[OpenSER-Users] How to avoid malicious BYE that update accounting "StopTime"?
Iñaki Baz Castillo
ibc at in.ilimit.es
Fri Feb 8 18:43:43 CET 2008
On Friday 08 February 2008 18:39:20 Alex Balashov wrote:
> On Fri, February 8, 2008 11:17 am, Iñaki Baz Castillo wrote:
> > - But now imagine that user B sends a BYE after 2 hours using the same
> > From&To tags and Call-ID. This is terrible!!! OpenSer will notify a
> > "Stop" action
>
> Why would it do that? Call-IDs are supposed to be GUIDs (Globally Unique
> Identifiers) and never reused. You shouldn't really be seeing collisions
> of them on a UA that properly implements the generation algorithm for them
> and fulfills the requirements of the RFC on this point.
That's why I speak about **malicious** users ;)
--
Iñaki Baz Castillo
ibc at in.ilimit.es
More information about the sr-users
mailing list