15 Oct
2007
15 Oct
'07
10:35 p.m.
Iñaki Baz Castillo wrote:
El Monday 15 October 2007 12:12:44 Klaus Darilion
escribió:
just an idea: check if $fd of REFER is identical to domain in REFER to
header - if not -> reject it.
Further, if B's phone send out the new INVITE, if $rd != $fd then do not
send the call to the gateway.
regards
klaus
What exactly do you want to achieve? Do you want
to allow REFER only
intradomain?
Exactly.
- Imagine you admin a OpenSer that gives service to 2 independent companies
(domain_A and domain_B).
- Imagine a user_A of domain_A calls to a user_B of domain_B.
- During the call user_A does REFER.
- OpenSer requires auth por REFER, so user_A sends auth (it can since it's a
local user).
- So finally user_B is transferred by an external user. Of course this is not
tolerable.
So I need to allow a REFER just if the caller and called are in the same
domain, but REFER is in-dialog so there is not domain name in the URI.