<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
Hello Ben,<br>
<br>
The 407 is sent upstream, but when it is lost, it is not
retransmitted by OpenSIPS.<br>
I do not have this problem with other negative status codes (e.g.
486).<br>
<br>
This is clearly explained in <a moz-do-not-send="true"
href="https://opensips.org/pub/opensips/1.8.6/src/ChangeLog"
class="moz-txt-link-freetext">https://opensips.org/pub/opensips/1.8.6/src/ChangeLog</a><br>
<blockquote><font face="monospace">2012-03-21 18:36:58
Bogdan-Andrei Iancu, <bogdan at opensips dot org> </font><br>
<font face="monospace"> * [8811] :</font><br>
<br>
<font face="monospace"> TM will no longer do retransmission for
the 407/401 replies (if no ACK is received) for both local or
proxied replies.</font><br>
<font face="monospace"> </font><br>
<font face="monospace"> According to RFC 3261, retransmitting
407s/401s is probably a bad idea:</font><br>
<font face="monospace"> </font><br>
<font face="monospace"> 26.3.2.4 DoS Protection</font><br>
</blockquote>
At the moment, my only solution is to use forward() instead of
t_relay() in order to use the stateless mode.<br>
<br>
Yannick<br>
<br>
<blockquote type="cite"
cite="mid:mailman.728.1651280396.1213.users@lists.opensips.org">
<pre class="moz-quote-pre" wrap="">Yannick,
The default behavior of OpenSIPS is to relay any received responses back upstream. If it is not doing that it would have to be because you are stopping it in the script. Take a look at the documentation for failure_route [1] which explains this. Check your own failure_route in your script; you must be doing something there that is telling OpenSIPS not to relay the 401/407 back upstream.
[1] <a class="moz-txt-link-freetext" href="https://www.opensips.org/Documentation/Script-Routes-2-4#toc3">https://www.opensips.org/Documentation/Script-Routes-2-4#toc3</a>
Ben Newlin
From: Users <a class="moz-txt-link-rfc2396E" href="mailto:users-bounces@lists.opensips.org"><users-bounces@lists.opensips.org></a> on behalf of Yannick LE COENT <a class="moz-txt-link-rfc2396E" href="mailto:yannick.lecoent@nexcom.fr"><yannick.lecoent@nexcom.fr></a>
Date: Friday, April 29, 2022 at 6:44 PM
To: <a class="moz-txt-link-abbreviated" href="mailto:users@lists.opensips.org">users@lists.opensips.org</a> <a class="moz-txt-link-rfc2396E" href="mailto:users@lists.opensips.org"><users@lists.opensips.org></a>
Subject: [OpenSIPS-Users] OpenSIPS : no 407 retransmission
EXTERNAL EMAIL - Please use caution with links and attachments
Hello,
I'm using OpenSIPS as a proxy in front of another proxy. The 2nd proxy
is in charge of authenticating the request.
This is the callflow:
Alice OpenSIPS Proxy#2
| INVITE | |
|--------------->| INVITE |
| 100 Tring |--------------->|
|<---------------| 407 |
| |<---------------|
| | ACK |
| |--------------->|
| 407 | |
| X<---------| |
| | |
Since OpenSIPS does not retransmit 401/407, the call setup gets stuck.
What can I do ?
If I set auto_100trying=1, that works, but this increases the number of
INVITE retransmissions since 180Ringing are not received instantly.
Do you have any suggestion ?
Thanks,
Yannick
</pre>
</blockquote>
</body>
</html>