[OpenSER-Users] How to avoid malicious BYE that update accounting "StopTime"?

Iñaki Baz Castillo ibc at in.ilimit.es
Fri Feb 8 18:43:43 CET 2008


On Friday 08 February 2008 18:39:20 Alex Balashov wrote:
> On Fri, February 8, 2008 11:17 am, Iñaki Baz Castillo wrote:
> > - But now imagine that user B sends a BYE after 2 hours using the same
> > From&To tags and Call-ID. This is terrible!!!  OpenSer will notify a
> > "Stop" action
>
> Why would it do that?  Call-IDs are supposed to be GUIDs (Globally Unique
> Identifiers) and never reused.  You shouldn't really be seeing collisions
> of them on a UA that properly implements the generation algorithm for them
> and fulfills the requirements of the RFC on this point.

That's why I speak about **malicious** users  ;)

-- 
Iñaki Baz Castillo
ibc at in.ilimit.es




More information about the Users mailing list