On 27/02/13 21:33, John Levine wrote:
I realize that an ALG is a hack in a router that is supposed to allow SIP packets to go through a NAT router. I also realize that for modern SIP equipment, ALG usually causes more problems than it solves, and that it's described in RFCs 2663, 3424, and others.
What I can't find anywhere is what a SIP ALG actually does to the packets. Is that written down anywhere, or is it just network folklore?
The simple answer is `break stuff`. The marketing answer is `Sip is the next big thing, and we want to say we are "SIP READY" so we put an ALG in`. Technically. The OKish ALGs are passive and sniff the ports for Qos etc. Most NAT passing ones just search and replace the IP addresses in the SIP and SDP. Mainly though, I've seen them swap one IP, but not the other. Or misread the port number. Very basic search and replace rather than properly parsing the messages. Bad idea. -- Tim Bray tim at kooky.org | +44 7966 479015 | http://www.kooky.org Huddersfield, UK