1---91a6e42b5f5cf261;received=85.223.1.1;rport=64923
To: <sip:[email protected]:5060>;tag=hjuf9qqg
From: "+380441112233127"<sip:[email protected]:5060>;tag=93efee5e
Call-ID: hG7hIjmbSLd_TU2SZrXbNQ..
CSeq: 1 INVITE
Warning: 399 03077.09081.A.005.401.228.0.8.02248.00000000.1075445762 "Invalid User"
Content-Length: 0

 

[fxbastler]

Then you could assume that the authentication number is what has to be used as the main trunk number - like PhonerLite does. That's just an idea. You can also check that with wireshark.

https://www.3cx.com/blog/voip-howto/sip-invite-header-fields/

 

[fxbastler]

Really +380... in the from field?
I just checked, yes, that could be the case, it just looks a bit strange to me.

 

[fxbastler]

As I just read somewhere else, it is possible that kyivstar gives its users an IP to register with. The FQDN voip.kyivstar.ua is probably resolved differently. What did you use in PhonerLite?

 

[Oleksii]

I have already asked Kyivstar about IP registration.
They did not give it.
The fact is that earlier on version 18 everything worked perfectly.
Then I updated it to 20 and everything also worked well.
But recently I had to change the FQDN and had to do everything from scratch.
Well, now I have discovered new bugs.

In PhonerLite, I use a phone number and password.

 

[Oleksii]

I FOUND!!!

This is how the integration with Office365 works ))
It updates users' contacts and adds an Outbound Caller ID there
Every night...

 

[fxbastler]

It updates users' contacts and adds an Outbound Caller ID there
Every night...

... and that user caller id will not work, right?

Glad you help yourself