Re: [Sip] Draft: draft-holmberg-sip-keep-00.txt

[Hadriel Kaplan <HKaplan at acmepacket.com>]

Actually, it will cause problems for the device sending STUN, because that next-hop proxy will (rightly) consider it a malformed attack and blacklist the sender.

But it's also because by letting the next-hop proxy know the sender can send STUN or CRLF keepalives means the next-hop proxy does not need to potentially do other things itself.

-hadriel


> -----Original Message-----
> From: sip-bounces at ietf.org [mailto:sip-bounces at ietf.org] On Behalf Of Juha
> Heinanen
> Sent: Tuesday, May 06, 2008 2:52 PM
> To: Francois Audet
> Cc: sip at ietf.org; Christer Holmberg
> Subject: Re: [Sip] Draft: draft-holmberg-sip-keep-00.txt
>
> Francois Audet writes:
>
>  > People are worried that multiplexing different protocols (SIP and
>  > STUN) on the same port may cause problems.
>
> if they cause problems to the proxy, then the proxy is an easy
> target for attacks and should not be connected to the net anyway.
>
> -- juha
> _______________________________________________
> Sip mailing list  https://www.ietf.org/mailman/listinfo/sip
> This list is for NEW development of the core SIP Protocol
> Use sip-implementors at cs.columbia.edu for questions on current sip
> Use sipping at ietf.org for new developments on the application of sip
_______________________________________________
Sip mailing list  https://www.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use sip-implementors at cs.columbia.edu for questions on current sip
Use sipping at ietf.org for new developments on the application of sip