@herlesupreeth commented on this pull request.
&& (ignore_contact_rxport_check
- || (c->received_port == _m->rcv.src_port)
My opinion is that in IMS the IPsec SA is negotiated for all transport protocols (so in practice UDP and TCP), hence if a UE managed to correctly encrypt whatever UDP/TCP packet correctly and send it to us on the correct Security-Association flows, we should allow it.
I agree