<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Brian,<br>
<br>
I'm talking phones registering with FreeSWITCH, and how calls are
routed to them.<br>
I'll sit on the IRC channel for a bit - give me a shout if you've a
moment.<br>
<br>
Cheers --<br>
<br>
Dave<br>
<br>
<blockquote cite="mid:592C50F3-EA98-46B8-B637-249DB121DAC4@mac.com"
type="cite">
<pre wrap="">Are you talking inbound or outbound registrations from FreeSWITCh or
to FreeSWITCH?
/b
On Dec 26, 2007, at 9:47 AM, David Knell wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Brian West wrote:
</pre>
<blockquote type="cite">
<pre wrap="">On Dec 26, 2007, at 8:02 AM, David Knell wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Less wordily, any user can get any other user's calls by changing
their SIP username
to match that user's.
</pre>
</blockquote>
<pre wrap="">How can they do that if auth calls is turned on? If you have blind
reg on then sure someone could.
</pre>
</blockquote>
<pre wrap="">They can do it because their SIP username is not necessarily the
same as the name
used for authentication, and its the SIP username that's used for
call routing. Here's a bit
of a REGISTER:
Via: SIP/2.0/UDP 192.168.0.103:42074;branch=z9hG4bK-
d8754z-894af021546db132-1---d8754z-;rport
Max-Forwards: 70
Contact: <<a class="moz-txt-link-freetext" href="sip:sipusername@75.71.186.17:42074;rinstance=65c73083353adf9d">sip:sipusername@75.71.186.17:42074;rinstance=65c73083353adf9d</a>
</pre>
<blockquote type="cite">
<pre wrap="">;expires=0
</pre>
</blockquote>
<pre wrap="">To: "sipdisplayname"<a class="moz-txt-link-rfc2396E" href="sip:sipusername@78.129.143.200"><sip:sipusername@78.129.143.200></a>
From: "sipdisplayname"<a class="moz-txt-link-rfc2396E" href="sip:sipusername@78.129.143.200"><sip:sipusername@78.129.143.200></a>;tag=b2127143
Call-ID: NjY0MmU5ZjhhMTJhZmFlYWJhMmM4MDY3NTVjZjlkYWI.
CSeq: 3 REGISTER
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE,
SUBSCRIBE, INFO
User-Agent: eyeBeam release 1013t stamp 43070
Authorization: Digest
username="sipauthname",realm="78.129.143.200",nonce="2da9c5ae-
b512-11dc-92d4a9bf24bac484",uri="sip:
78.129.143.200
",response
=
"c13fe382888ec016e234595b608caab0
",cnonce="780c520efb22fe9fdf270fd8cd5e2a28",nc=00000002,qop=a
Content-Length: 0
- note that sipdisplayname, sipusername and sipauthname are all
distinct.
--Dave
_______________________________________________
Freeswitch-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeswitch-users@lists.freeswitch.org">Freeswitch-users@lists.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a>
UNSUBSCRIBE:<a class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a>
<a class="moz-txt-link-freetext" href="http://www.freeswitch.org">http://www.freeswitch.org</a>
</pre>
</blockquote>
<pre wrap=""><!---->
_______________________________________________
Freeswitch-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeswitch-users@lists.freeswitch.org">Freeswitch-users@lists.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a>
UNSUBSCRIBE:<a class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a>
<a class="moz-txt-link-freetext" href="http://www.freeswitch.org">http://www.freeswitch.org</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
David Knell, Director, 3C Limited
T: 020 8114 8901 F: 020 8692 0677 M: 07773 800623
<a class="moz-txt-link-freetext" href="http://www.3c.co.uk">http://www.3c.co.uk</a> </pre>
</body>
</html>