Re: [Partysip-dev] Almost-infinite message loop for Invite

[Aymeric Moizard]

I should have looked better at your log file. I'm too used
that users always face this error and I missed yours which
is slighlty different.

Your UA register this contact address:
Contact: LittleGuy <sip:address@hidden>;expires=36000

When the INVITE is sent, the address is searched in the
local database and this sip url is found. But this one
was a bad one. The UA should have sent his real ip
address in the contact header instead of the host: "gary.net"

The REGISTER message is thus not compliant.
I should write some code to avoid such attacks :)

Aymeric

On Tue, 28 Jan 2003, Gary Corcoran wrote:

>
> Slight correction to previous email:
>
> The code *does* do a lookup for gary.net to see if we are
> responsible for it, and it *does* find a match.  But, the
> fact that a match occurred seems to only short-circuit
> the 'sfull' plugin.
>
> It then proceeds to lookup gary1, as described in the previous
> email.  That is, it finds it in the local user database as
> belonging to gary.net, then looks up _sip._udp.gary.net,
> finds it at IP address of .114, and proceeds to "forward"
> the Invite to .114 (which is the local machine)...  :(
>
> Gary
>
>
> _______________________________________________
> Partysip-dev mailing list
> address@hidden
> http://mail.nongnu.org/mailman/listinfo/partysip-dev
>