[EMAIL PROTECTED] schrieb:
>    From: Klaus Darilion <[EMAIL PROTECTED]>
> 
>    What is the response code for a SIP request which was routed to the
>    wrong proxy, e.g. "INVITE sip:[EMAIL PROTECTED]" was wrongly routed to
>    example.com SIP proxy. How should example.com reject the request?
>    404 or is there a better code - something like "I am not authoritative
>    for this domain"?
> 
> You should first consider if you want to give an error, rather than
> simply forwarding the request to the proxy for the domain in the
> request-URI.  In many cases, a proxy will receive requests from
> various sources, and not all of the requests will be destined for the
> domain that "owns" the proxy.

This advice is horribly. Just forwarding the request means that the 
proxy is an open relay, like open SMTP relays [1], and opens the door 
for SPIT and various other kinds of attacks.

Of course forwarding will be done if the proxy belongs somehow to the 
domain (e.g. an outbound proxy should forward requests to the registrar 
- but only for the domains it belongs to)

regards
klaus

[1] http://en.wikipedia.org/wiki/Open_mail_relay
_______________________________________________
Sip-implementors mailing list
[email protected]
https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors

Reply via email to