Re: SIP conntrack/NAT (Re: [UPnP-SDK-discuss] UPNP Server/Application Gateway for Linux)

2002-04-07 Thread Tom Marshall
The 'official' IETF approach on how to NAT SIP/SDP is that you have to run some SIP proxy, which communicates the to-be-opened port and NAT mappings over some protocol (formerly FCP, firewall configuration protocol) to the firewall. And how is the SIP proxy any safer that allowing

Re: [UPnP-SDK-discuss] UPNP Server/Application Gateway for Linux

2002-04-07 Thread Henrik Nordstrom
On Monday 08 April 2002 00:28, Brian J. Murrell wrote: Right! But my impression is that you have no idea which application is requesting the access through the UPnP server. A security policy of allow whatever the clients ask for is no security policy at all, and unless the firewall/UPnP