forbidden - wrong password; endless problem

Hi,
I am with my Linux box behind a router ( netgear ). If I configure a softphone ( kphone ) for direkt access to voipuser ( through a router !), I have no problems. If, instead, I configure kphone to go through asterisk in an internal network, asterisk beeing also on this side of the router, I have no chances to get communicated, receiving always the well known "Forbidden - wrong password on authentication for INVITE to ...."
I went already through the numerous contributions to the Forbidden-issue, and I did exactly as advised, no way. On the other hand, I have no problems using Skype, and also not using a sypgate-account with asterisk. Any advices, please ? I am now trying and error for more than 4 weeks, it is a little bit frustrating
Thanks in advance,
Edgar
Weinheim-Germany

Hi Edgar welcome to voipuser.

Its impossible to say whats wrong with out seeing your config files. Please post your sip.conf (passwords edited) and we can the see whats going on

Ian

Hi Ian,
sorry, I was evidently too tired yesterday evening. Please find here my sip.conf data:

; SIP Configuration example for Asterisk
;
[general]
country=de
context=from-sip ; Default context for incoming calls
disallow=all
allow=ulaw
bindport=5060 ; UDP Port to bind to (SIP standard port is 5060)
bindaddr=0.0.0.0 ; IP address to bind to (0.0.0.0 binds to all)

localnet=192.168.0.0/16
;
; Definitions of locally connected SIP phones
[phone1] ; PC edgar2
type=friend
context=intern
username=phone1
defaultip=192.168.1.3
secret=Bogota
host=dynamic
qualify=100
nat=never
canreinvite=no
dtmfmode=info
call-limit=1
disallow=all
allow=gsm
allow=alaw

[phone2] ; PC beatriz
type=friend
context=intern
username=phone2
defaultip=192.168.1.2
secret=secret1
host=dynamic
qualify=100
nat=never
canreinvite=no
dtmfmode=info
call-limit=1
disallow=all
allow=gsm
allow=alaw

[phone3] ; PC portable
type=friend
context=intern
username=phone3
defaultip=192.168.1.4
secret=secret1
host=dynamic
qualify=100
nat=never
canreinvite=no
dtmfmode=info
call-limit=1
disallow=all
allow=gsm
allow=alaw
;
register => 1991215:secret2@sipgate-1/1991215
register => Edgar_Alwers:secret2@voipuser.org-1/Edgar_Alwers
register => edgarportable:secret3@voipuser.org-2/448449333759
;
[sipgate-1]
type=peer
context=sipgate
insecure=very
callerid=1991215@sipgate.de
username=1991215
fromuser=1991215
fromdomain=sipgate.de
host=sipgate.de
secret=secret2
auth=1991215:secret2@sipgate.de
qualify=1000
call-limit=5
canreinvite=no
nat=yes
dtmfmode=info
;
[voipuser.org-1]
type=peer
context=voipuser
insecure=very
callerid=Edgar_Alwers@voipuser.org
username=Edgar_Alwers
fromuser=Edgar_Alwers
host=voipuser.org
secret=secret3
auth=Edgar_Alwers:secret3@voipuser.org
qualify=1000
call-limit=5
canreinvite=no
nat=yes
dtmfmode=info
;
[voipuser.org-2]
type=friend
context=voipuser
insecure=very
;callerid=edgarportable@voipuser.org
username=edgarportable
fromuser=edgarportable
fromdomain=83.143.18.16
host=83.143.18.16
secret=secret4
;auth=edgarportable:secret4@voipuser.org
qualify=1000
call-limit=5
canreinvite=no
nat=route
dtmfmode=info

I am working under linuxfromscratch version 6.1, kernel 2.6.15, everything selfcompiled. As I said, going with kphone direct to voipuser.org works, going through asterisk delivers the well known forbidden - wrong password message.
I mean, if the problem were the router, the direct communication should also not work. So I presume, we have a asterisk problem here. OK ?
Any help will be very much appreciated,
Edgar

Hi.

Ok

set the localnet=192.168.0.0/255.255.0.0

also set an externip=xxx.xxx.xxx.xxx what ever the external interface is.

then the 3 register lnes sould be in the general section.
also remove the auth= lines
Thats few to be going on with, The sticky at the top is also very good.
here is a working example



Ian

Code:

[voipuser] type=peer username=username secret=secret host=83.143.18.16 fromuser=usenane fromdomain=sip.voipuser.org nat=yes canreinvite=no insecure=very qualify=yes allow=all

Hi Ian,
thank you very much for your hints. After a lot of try and error, I managed it to get registered. For the records:
sip.conf

[general]
register =>Edgar_Alwers:secret1@voipuser.org-1/448449333670
register => edgarportable:secret2@voipuser.org-2/448449333759

[voipuser.org-1]
type=peer
context=voipuser
insecure=very
;callerid=Edgar_Alwers@voipuser.org
username=Edgar_Alwers
fromuser=Edgar_Alwers
fromdomain=83.143.18.16
host=83.143.18.16
secret=secret1
qualify=1000
call-limit=5
canreinvite=no
nat=yes
dtmfmode=info
;
[voipuser.org-2]
.....
The registration is OK.
withouth stressing a new threat, two simple questions in addition:
1. How can I manage it to communicate from one phone to the second one through internet ?
2. How am I supposed to dial for the sample service 0844 986 3246 from Germany ? dialing this number leads to an "don't find"
Thank you very much again,
Edgar

Hi,
since my last contribution - 16th of june - I did not get any registration anymore !
I allways get a notice "unreachable". Is the net down ? I did not change anything in my sip.conf that functioned that day. Is a little frustating ! sipgate runs smoothly.
Regards,
Edgar