I see. Apologies, I misunderstood the problem scenario.

Ben Newlin

From: Users <[email protected]> on behalf of Yannick LE COENT 
<[email protected]>
Date: Saturday, April 30, 2022 at 5:46 AM
To: OpenSIPS users mailling list <[email protected]>
Subject: Re: [OpenSIPS-Users] OpenSIPS : no 407 retransmission
EXTERNAL EMAIL - Please use caution with links and attachments

________________________________
Hello Ben,

The 407 is sent upstream, but when it is lost, it is not retransmitted by 
OpenSIPS.
I do not have this problem with other negative status codes (e.g. 486).

This is clearly explained in 
https://opensips.org/pub/opensips/1.8.6/src/ChangeLog<https://opensips.org/pub/opensips/1.8.6/src/ChangeLog>
2012-03-21 18:36:58  Bogdan-Andrei Iancu, <bogdan at opensips dot org>
    * [8811] :

    TM will no longer do retransmission for the 407/401 replies (if no ACK is 
received) for both local or proxied replies.

    According to RFC 3261, retransmitting 407s/401s is probably a bad idea:

    26.3.2.4 DoS Protection
At the moment, my only solution is to use forward() instead of t_relay() in 
order to use the stateless mode.

Yannick



Yannick,



The default behavior of OpenSIPS is to relay any received responses back 
upstream. If it is not doing that it would have to be because you are stopping 
it in the script. Take a look at the documentation for failure_route [1] which 
explains this. Check your own failure_route in your script; you must be doing 
something there that is telling OpenSIPS not to relay the 401/407 back upstream.



[1] 
https://www.opensips.org/Documentation/Script-Routes-2-4#toc3<https://www.opensips.org/Documentation/Script-Routes-2-4#toc3>



Ben Newlin



From: Users 
<[email protected]><mailto:[email protected]> on 
behalf of Yannick LE COENT 
<[email protected]><mailto:[email protected]>

Date: Friday, April 29, 2022 at 6:44 PM

To: [email protected]<mailto:[email protected]> 
<[email protected]><mailto:[email protected]>

Subject: [OpenSIPS-Users] OpenSIPS : no 407 retransmission

EXTERNAL EMAIL - Please use caution with links and attachments



Hello,



I'm using OpenSIPS as a proxy in front of another proxy. The 2nd proxy

is in charge of authenticating the request.



This is the callflow:



Alice           OpenSIPS          Proxy#2

   | INVITE         |                |

   |--------------->| INVITE         |

   |      100 Tring |--------------->|

   |<---------------|            407 |

   |                |<---------------|

   |                | ACK            |

   |                |--------------->|

   |            407 |                |

   |     X<---------|                |

   |                |                |



Since OpenSIPS does not retransmit 401/407, the call setup gets stuck.



What can I do ?

If I set auto_100trying=1, that works, but this increases the number of

INVITE retransmissions since 180Ringing are not received instantly.



Do you have any suggestion ?



Thanks,

Yannick
_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Reply via email to