<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Thank you for your prompt reply!<br class=""><div class="">The security hole about RTP injection is not a problem because we use in our solution encrypted voice protocols, so if an attacker tries to inject malicious RTP data would be discarded by the encrypted protocol</div><div class=""><br class=""></div><div class=""><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">--<br class="">Emanuele Gambaro<br class="">---<br class="">email: <a href="mailto:emanuele.gambaro@pynlab.com" class="">emanuele.gambaro@pynlab.com</a><br class="">skype: sarbyn_work<br class="">OpenPGP Key: <a href="https://goo.gl/fdeVnI" class="">https://goo.gl/fdeVnI</a></div>
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">Il giorno 27 giu 2017, alle ore 11:15, Daniel Tryba <<a href="mailto:d.tryba@pocos.nl" class="">d.tryba@pocos.nl</a>> ha scritto:</div><br class="Apple-interchange-newline"><div class=""><div class="">On Tue, Jun 27, 2017 at 11:03:00AM +0200, Emanuele Gambaro wrote:<br class=""><blockquote type="cite" class="">Hi to all<br class="">I have the following scenario (Kamailio 5 and rtpproxy)<br class="">*) Bob on a wifi network calls Alice<br class="">*) During the call, Bob losts his wifi network (and so also changes his IP address)<br class="">*) The RTP flow is interrupted<br class=""><br class="">With asterisk, disabling “Strict RTP” option, the flow does not interrupts: Asterisk detect the new IP address and sends the audio packets to the new IP address.<br class=""><br class="">It is possible to setup this behavior also with Kamailio?<br class=""></blockquote><br class="">Don't know about rtpproxy, but rtpengine has the following option that<br class="">implements your use case:<br class=""><br class="">"media handover<br class=""><br class="">Similar to the strict source option, but instead of dropping packets<br class="">when the source address or port don't match, the endpoint address will<br class="">be re-learned and moved to the new address. This allows endpoint<br class="">addresses to change on the fly without going through signalling again.<br class="">Note that this opens a security hole and potentially allows RTP streams<br class="">to be hijacked, either partly or in whole."<br class=""><br class=""><br class=""><br class="">_______________________________________________<br class="">Kamailio (SER) - Users Mailing List<br class=""><a href="mailto:sr-users@lists.kamailio.org" class="">sr-users@lists.kamailio.org</a><br class="">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users<br class=""></div></div></blockquote></div><br class=""></body></html>