Hello everyone, 

This is about 403 forbidden with FreeSwitch. It occurs while outbound call sent from one of our local phone to our FS server to our ITSP. 

-I'm using the test drive install
-I’ve tested the sip trunk ITSP directly connecting a softphone, it's working ok, outside calls passed thru
-With our FS serveur, I’m able to receive inbound call from the outside (I used the action « transfer » to a local id) from public to default dialplan. It's working ok
-Our FS server is properly connected to the ITSP, I checked with the cli « sofia status gateway XXX »
-Regarding this, I know the outbound calls arrived at the gateway but failed, for instance "CallsOUT 7 / FailedCallsOUT 7"
-ITSP said they did not saw our outbound call beeing rejected
-I had a look at the CLI and Wireshark. I have the feeling that it does not use the ITSP ip when bridging but the local server IP instead (but it might be a misunderstanding on my side)
It’s says, 403 Forbidden unallocated number regarding our server local IP, it nerver shows the ITSP domain
-I’m sure I’m doing something stupid and I’m red-faced about it :-) 

This is what I saw thru wireshark from the message header. This looks strange to me, it looks like our serveur is sending the invite to himself (remember I’m just a rookie). 
Here are some extracts :

-INVITE : 

From: "1001" <sip:1001@OUR_SERVEUR_LOCAL_IP>;tag=XXXXXXX
    SIP Display info: "1001"
    SIP from address: sip:1001@OUR_SERVEUR_LOCAL_IP
        SIP from address User Part: 1001
        SIP from address Host Part:  OUR_SERVEUR_LOCAL_IP
    SIP from tag: XXXXXX

To: <sip:EuropeanPhoneNumber@OUR_SERVEUR_LOCAL_IP>
    SIP to address: sip:EuropeanPhoneNumber@OUR_SERVEUR_LOCAL_IP
        SIP to address User Part:  EuropeanPhoneNumber
        SIP to address Host Part: OUR_SERVEUR_LOCAL_IP

I observe the same for the 407 PROXY AUTHENTIFICATION REQUIRED as for the 403 Forbidden. I have the feeling I’ve mis routed the call to the ITSP gateway on our serveur. 
However – thru a large regex (for testing purpose) - I’m using the bridge command in the « default context » in order to bridge the ITSP Gateway (just like in the book). 

What I found strange is that I can’t see the ITSP ip in the logs, it’s just like I never get thru the ITSP gateway even if our FS is connected to it.

This is resulting in this 403 [FS CLI]

2019-01-30 15:51:56.575470 [DEBUG] sofia.c:7291 Channel sofia/external/ EuropeanPhoneNumber entering state [terminated][403]
2019-01-30 15:51:56.575470 [NOTICE] sofia.c:8484 Hangup sofia/external/ EuropeanPhoneNumber [CS_CONSUME_MEDIA] [UNALLOCATED_NUMBER]

That’s it at the moment,
I’ve tried my best until now with the book, it’s the first time I cannot go trhu by myself.


In advance, thank you for your time 

Kiroy