30 Mar
2004
30 Mar
'04
8:55 a.m.
You can disable UDP - that prevents from faked messages, but causes lots of interoperability problems.
klaus
Ticknor.Scott@ic.gc.ca wrote:
my lab partner & i have found that if we sniff an ACK message during call setup and extract the call tag and id, then we can arbitrarily hang up the call from our java attack generator. i thought about adding some logic to ser.cfg to process BYEs. is there an easy way to authenticate the BYE? i have something like the following in ser.cfg, but it seems to have no effect
if (method=="BYE") { if (!check_from()) { ...etc }; };
thanks, scott DSi
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers