<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="Open WebMail 2.20 20031014" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
<font size="2">Okay... start small. You can work through this.
<br />
<br />First things first:
<br />
<br />Comment out the proxy_authorize portion of the config. Restart ser, and try the call again. See if it works.
<br />If it does, uncomment it, but right BEFORE the proxy_authorize, put the check for the trusted table and then a log message to check the logs...
<br />
<br />something like:
<br />
<br />if(!allow_trusted())
<br />{
<br /> log(1, "ALLOW TRUSTED CHECK FAILED -- HOST NOT IN TRUSTED TABLE");
<br />
<br /> if(!proxy_authorize... etc, etc)
<br />
<br />};
<br />
<br />Restart ser, and try the call again. If that message pops up, then there's something wrong with the trusted host check and you can double check the data you entered into the database to make sure it's all actually correct.
<br />
<br />
<br />Your trusted table should look something like:
<br />
<br /><span style="font-family: courier new,courier,monospace;">+----------------+-------+--------------+</span>
<br style="font-family: courier new,courier,monospace;" /><span style="font-family: courier new,courier,monospace;">| src_ip | proto | from_pattern |</span>
<br style="font-family: courier new,courier,monospace;" /><span style="font-family: courier new,courier,monospace;">+----------------+-------+--------------+</span>
<br style="font-family: courier new,courier,monospace;" /><span style="font-family: courier new,courier,monospace;">| 127.0.0.1 | any | sip:.*$ |</span>
<br style="font-family: courier new,courier,monospace;" /><span style="font-family: courier new,courier,monospace;">| 81.21.38.13 | any | sip:.*$ |</span>
<br style="font-family: courier new,courier,monospace;" /><span style="font-family: courier new,courier,monospace;"></span><span style="font-family: courier new,courier,monospace;"></span><span style="font-family: courier new,courier,monospace;">+----------------+-------+--------------+</span>
<br />
<br /></font><font size="2"><b>
<br />
<br />
<br />
<br />On Fri, 15 Sep 2006 12:36:04 +0300, ravi reddy wrote</b>
<br />> this is the ngrep -record when i tried to make a incoming call from PSTN
<br />>
<br />>
U <a href="http://81.21.38.13:57812"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.38.13:57812</a> -> <a href="http://81.21.33.35:5060"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.33.35:5060</a>
<br />>
INVITE sip:22030980@81.21.33.35:5060 SIP/2.0.
<br />>
Via: SIP/2.0/UDP <a href="http://81.21.38.13:5060"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.38.13:5060</a>.
<br />>
From: <<a href="mailto:sip:22498045@81.21.38.13">sip:22498045@81.21.38.13</a>>;tag=78415468-CC3.
<br />>
To: <<a href="mailto:sip:22030980@81.21.33.35">sip:22030980@81.21.33.35</a>>.
<br />>
Date: Fri, 15 Sep 2006 09:15:20 GMT.
<br />>
Call-ID: <a href="mailto:8BB4320C-43D111DB-9F91880F-F0154510@81.21.38.13">8BB4320C-43D111DB-9F91880F-F0154510@81.21.38.13</a>.
<br />>
Supported: timer,100rel.
<br />>
Min-SE: 1800.
<br />>
Cisco-Guid: 3763255713-1164120539-2201223171-3126568985.
<br />>
User-Agent: Cisco-SIPGateway/IOS-12.x.
<br />>
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO.
<br />>
CSeq: 101 INVITE.
<br />>
Max-Forwards: 6.
<br />>
Remote-Party-ID: <<a href="mailto:sip:22498045@81.21.38.13">sip:22498045@81.21.38.13</a>>;party=calling;screen=yes;privacy=off.
<br />>
Timestamp: 1158311720.
<br />>
Contact: <sip:22498045@81.21.38.13:5060>.
<br />>
Expires: 180.
<br />>
Allow-Events: telephone-event.
<br />>
Content-Type: application/sdp.
<br />>
Content-Length: 274.
<br />>
.
<br />>
v=0.
<br />>
o=CiscoSystemsSIP-GW-UserAgent 9485 5123 IN IP4 <a href="http://81.21.38.13"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.38.13</a>.
<br />>
s=SIP Call.
<br />>
c=IN IP4 <a href="http://81.21.38.13"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.38.13</a>.
<br />>
t=0 0.
<br />>
m=audio 17124 RTP/AVP 18 0 8 100.
<br />>
a=rtpmap:18 G729/8000.
<br />>
a=fmtp:18 annexb=no.
<br />>
a=rtpmap:0 PCMU/8000.
<br />>
a=rtpmap:8 PCMA/8000.
<br />>
a=rtpmap:100 X-NSE/8000.
<br />>
a=fmtp:100 192-194.
<br />>
<br />>
#
<br />>
U <a href="http://81.21.33.35:5060"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.33.35:5060</a> -> <a href="http://81.21.38.13:5060"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.38.13:5060</a>
<br />>
SIP/2.0 407 Proxy Authentication Required.
