26 Apr
2010
26 Apr
'10
8:05 a.m.
2010/4/26 Klaus Darilion <klaus.mailinglists(a)pernau.at>at>:
Are you sure? In my case when I receive an INVITE from my PSTN
gateways such INVITE comes from SIGNALING_IP while the SDP contains a
different SDP_MEDIA_IP. I call "force_rtpproxy()" with no flags so
RtpProxy prefills the media address with
"SIGNALING_IP:SDP_MEDIA_PORT". Anyhow the media comes from
SDP_MEDIA_IP:SDP_MEDIA_PORT and RtpProxy allows such incoming RTP, so
I don't know how such "latching in" security mechanism works (it
should reject such audio if "-r" is not used, right? but it doesn't
reject it so...).
--
Iñaki Baz Castillo
<ibc(a)aliax.net>
"-r"
also works in case of NAT. The only difference is the initially
prefilled media address (that is just use in case of not receiving
media in the published port).
But doesn't give you the default more security? I thought that "latching
in"
is only allowed from the prefilled IP address.