Loading nathelper module comes with some overhead (including an extra timer process for
nat pinging), but even we can live with that, I think it is better to do symmetric
signaling by default, because this is like 99% of what I could spot out there so far. The
asymmetric singaling should be done for trusted/known peers only, otherwise it expose the
system to become part to sort of "reflection" attack -- e.g., send OPTIONS to
SIP server to make it flood a particular target with replies by setting Via to the target
address.
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/commit/aebae41bccaec46d086796301d33223…