<br />>
Via: SIP/2.0/UDP <a href="http://81.21.38.13:5060"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.38.13:5060</a>.
<br />>
From: <<a href="mailto:sip:22498045@81.21.38.13">sip:22498045@81.21.38.13</a>>;tag=78415468-CC3.
<br />>
To: <<a href="mailto:sip:22030980@81.21.33.35">sip:22030980@81.21.33.35</a>>;tag=74961b5b71b6ddce908b9155b956083f.58b5.
<br />>
Call-ID: <a href="mailto:8BB4320C-43D111DB-9F91880F-F0154510@81.21.38.13">8BB4320C-43D111DB-9F91880F-F0154510@81.21.38.13</a>.
<br />>
CSeq: 101 INVITE.
<br />>
Proxy-Authenticate: Digest realm="<a href="http://81.21.33.35"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.33.35</a>", nonce="450a6fac7fc0d4000fd13a85f7f6c55323ed6a5c".
<br />>
Content-Length: 0.
<br />>
Warning: 392 <a href="http://81.21.33.35:5060"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.33.35:5060</a> "Noisy feedback tells: pid=24505
req_src_ip=<a href="http://81.21.38.13"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.38.13</a> req_src_port=57812
in_uri=sip:22030980@81.21.33.35:5060
out_uri=sip:22030980@81.21.33.35:5060 via_cnt==1".
<br />>
.
<br />>
<br />>
#
<br />>
U <a href="http://81.21.38.13:57812"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.38.13:57812</a> -> <a href="http://81.21.33.35:5060"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.33.35:5060</a>
<br />>
ACK sip:22030980@81.21.33.35:5060 SIP/2.0.
<br />>
Via: SIP/2.0/UDP <a href="http://81.21.38.13:5060"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.38.13:5060</a>.
<br />>
From: <<a href="mailto:sip:22498045@81.21.38.13">sip:22498045@81.21.38.13</a>>;tag=78415468-CC3.
<br />>
To: <<a href="mailto:sip:22030980@81.21.33.35">sip:22030980@81.21.33.35</a>>;tag=74961b5b71b6ddce908b9155b956083f.58b5.
<br />>
Date: Fri, 15 Sep 2006 09:15:20 GMT.
<br />>
Call-ID: <a href="mailto:8BB4320C-43D111DB-9F91880F-F0154510@81.21.38.13">8BB4320C-43D111DB-9F91880F-F0154510@81.21.38.13</a>.
<br />>
Max-Forwards: 6.
<br />>
Content-Length: 0.
<br />>
CSeq: 101 ACK.
<br />>
.
<br />>
<br />>
#
<br />>
U <a href="http://81.21.38.13:51826"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.38.13:51826</a> -> <a href="http://81.21.33.35:5060"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.33.35:5060</a>
<br />>
INVITE sip:22030980@81.21.33.35:5060 SIP/2.0.
<br />>
Via: SIP/2.0/UDP <a href="http://81.21.38.13:5060"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 81.21.38.13:5060</a>.
<br />>
From: <<a href="mailto:sip:22498045@81.21.38.13">sip:22498045@81.21.38.13</a>>;tag=78415970-1FEC.
<br />>
To: <<a href="mailto:sip:22030980@81.21.33.35">sip:22030980@81.21.33.35</a>>.
<br />>
Date: Fri, 15 Sep 2006 09:15:22 GMT.
<br />>
Call-ID: <a href="mailto:8C78BCF5-43D111DB-9F95880F-F0154510@81.21.38.13">8C78BCF5-43D111DB-9F95880F-F0154510@81.21.38.13</a>.
<br />>
Supported: timer,100rel.
<br />>
Min-SE: 1800.
<br />>
Cisco-Guid: 3776566429-1164120539-2202206211-3126568985.
<br />>
User-Agent: Cisco-SIPGateway/IOS-12.x.
<br />>
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO.
<br />>
CSeq: 101 INVITE.
<br />>
Max-Forwards: 6.
<br />>
Remote-Party-ID: <<a href="mailto:sip:22498045@81.21.38.13">sip:22498045@81.21.38.13</a>>;party=calling;screen=yes;privacy=off.
<br />>
Timestamp: 1158311722.
<br />>
Contact: <sip:22498045@81.21.38.13:5060>.
<br />>
Expires: 180.
<br />>
Allow-Events: telephone-event.
<br />>
Content-Type: application/sdp.
<br />>
Content-Length: 274.
<br />>
.
<br />>
<br />>
And these messages are repeating until the requested time out;-)
<br />>
<br />>
Whats wrong here :-
<br />>
<br />>
Hope this information can help me
<br />>
<br />>
Thanks,
<br />>
Ravi.
<br />
<br />
<br />
</font>
</BODY>
</HTML>