FreeSWITCH: IP 203.0.113.5 Rejected by acl "domains". Falling back to Digest auth.

What it means

The source IP is not in the ACL used for IP authentication, so FreeSWITCH asks for a password instead.

Why it happens

• A provider’s IP was not added to acl.conf.xml (domains or your own list).
• The provider has several signalling IPs and only one is listed.
• Normal for phones that authenticate by password: then it is just information.

How to fix it

1. Add the provider IPs to an ACL list and reloadacl.
2. Or put the trunk on the external profile, where calls are matched by gateway instead.
3. Ignore it for registered phones.

Useful tools

SIP trunk generator

Other FreeSWITCH errors

• mygateway Failed Registration with status Forbidden [403]. failure #3
• No route, Aborting
• Can't find user [1000@203.0.113.10] from 198.51.100.7
• Hangup sofia/external/74951234567 [CS_EXCHANGE_MEDIA] [INCOMPATIBLE_DESTINATION]
• Hangup sofia/internal/101@pbx.example [CS_EXCHANGE_MEDIA] [MEDIA_TIMEOUT]