[OpenSIPS-Users] Accounting: How to avoid a fraudulent BYE with lower CSeq?

[Victor Pascual Ávila]

On Wed, Jan 7, 2009 at 11:58 AM, Adrian Georgescu <ag at ag-projects.com> wrote:
> The dialog module could eventually be used to detect out of sync Cseq and
> take decision to terminate the call. Is this feasible?

Correct me if I'm wrong, but in that case it'd be easier to
reject/drop the BYE request.

-Victor

> Adrian
> On Dec 19, 2008, at 3:59 PM, Victor Pascual Ávila wrote:
>
> On Fri, Dec 19, 2008 at 3:22 PM, Bogdan-Andrei Iancu
> <bogdan at voice-system.ro> wrote:
>
> Hi Iñaki,
>
> Have you consider requesting auth for the BYE ? from SIP point of view
>
> is perfectly valid....
>
> I'm afraid this would only prevent external attackers but does not
> protect you from your own customers-- guys who have the credentials
> and wanna call for free.
>
> Cheers,
> --
> Victor Pascual Ávila
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>



-- 
Victor Pascual Ávila