Re: [OpenSIPS-Users] OpenSIPS : no 407 retransmission

Wed, 04 May 2022 10:19:41 -0700 

Hi Daniel,
I do not think the ACK is sent by my script. It is sent by the TM module since it is a negative response. 
Am I wrong ?

Thanks,
Yannick

Le 04/05/2022 à 18:48, Daniel Zanutti a écrit :

Hi Yannick
I think you should not reply with ACK to the 407 from destination. Just forward 407 to origin and wait for ACK. As soon you receive ACK from origin, you forward to destination. 

It's more like a stateless but I believe it's the only way.

Regards
On Tue, May 3, 2022 at 12:16 PM Yannick LE COENT <[email protected]> wrote: 

    Hello Daniel,

    This is not what I looking for.
    My OpenSIPS instance is working as a relay between the softphone
    and another proxy (proxy#2 in the call).
    So it does not handle authentication.

    Alice           OpenSIPS Proxy#2
       | INVITE         | |
    |--------------->| INVITE         |
    |      100 Tring |--------------->|
    |<---------------|            407 |
    |                |<---------------|
    |                | ACK            |
    |                |--------------->|
    |            407 |                |
    |     X<---------|                |
       |  (no retrans.) | |

    When the 407 is lost between OpenSIPS and Alice, it is not
    retransmitted by OpenSIPS.

    I would like to force retransmission.

    Thanks,
    Yannick

    Le 03/05/2022 à 15:16, Daniel Zanutti a écrit :

    Generate in Stateful -> www_challenge or proxy_challenge?
    https://opensips.org/html/docs/modules/3.2.x/auth.html

    Is this what you are looking for?


    On Tue, May 3, 2022 at 3:50 AM Yannick LE COENT
    <[email protected]> wrote:

        Hello all,

        Could you tell if there is a way to enable 407 in stateful mode ?

        Thanks,
        Yannick

        Le 30/04/2022 à 18:14, Yannick LE COENT a écrit :

        Hello Ben,

        Thanks for your answer.

        This problem occurs when OpenSIPS is not in charge of
        authenticating the INVITE request, but this is done downstream.
        I've sent this question to know if somebody has already
        solved this kind of problem.

        Best regards,
        Yannick

        Le 30/04/2022 à 16:15, Ben Newlin a écrit :


        I see. Apologies, I misunderstood the problem scenario.

        Ben Newlin

        *From: *Users <[email protected]>
        <mailto:[email protected]> on behalf of
        Yannick LE COENT <[email protected]>
        <mailto:[email protected]>
        *Date: *Saturday, April 30, 2022 at 5:46 AM
        *To: *OpenSIPS users mailling list
        <[email protected]> <mailto:[email protected]>
        *Subject: *Re: [OpenSIPS-Users] OpenSIPS : no 407
        retransmission

        *EXTERNAL EMAIL - Please use caution with links and
        attachments *

        ------------------------------------------------------------------------

        Hello Ben,

        The 407 is sent upstream, but when it is lost, it is not
        retransmitted by OpenSIPS.
        I do not have this problem with other negative status codes
        (e.g. 486).

        This is clearly explained in
        https://opensips.org/pub/opensips/1.8.6/src/ChangeLog

            2012-03-21 18:36:58  Bogdan-Andrei Iancu, <bogdan at
            opensips dot org>
                * [8811] :

                TM will no longer do retransmission for the 407/401
            replies (if no ACK is received) for both local or
            proxied replies.

                According to RFC 3261, retransmitting 407s/401s is
            probably a bad idea:

                26.3.2.4 DoS Protection

        At the moment, my only solution is to use forward() instead
        of t_relay() in order to use the stateless mode.

        Yannick


            Yannick,


            The default behavior of OpenSIPS is to relay any received responses 
back upstream. If it is not doing that it would have to be because you are 
stopping it in the script. Take a look at the documentation for failure_route 
[1] which explains this. Check your own failure_route in your script; you must 
be doing something there that is telling OpenSIPS not to relay the 401/407 back 
upstream.


            [1]https://www.opensips.org/Documentation/Script-Routes-2-4#toc3


            Ben Newlin


            From: Users<[email protected]>  
<mailto:[email protected]>  on behalf of Yannick LE 
COENT<[email protected]>  <mailto:[email protected]>

            Date: Friday, April 29, 2022 at 6:44 PM

            To:[email protected]  <[email protected]>  
<mailto:[email protected]>

            Subject: [OpenSIPS-Users] OpenSIPS : no 407 retransmission

            EXTERNAL EMAIL - Please use caution with links and attachments


            Hello,


            I'm using OpenSIPS as a proxy in front of another proxy. The 2nd 
proxy

            is in charge of authenticating the request.


            This is the callflow:


            Alice           OpenSIPS          Proxy#2

                | INVITE         |                |

                |--------------->| INVITE         |

                |      100 Tring |--------------->|

                |<---------------|            407 |

                |                |<---------------|

                |                | ACK            |

                |                |--------------->|

                |            407 |                |

                |     X<---------|                |

                |                |                |


            Since OpenSIPS does not retransmit 401/407, the call setup gets 
stuck.


            What can I do ?

            If I set auto_100trying=1, that works, but this increases the 
number of

            INVITE retransmissions since 180Ringing are not received instantly.


            Do you have any suggestion ?


            Thanks,

            Yannick


        _______________________________________________
        Users mailing list
        [email protected]
        http://lists.opensips.org/cgi-bin/mailman/listinfo/users



        _______________________________________________
        Users mailing list
        [email protected]
        http://lists.opensips.org/cgi-bin/mailman/listinfo/users


        _______________________________________________
        Users mailing list
        [email protected]
        http://lists.opensips.org/cgi-bin/mailman/listinfo/users


    _______________________________________________
    Users mailing list
    [email protected]
    http://lists.opensips.org/cgi-bin/mailman/listinfo/users


    _______________________________________________
    Users mailing list
    [email protected]
    http://lists.opensips.org/cgi-bin/mailman/listinfo/users


_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

_______________________________________________
Users mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Reply via email to