Re: [asterisk-users] security: SIP header spoofing CHANNEL(recvip)?

2011-08-25 Thread Nic Colledge
Alejandro Recarey Sent: 25 August 2011 11:34 To: Asterisk Users Mailing List Subject: [asterisk-users] security: SIP header spoofing CHANNEL(recvip)? I am currently suffering various SIP attacks. I am using the following extension to record the caller's IP address: exten => h,n,set(CDR(srcip)=$

[asterisk-users] security: SIP header spoofing CHANNEL(recvip)?

2011-08-25 Thread Alejandro Recarey
I am currently suffering various SIP attacks. I am using the following extension to record the caller's IP address: exten => h,n,set(CDR(srcip)=${CHANNEL(recvip)}) However, in recent attacks, this IP address is not correct, and I believe that they are spoofing it. I am using asterisk 1.6.2.15. D