Klaus Darilion writes: klaus, how do you test that there is only one route in the predefined route set? if there is more, they could be used to bypass your security checks for the initial request.

Klaus Darilion writes: and what do you do if there is no to-tag like in the case of preloaded route set by nokia phones?

Helge Waastad writes: i'm pretty sure that rfc3261 allows so called pre-loaded route sets in initial requests, but for security reasons, many proxy configurations deny them. i too found recently that nokia phones, when configured to use sip, add by default a route header pointing to the outbound proxy. rather that simply rejecting initial requests with pre-loaded route sets, it might be possible to configure the proxy to allow them, but only if there is a single route entry that points to the proxy itself. i haven't had time to think how this could be tested in openser.cfg. -- juha

Helge Waastad writes: that won't help you with phones line nokia, which add Route header to INITIAL request (which never have To tags). -- juha _______________________________________________ Users mailing list Users(a)openser.org http://openser.org/cgi-bin/mailman/listinfo/users

Hi, excellent. Now I at least understood my problem. I will have a loose_route problem in a "dispatcher/OBP scenario" since the route header will not be the proxy it self, but the OBP/Dispatcher address, hence a routing loop will occure... (Probably Loose routing should be done at OBP layer...I just have to figure it out.)

Thanks, br hw man, 13,.03.2006 kl. 17.35 +0200, skrev Bogdan-Andrei Iancu: > by default, loose_route() function detects the pre-loaded route: if > there is only one Route hdr pointing to the server, it will be consumed > and loose_route() will return false. If more than one Route hdr is > present, the routing will be done as usual - function will consume the > Route and set the destination to the next Route - true is returned. > > regards, > bogdan > > Juha Heinanen wrote: > >> Helge Waastad writes: >> >>> I did modify my (a little-bit confused) loose route to loose route only >>> INVITES/ACK with totags (has_totag). The rest should be going through >>> the normal ACL procedures. >> that won't help you with phones line nokia, which add Route header to >> INITIAL request (which never have To tags). >> >> -- juha >> >> _______________________________________________ >> Users mailing list >> Users(a)openser.org >> http://openser.org/cgi-bin/mailman/listinfo/users >> >> >>

by default, loose_route() function detects the pre-loaded route: if there is only one Route hdr pointing to the server, it will be consumed and loose_route() will return false. If more than one Route hdr is present, the routing will be done as usual - function will consume the Route and set the destination to the next Route - true is returned.