On Thu, 2006-05-25 at 13:15 +0530, [EMAIL PROTECTED] wrote: > Once I send an offer in in INVITE I am supposed to be ready to listen to > media.
Yes. > However If I start getting media packets before getting the answer , I > do not know for sure whether the called > Party is playing me the media or somebody else is playing me the media. You don't know even then, as more than one source could be sending packets to the port, and one of them could be malicious. > What do I do in this case ? Should I be rejecting the media packets till > I get an answer ? No, you are required to receive them. > Also if the called party plays the media from a different IP address > from the one which he provides in the the SDP (for receiving media)how > can I be sure it's not some kind of attack on my UA ? You cannot. If you want security in the media stream, use some form of secure RTP. But it's not possible in ordinary SIP/SDP/RTP. Dale --- interop.pingtel.com -- the public SIP phone interoperability test server _______________________________________________ Sip-implementors mailing list [email protected] https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors
