[asterisk-users] help with sip 401 unauthorized

[Tarek Sawah]

i faced a similar situation with my ISP .. they block INBOUND UDP port 5060  which means if i try to register.. the server would receive my registration message.. but when it sends the acknowledgement .. the ISP Firewall rejects the message so the server responds with Unauthorized.. i simply changed the port on the server to 5070 and set my dialer to listen to port 5070 as well (for inbound messages) and this solved my issue.that was my situation.. so your problem is in the firewall settings.. just try to look at it and see what is missing.. and by the way when you send all of your IP sections XXX no one will assist you as no one will know who is talking to whom.. just like if you go to a doctor with a prostate problem.. you can't tell him that you won't remove your clothes off ;)regards

-- Tarek Sawah

Integrated Digital Systems

CCNA, MCSE, RHCE, VoIP USA: +1 386 492 9993  



> Date: Wed, 23 Jun 2010 08:44:21 -0400
> From: geisj at pagestation.com
> To: asterisk-users at lists.digium.com
> Subject: [asterisk-users] help with sip 401 unauthorized
> 
> I am getting a SIP 401 unauthorized message.
> 
> My public IP or PIP is being pre-routed with iptables to goto an 
> internal IP or IIP
> All the polycom phones in the office point to the IIP. they work fine.
> I have 2 external phones that are registering to the PIP. I see the 
> register attempt
> as I am getting the 401 unauthorized message.  For the 2 external phones 
> both have nat=1 enabled.
> 
> remote phone (192.X.X.X) ----> GW ----> internet ----> PIP (prerouted) 
> (74.X.X.X) ----> internal server (192.X.X.X)
> 
> This used to work before I moved the server inside the firewall. What 
> special setting do I need to
> enable to get this working.
> 
> Thanks,
> 
> Jerry
> 
> <--- Transmitting (NAT) to X.X.X.X:1024 --->
> SIP/2.0 401 Unauthorized
> Via: SIP/2.0/UDP X.X.X.X:5060;branch=z9hG4bK6ea01bc7;received=X.X.X.X
> From: <sip:xxx at X.X.X.X.;user=phone>
> To: <sip:xxx at X.X.X.X;user=phone>;tag=as21ab1732
> Call-ID: 000ff78d-ebb20007-22675f66-5da7e6b7 at X.X.X.X
> CSeq: 1196 REGISTER
> User-Agent: Asterisk PBX
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO
> Supported: replaces
> WWW-Authenticate: Digest algorithm=MD5, realm="asterisk", nonce="1c6a6002"
> Content-Length: 0
> 
> [XXX]
> type=friend
> username=XXX
> secret=
> dtmfmode=RFC2833
> host=dynamic
> context=external
> rtptimeout=60
> qualify=no
> canreinvite=yes
> nat=yes
> disallow=all
> allow=ulaw
> allow=alaw
> allow=gsm
> 
> 
> 
> -- 
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>                http://www.asterisk.org/hello
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
 		 	   		  
_________________________________________________________________
The New Busy is not the too busy. Combine all your e-mail accounts with Hotmail.
http://www.windowslive.com/campaign/thenewbusy?tile=multiaccount&ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_4
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20100623/31ef076a/attachment.htm