[Kamailio-Devel] [Kamailio-Users] Kamailio (OpenSER) v1.5.0 Released

Daniel-Constantin Mierla miconda at gmail.com
Mon Mar 2 18:55:06 CET 2009


Hello,

On 03/02/2009 07:52 PM, Victor Pascual Ávila wrote:
> On Mon, Mar 2, 2009 at 6:09 PM, Daniel-Constantin Mierla
> <miconda at gmail.com> wrote:
>   
>>    * protection against SIP reply attack
>>     
>
> Could you please provide some description on it?
>
>   
so far >=200 replies couldn't be discarded by the sip server, they were 
forwarded based on Via stack. That made possible to flood a target with 
sip replies.

Now you can check if a reply belongs to an active transaction and if not 
drop it.

Cheers,
Daniel

-- 
Daniel-Constantin Mierla
http://www.asipto.com




More information about the Devel mailing list