Re: [sr-dev] why new tcp connection?

Juha Heinanen schrieb: In this case it can work also with client receiving responses/in-dialog requests at advertised port (as long as the client is really listening on the advertised port). But one of my favorites statement is: "Never trust the user". As the contact and Via headers are user provided data I do not trust it. Thus I always enforce symmetric signaling, regardless if client is behind NAT or not and regardless of the used protocol.* The only exception is if the client is known to be asymmetric (then I have to screen the contact that at least the IP is the src_ip). regards Klaus * I once used the somehow "academic" approach with hyper-intelligent NAT detection methods, but I ended up with the "pragmatic" approach which is easier, more secure and works IMO better.