Author |
Message |
sudhish Brekeke Junior Member
Joined: 06 Feb 2012 Posts: 5
|
Posted: Mon Feb 06, 2012 10:03 pm Post subject: ICMP message destination unreachable (Host administratively) |
|
|
1. Brekeke Product Name and version: 3.0.2.1/325
2. Java version: 1.6.0_18
3. OS type and the version: Linux 2.6.33.3-85.fc13.i686.PAE i686
4. UA (phone), gateway or other hardware/software involved: zoiper sip phone installed on windows xp.
5. Select your network pattern from http://www.brekeke-sip.com/bbs/network/networkpatterns.html : pattern 1
6. Your problem: When zoiper sends Request: REGISTER/SUBSCRIBE
i get a ICMP message destination unreachable (Host administratively prohibited), but the same zoiper has no problem registering with ondo sip server version-1.2.7.4/101.
Can any one please help me with a solution??
Regards,
Sudhish |
|
Back to top |
|
Tata Brekeke Master Guru
Joined: 27 Jan 2008 Posts: 223
|
Posted: Tue Feb 07, 2012 1:30 am Post subject: |
|
|
Are you sure the SIP server is running?
If you try Brekeke SIP server 2.4.x , does the same problem happen? |
|
Back to top |
|
sudhish Brekeke Junior Member
Joined: 06 Feb 2012 Posts: 5
|
Posted: Tue Feb 07, 2012 1:43 am Post subject: |
|
|
Yes, the same problem occurs with version: 2.4.xx, but not with the older version(1.2.7.4/101) as i had mentioned earlier. |
|
Back to top |
|
Tata Brekeke Master Guru
Joined: 27 Jan 2008 Posts: 223
|
Posted: Tue Feb 07, 2012 10:09 am Post subject: |
|
|
Did you push the [Start] button ?
Can you see the correct interface IP address in the [Status] page?
If you use another SIP client such as Xlite, does the same problem happen? |
|
Back to top |
|
hope Brekeke Master Guru
Joined: 15 Jan 2008 Posts: 862
|
Posted: Tue Feb 07, 2012 10:42 am Post subject: |
|
|
is there firewall running on the server machine? |
|
Back to top |
|
sudhish Brekeke Junior Member
Joined: 06 Feb 2012 Posts: 5
|
Posted: Tue Feb 07, 2012 9:35 pm Post subject: |
|
|
Below can be seen the iptables status:
##########################################
[root@localhost BuildScripts]# /etc/init.d/iptables status
Table: nat
Chain PREROUTING (policy ACCEPT)
num target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
num target prot opt source destination
1 MASQUERADE tcp -- 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
2 MASQUERADE udp -- 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
3 MASQUERADE all -- 192.168.122.0/24 !192.168.122.0/24
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53
2 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
3 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:67
4 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:67
5 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
6 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0
7 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
8 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
9 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:69
10 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain FORWARD (policy ACCEPT)
num target prot opt source destination
1 ACCEPT all -- 0.0.0.0/0 192.168.122.0/24 state RELATED,ESTABLISHED
2 ACCEPT all -- 192.168.122.0/24 0.0.0.0/0
3 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
4 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
5 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
6 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 PHYSDEV match --physdev-is-bridged
7 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT)
num target prot opt source destination
####################################
another point is that i am a root user....should this be a problem?? |
|
Back to top |
|
davi Brekeke Addict
Joined: 26 Jan 2011 Posts: 34
|
Posted: Tue Feb 07, 2012 11:45 pm Post subject: |
|
|
if you disable the "iptables", can you reach the SIP Server? |
|
Back to top |
|
sudhish Brekeke Junior Member
Joined: 06 Feb 2012 Posts: 5
|
Posted: Wed Feb 08, 2012 2:18 am Post subject: |
|
|
If i use:
/etc/init.d/iptables stop
Then i get another error(403 forbidden).
And then my sip phone does not even try to register. |
|
Back to top |
|
sudhish Brekeke Junior Member
Joined: 06 Feb 2012 Posts: 5
|
Posted: Wed Feb 08, 2012 2:45 am Post subject: |
|
|
This is a reply to:
########################
Did you push the [Start] button ?
Can you see the correct interface IP address in the [Status] page?
If you use another SIP client such as Xlite, does the same problem happen?
#####################
Did you push the [Start] button ?
Ans: YES i did
Can you see the correct interface IP address in the [Status] page?
Ans:YES
If you use another SIP client such as Xlite, does the same problem happen?
Ans:Same problem occurs with Xlite
######################## |
|
Back to top |
|
Tata Brekeke Master Guru
Joined: 27 Jan 2008 Posts: 223
|
Posted: Wed Feb 08, 2012 3:09 pm Post subject: |
|
|
I think you need to create a user in the [User Authentication] page.
Or you need to disable the Authentication.
From SIP Server ver 2, the Authentication is enabled in the default.
For using the Authentication, you need to have a user account in the SIP Server.
Follow the following page.
http://www.brekeke.com/products/products_sip_quickstart_simple.php |
|
Back to top |
|
|