[Asterisk-Users] Problem SIP Register

[Damian Minkov]

I have * box on machine with external ip address and internal one
I'm tring to register to it from to machines - one from innternet ( 
everything is ok - in sip.conf nat=yes)\
and the other one is in the internal network (in sip.conf - nat=no ) and 
it say 403 Forbidden?
Any Ideas ? here are the logs and configs

 From the external SIP Client whic registers.
**********************************************************************
Sip read:
REGISTER sip:194.12.230.167 SIP/2.0
Via: SIP/2.0/UDP 
213.240.242.42:5060;rport;branch=z9hG4bKBDF5CC31592C4472A643BDD8C314BD09
From: damencho <sip:damencho at 194.12.230.167>;tag=4066431665
To: damencho <sip:damencho at 194.12.230.167>
Contact: "damencho" <sip:damencho at 213.240.242.42:5060>
Call-ID: 7FEA34DBA7E1495F94AEC70F236290EC at 194.12.230.167
CSeq: 58756 REGISTER
Expires: 1800
Max-Forwards: 70
User-Agent: X-Lite release 1103m
Content-Length: 0


11 headers, 0 lines
Using latest request as basis request
Sending to 213.240.242.42 : 5060 (non-NAT)
Transmitting (NAT):
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 
213.240.242.42:5060;rport;branch=z9hG4bKBDF5CC31592C4472A643BDD8C314BD09;received=213.240.242.42
From: damencho <sip:damencho at 194.12.230.167>;tag=4066431665
To: damencho <sip:damencho at 194.12.230.167>;tag=as7b1386bf
Call-ID: 7FEA34DBA7E1495F94AEC70F236290EC at 194.12.230.167
CSeq: 58756 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:damencho at 194.12.230.167>
Content-Length: 0


  to 213.240.242.42:5060
     -- Registered SIP 'damencho' at 213.240.242.42 port 5060 expires 1800
     -- Saved useragent "X-Lite release 1103m" for peer damencho
Transmitting (NAT):
SIP/2.0 200 OK
Via: SIP/2.0/UDP 
213.240.242.42:5060;rport;branch=z9hG4bKBDF5CC31592C4472A643BDD8C314BD09;received=213.240.242.42
From: damencho <sip:damencho at 194.12.230.167>;tag=4066431665
To: damencho <sip:damencho at 194.12.230.167>;tag=as7b1386bf
Call-ID: 7FEA34DBA7E1495F94AEC70F236290EC at 194.12.230.167
CSeq: 58756 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Expires: 1800
Contact: <sip:damencho at 194.12.230.167>;expires=1800
Date: Wed, 07 Jul 2004 13:23:17 GMT
Content-Length: 0


  to 213.240.242.42:5060
Scheduling destruction of call 
'7FEA34DBA7E1495F94AEC70F236290EC at 194.12.230.167' in 15000 ms
**********************************************************************


 From the Client of internal netwrk which won't register

Sip read:
REGISTER sip:10.1.1.2:5060;transport=udp SIP/2.0
Call-ID: f5d566e062ae45182e874e07346c225e at 10.1.1.11
CSeq: 1 REGISTER
From: "damian" <sip:damian at 10.1.1.2:5060;transport=udp>;tag=9594508
To: "damian" <sip:damian at 10.1.1.2:5060;transport=udp>
Via: SIP/2.0/UDP 
10.1.1.11:5060;branch=z9hG4bKa8af7fe34048c635482c15697a6c2ab5
Max-Forwards: 70
Expires: 3600
Contact: "damian" <sip:10.1.1.11:5060;transport=udp>
Content-Length: 0


10 headers, 0 lines
Using latest request as basis request
Sending to 10.1.1.11 : 5060 (NAT)
Transmitting (NAT):
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 
10.1.1.11:5060;branch=z9hG4bKa8af7fe34048c635482c15697a6c2ab5;received=10.1.1.11
From: "damian" <sip:damian at 10.1.1.2:5060;transport=udp>;tag=9594508
To: "damian" <sip:damian at 10.1.1.2:5060;transport=udp>;tag=as1b3e6b06
Call-ID: f5d566e062ae45182e874e07346c225e at 10.1.1.11
CSeq: 1 REGISTER
User-Agent: Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:damian at 10.1.1.2>
Content-Length: 0


*******************************************************

And SIP.conf

[general]
context=sip-internal
language=bg
port=5060
bindaddr=0.0.0.0

[not ok phone]
type=friend
username=user1
callerid="User1"
host=dynamic
nat=no

[ok phone]
type=friend
username=user2
callerid="User2"
host=dynamic
nat=yes