[Serdev] Can the function is_to_local be added to the domain module

Jiri Kuthan jiri at iptel.org
Tue May 25 20:22:13 UTC 2004


But it is the r-uri which is "executed" and that's what you have to look at.
To is used for informational purposes and except for REGISTERS has no
serious impact.

-jiri

At 08:38 AM 5/25/2004, Zeus Ng wrote:
>In an effort to prevent third party from using our sip proxy as a open
>relay, I'm try to use the following logic for tight control.
>
>If (!(is_from_local() || is_uri_host_local())) {
>        xlog("L_ERR", "Relay access denied");
>        sl_send_reply("404", "Relay access not allowed here");
>        break;
>};
>
>However, I think this is not a reliable checking method as R-URI can be
>changed along the way from proxy to proxy. Is it possible to introduce the
>is_to_local() function much like the is_from_local() in the domain module.
>As far as I understand, the "To" header should not be changed even after
>passing a proxy. So, checking it for relay access is much better than
>checking R-URI.
>
>Your comment is welcome.
>
>
>Zeus Ng
>
>**********************************************************************
>This email and any files transmitted with it are confidential and intended
>solely for the use of the individual or entity to whom they are addressed.
>
>If you have received this email in error, you are prohibited from reading,
>copying, distributing and using the information. Please contact the sender
>immediately by return email and destroy the original message.
>****************************************************************** 
> 
>
>_______________________________________________
>Serdev mailing list
>serdev at lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serdev

--
Jiri Kuthan            http://iptel.org/~jiri/ 




More information about the Serdev mailing list