Loading nathelper module comes with some overhead (including an extra timer process for nat pinging), but even we can live with that, I think it is better to do symmetric signaling by default, because this is like 99% of what I could spot out there so far. The asymmetric singaling should be done for trusted/known peers only, otherwise it expose the system to become part to sort of "reflection" attack -- e.g., send OPTIONS to SIP server to make it flood a particular target with replies by setting Via to the target address.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or unsubscribe.