[sr-dev] why new tcp connection?
Iñaki Baz Castillo
ibc at aliax.net
Fri Nov 6 15:48:16 CET 2009
El Viernes, 6 de Noviembre de 2009, Klaus Darilion escribió:
> Juha Heinanen schrieb:
> > Klaus Darilion writes:
> > > 2. server
> > > I use the pragmatic, and well working UDP approach. Just call
> > > fix_nated_contact/register also for TCP clients. I never had any
> > > issues with that.
> >
> > even when client is not behind nat like in the example of the
> > discussion?
>
> In this case it can work also with client receiving responses/in-dialog
> requests at advertised port
> (as long as the client is really listening on the advertised port).
It should!
> But one of my favorites statement is: "Never trust the user". As the
> contact and Via headers are user provided data I do not trust it. Thus I
> always enforce symmetric signaling, regardless if client is behind NAT
> or not and regardless of the used protocol.*
Some SIP ALG routers change the Via/Contact port and set 12345 while the
public source port is 12344. Really. So don't believe the user, neither the
routers! XD
--
Iñaki Baz Castillo <ibc at aliax.net>
More information about the sr-dev
mailing list