ICMP message destination unreachable (Host administratively)

sudhish · Post by **sudhish** » Mon Feb 06, 2012 10:03 pm

1. Brekeke Product Name and version: 3.0.2.1/325

2. Java version: 1.6.0_18

3. OS type and the version: Linux 2.6.33.3-85.fc13.i686.PAE i686

4. UA (phone), gateway or other hardware/software involved: zoiper sip phone installed on windows xp.

5. Select your network pattern from http://www.brekeke-sip.com/bbs/network/ ... terns.html : pattern 1

6. Your problem: When zoiper sends Request: REGISTER/SUBSCRIBE
i get a ICMP message destination unreachable (Host administratively prohibited), but the same zoiper has no problem registering with ondo sip server version-1.2.7.4/101.

Can any one please help me with a solution??

Regards,
Sudhish

Tata · Post by **Tata** » Tue Feb 07, 2012 1:30 am

Are you sure the SIP server is running?

If you try Brekeke SIP server 2.4.x , does the same problem happen?

sudhish · Post by **sudhish** » Tue Feb 07, 2012 1:43 am

Yes, the same problem occurs with version: 2.4.xx, but not with the older version(1.2.7.4/101) as i had mentioned earlier.

Tata · Post by **Tata** » Tue Feb 07, 2012 10:09 am

Did you push the [Start] button ?
Can you see the correct interface IP address in the [Status] page?
If you use another SIP client such as Xlite, does the same problem happen?

hope · Post by **hope** » Tue Feb 07, 2012 10:42 am

is there firewall running on the server machine?

sudhish · Post by **sudhish** » Tue Feb 07, 2012 9:35 pm

Below can be seen the iptables status:

##########################################
[root@localhost BuildScripts]# /etc/init.d/iptables status
Table: nat
Chain PREROUTING (policy ACCEPT)
num target prot opt source destination

Chain POSTROUTING (policy ACCEPT)
num target prot opt source destination
1 MASQUERADE tcp -- 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
2 MASQUERADE udp -- 192.168.122.0/24 !192.168.122.0/24 masq ports: 1024-65535
3 MASQUERADE all -- 192.168.122.0/24 !192.168.122.0/24

Chain OUTPUT (policy ACCEPT)
num target prot opt source destination

Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53
2 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
3 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:67
4 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:67
5 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
6 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0
7 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
8 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
9 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:69
10 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
num target prot opt source destination
1 ACCEPT all -- 0.0.0.0/0 192.168.122.0/24 state RELATED,ESTABLISHED
2 ACCEPT all -- 192.168.122.0/24 0.0.0.0/0
3 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
4 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
5 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
6 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 PHYSDEV match --physdev-is-bridged
7 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
num target prot opt source destination

####################################

another point is that i am a root user....should this be a problem??

davi · Post by **davi** » Tue Feb 07, 2012 11:45 pm

if you disable the "iptables", can you reach the SIP Server?

sudhish · Post by **sudhish** » Wed Feb 08, 2012 2:18 am

If i use:

/etc/init.d/iptables stop

Then i get another error(403 forbidden).

And then my sip phone does not even try to register.

sudhish · Post by **sudhish** » Wed Feb 08, 2012 2:45 am

This is a reply to:
########################
Did you push the [Start] button ?
Can you see the correct interface IP address in the [Status] page?
If you use another SIP client such as Xlite, does the same problem happen?

#####################

Did you push the [Start] button ?
Ans: YES i did

Can you see the correct interface IP address in the [Status] page?
Ans:YES

If you use another SIP client such as Xlite, does the same problem happen?

Ans:Same problem occurs with Xlite

########################

Tata · Post by **Tata** » Wed Feb 08, 2012 3:09 pm

I think you need to create a user in the [User Authentication] page.
Or you need to disable the Authentication.

From SIP Server ver 2, the Authentication is enabled in the default.
For using the Authentication, you need to have a user account in the SIP Server.

Follow the following page.
http://www.brekeke.com/products/product ... simple.php