Re: [Serusers] rtpproxy address filling

Hello,

I think this is an interesting question, but

Andres wrote:

To answer my own question, I just set up a lab test to verify this.

After the session is up and the address has been 'pre-filled', if rtpproxy receives a packet on the same UDP port as one of the call legs but from a different IP, it changes the address to which it forwards the stream.

It immediately jumped into my mind that this could be a security vulnerability since a remote attacker could effectively bring down all sessions on an rtpproxy just by doing a UDP scan.

...wouldn't they switch back to the correct addresses when the next RTP packet arrives, i.e. after 10/20/30 ms?

Stefan