What changes happened before this started happening?
Check the logs in Diagnostics/System Audit around the time it started - you mind find a clue there.
Can you do a stare and compare between a failing call and one that worked prior to yesterday?
Confirm the ITSP is sending the call to you via 5080. I don't see that in this capture.
Try a trace with TCPDUMP - from CLI - tcpdump -w filename.pcap
Relayed error means they are coming from an address that isn't trusted. Test thisbby creating unmanaged gateways with those same ip addresses and try again.
It's likely an upstream itsp routing change caused this.
hey guys,this problem started happening yesterday and I have no idea what the problem is or how to fix it atm.so I have a SIP trunk with a bunch of DIDs. Some are assigned to the auto-attendant via the dial plan some are assigned to the users in the alias field.Since yesterday morning, all the users DIDs stopped receiving calls. Only the DIDs specified in the "Attendant Aliases" in the auto-attendant dial plan work. If I move a DID from the user to the AA then it works.I did some initial debugging between SIPx and the ITSP and I am seeing 403s being sent out something like this:
IP 192.168.11.2.5080 > 216.115.69.144.5060: UDP, length 715E.....@.@.NX.....sE.........SIP/2.0 403 Forbidden
To: <sip:+1...@fl.gg>From: <sip:+1...@fl.gg>;tag=gK027baaaa
Via: SIP/2.0/UDP 216.115.69.144;branch=z9hG4bK70c8.f6a7bdc3f495e8e45cd9ad2983679862.0Via: SIP/2.0/UDP 216.115.69.131;branch=z9hG4bK70c8.d6a26b8344658a67b1b4449efde3362a.2Via: SIP/2.0/UDP 216.115.69.132;branch=z9hG4bK70c8.8e6292577a23a9af116295fa222424a5.0Via: SIP/2.0/UDP 216.221.154.11:5060;branch=z9hG4bK02B2cd42aba6c32a584Call-ID: 127525268...@216.221.154.11CSeq: 18764 INVITEServer: sipXecs/xxxx.yyyy sipXecs/sipxbridge (Linux)Supported: replacesContact: <sip:~~id~bri...@61.11.20.207:5080;transport=udp>Reason: ~~id~bridge;cause=213;text="Relayed Error Response"Content-Length: 0
--in the sipxbridge.log I do see:
"2016-01-30T00:30:17.535000Z":35547:OUTGOING:INFO:sipx.yvoice.local:Thread-1414:00000000:sipxbridge:"Sent SIP Message :\n----Remote Host:216.115.69.144---- Port: 5060----\nSIP/2.0 403 Forbidden\r\nTo: <sip:+1...@fl.gg>\r\nFrom: <sip:+1...@fl.gg>;tag=gK020ab33e\r\nVia: SIP/2.0/UDP 216.115.69.144;branch=z9hG4bKe542.ecd05c6069a2a85d181db1f3bbaa9266.0\r\nVia: SIP/2.0/UDP 216.115.69.131;branch=z9hG4bKe542.411d02bf7bbc3c931cc6dd194cdb6f68.2\r\nVia: SIP/2.0/UDP 216.115.69.132;branch=z9hG4bKe542.0388de0a5fb58a62397e62f41eb6d5d2.0\r\nVia: SIP/2.0/UDP 216.221.154.11:5060;branch=z9hG4bK02B3aa06914c625f231\r\nCall-ID: 1275260098...@216.221.154.11\r\nCSeq: 11542 INVITE\r\nServer: sipXecs/xxxx.yyyy sipXecs/sipxbridge (Linux)\r\nSupported: replaces\r\nContact: <sip:~~id~bri...@61.11.20.207:5080;transport=udp>\r\nReason: ~~id~bridge;cause=213;text=\"Relayed Error Response\"\r\nContent-Length: 0\r\n\r\n--------------------END--------------------\n"---before that:"2016-01-30T00:29:30.866000Z":34911:OUTGOING:INFO:sipx.yvoice.local:Thread-1405:00000000:sipxbridge:"Sent SIP Message :\n----Remote Host:216.115.69.144---- Port: 5060----\nSIP/2.0 482 Loop detected\r\nTo: <sip:+1...@fl.gg>\r\nFrom: <sip:+1...@fl.gg>;tag=gK0465616a\r\nVia: SIP/2.0/UDP 216.115.69.144;branch=z9hG4bK758c.e44c9fe6f2ece0867c93ab974c13b12c.0\r\nVia: SIP/2.0/UDP 216.115.69.131;branch=z9hG4bK758c.d5746347e3dd977575d009dbc1107958.2\r\nVia: SIP/2.0/UDP 216.115.69.132;branch=z9hG4bK758c.611fff38c0541995670de19782b1850f.0\r\nVia: SIP/2.0/UDP 216.221.154.11:5060;branch=z9hG4bK04B7d287a29ed67a298\r\nCall-ID: 127534889...@216.221.154.11\r\nCSeq: 1770 INVITE\r\nServer: sipXecs/xxxx.yyyy sipXecs/sipxbridge (Linux)\r\nContent-Length: 0\r\n\r\n--------------------END--------------------\n"
What type of Gateway is that? Is it PRI? Can you try putting the alias in as 10 digit and 4 digit to see if it makes a difference.
You know the call is getting to the system, since it is being answered by your AA. When you move it to the user alias, do you get an error message, or does it go to voicemail?
Have you tried a tcpdump at the interface to see what the to and from address looks like on the call?
Todd R. Hodgen
President / Founder
Sound IP Telecom
206-432-4344 - Direct
206-390-4689 - Cell
![]()
Your Puget Sound Telcom Partner
Do you Like Snow, Rain, Sleet, Hail, Thunder, Lightning?
If you do, then you will love the Cloud!
We appreciate your business referrals!
A Division of Misiu Systems LLC
--
You received this message because you are subscribed to the Google Groups "sipxcom-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
sipxcom-user...@googlegroups.com.
To post to this group, send email to
sipxco...@googlegroups.com.
Visit this group at https://groups.google.com/group/sipxcom-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/sipxcom-users/cd22e029-592f-4d3c-a00c-bd185c6dbe33%40googlegroups.com.
I almost always recommend VM for the snapshot reason alone. Plus in general people take their VM infrastructure pretty seriously. Proper storage, host to host migration, etc.
We had a customer last week have both of their redundant hardware SBC's keel over. Hardware sux.
Mike
--
You received this message because you are subscribed to the Google Groups "sipxcom-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to sipxcom-user...@googlegroups.com.
To post to this group, send email to sipxco...@googlegroups.com.
Visit this group at https://groups.google.com/group/sipxcom-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/sipxcom-users/29c66be5-e7db-4f71-923d-83870512be26%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
300 Brickstone Square
Suite 104
Andover, MA. 01810