[OpenSER-Users] How to avoid malicious BYE that update accounting "StopTime"?

Alex Balashov abalashov at evaristesys.com
Fri Feb 8 18:39:20 CET 2008


On Fri, February 8, 2008 11:17 am, Iñaki Baz Castillo wrote:

> - But now imagine that user B sends a BYE after 2 hours using the same
> From&To tags and Call-ID. This is terrible!!!  OpenSer will notify a
> "Stop" action

Why would it do that?  Call-IDs are supposed to be GUIDs (Globally Unique
Identifiers) and never reused.  You shouldn't really be seeing collisions
of them on a UA that properly implements the generation algorithm for them
and fulfills the requirements of the RFC on this point.

-- 
Alex Balashov
Evariste Systems
Web    : http://www.evaristesys.com/
Tel    : (+1) (678) 954-0670
Direct : (+1) (678) 954-0671
Mobile : (+1) (706) 338-8599





More information about the Users mailing list