[Serusers] RE: [Sipforum-discussion] regarding Authentication...

[Paul van Schagen]

-----Oorspronkelijk bericht-----
Van: Paul van Schagen [mailto:paul.van.schagen at adaline.net] 
Verzonden: donderdag 21 april 2005 9:02
Aan: 'Josekutty K.K'
Onderwerp: RE: [Sipforum-discussion] regarding Authentication...

Methods you really want to authenticate are INVITE ( outgoing calls )
and REGISTER ( incoming calls ). You try the request first and the
switch answers requesting authentication. Then the authentication is
sent by the UA to the switch.

Remember the authentication also verifies the IP address of the sender
is correct. By doing a double request you make sure that the original
request came from where they say it came from.

Lets say somebody fakes an IP address and sents the packet to the
switch.
The switch then sends back an authentication requests which arrives at
another destination. The call never gets authenticated correctly and is
rejected.


Hopes this helps

Can anybody help me with my mediaproxy timeout ?

Best regards
Paul van Schagen

-----Oorspronkelijk bericht-----
Van: sipforum-discussion-bounces at lists.su.se
[mailto:sipforum-discussion-bounces at lists.su.se] Namens Josekutty K.K
Verzonden: donderdag 21 april 2005 8:47
Aan: sipforum-discussion at lists.su.se
Onderwerp: [Sipforum-discussion] regarding Authentication...

Hi all,

I am a beginner in SIP. Let me explain my doubt.

Once a SIP request authenticates itself, (usually a REGISTER request),
all further requests MUST  include the authorization details .. I mean
I MUST send the authorization details to subsequent requests say
OPTIONS,  INVITE etc . Or Should I try each request without
authentication first?

Regards 

Josekutty K K
------
To unsubscribe from the Sipforum-discussion mailing list visit
https://mbox.su.se/mailman/listinfo/sipforum-discussion