[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Partysip-dev] Almost-infinite message loop for Invite

From: Aymeric Moizard
Subject: Re: [Partysip-dev] Almost-infinite message loop for Invite
Date: Wed, 29 Jan 2003 00:15:42 +0100 (CET)

I should have looked better at your log file. I'm too used
that users always face this error and I missed yours which
is slighlty different.

Your UA register this contact address:
Contact: LittleGuy <sip:address@hidden>;expires=36000

When the INVITE is sent, the address is searched in the
local database and this sip url is found. But this one
was a bad one. The UA should have sent his real ip
address in the contact header instead of the host: ""

The REGISTER message is thus not compliant.
I should write some code to avoid such attacks :)


On Tue, 28 Jan 2003, Gary Corcoran wrote:

> Slight correction to previous email:
> The code *does* do a lookup for to see if we are
> responsible for it, and it *does* find a match.  But, the
> fact that a match occurred seems to only short-circuit
> the 'sfull' plugin.
> It then proceeds to lookup gary1, as described in the previous
> email.  That is, it finds it in the local user database as
> belonging to, then looks up,
> finds it at IP address of .114, and proceeds to "forward"
> the Invite to .114 (which is the local machine)...  :(
> Gary
> _______________________________________________
> Partysip-dev mailing list
> address@hidden

reply via email to

[Prev in Thread] Current Thread [Next in Thread]