Avaya Aura platform trunked into Metaswitch. Avaya sends a BYE message towards Metaswitch and it's being challenged by Metaswitch but the Aura is ignoring the challenge. Does anyone know if there is a way to disable this on the Metaswitch platform? Is it something that is enabled by default?
On 09/28/2011 05:19 PM, Mark Holloway wrote:
Avaya Aura platform trunked into Metaswitch. Avaya sends a BYE message towards Metaswitch and it's being challenged by Metaswitch but the Aura is ignoring the challenge. Does anyone know if there is a way to disable this on the Metaswitch platform? Is it something that is enabled by default?
I wonder how common it is to auth-challenge sequential requests across the board. There is considerable and spirited debate as to whether it's a good idea, or whether it should be done only for initial requests. -- Alex Balashov - Principal Evariste Systems LLC 260 Peachtree Street NW Suite 2200 Atlanta, GA 30303 Tel: +1-678-954-0670 Fax: +1-404-961-1892 Web: http://www.evaristesys.com/
On Wed, Sep 28, 2011 at 4:22 PM, Alex Balashov <abalashov at evaristesys.com> wrote:
On 09/28/2011 05:19 PM, Mark Holloway wrote: I wonder how common it is to auth-challenge sequential requests across the board. ?There is considerable and spirited debate as to whether it's a good idea, or whether it should be done only for initial requests.
A user agent not prepared to cope with auth challenge of BYE or any SIP message excepting CANCEL and ACK is not correctly implementing SIP authentication as specified by RFC3261 and should be fixed.... -- -JH
Yeah, I know. But as you know, it's not always about the standards, but what's de facto in the field. Think 3261 requirement for every stack to support TCP transport. :-) -- This message was painstakingly thumbed out on my mobile, so apologies for brevity, errors, and general sloppiness. Alex Balashov - Principal Evariste Systems LLC 260 Peachtree Street NW Suite 2200 Atlanta, GA 30303 Tel: +1-678-954-0670 Fax: +1-404-961-1892 Web: http://www.evaristesys.com/ On Sep 29, 2011, at 8:53 PM, Jimmy Hess <mysidia at gmail.com> wrote:
On Wed, Sep 28, 2011 at 4:22 PM, Alex Balashov <abalashov at evaristesys.com> wrote:
On 09/28/2011 05:19 PM, Mark Holloway wrote: I wonder how common it is to auth-challenge sequential requests across the board. There is considerable and spirited debate as to whether it's a good idea, or whether it should be done only for initial requests.
A user agent not prepared to cope with auth challenge of BYE or any SIP message excepting CANCEL and ACK is not correctly implementing SIP authentication as specified by RFC3261 and should be fixed....
-- -JH
Mark, How is the trunking done? Is it configured as a PBX object or an individual subscriber. If it is done as a PBX object, with its own configured sip binding then its as simple as flipping the "SIP authentication required" bit in the configured binding to false. be aware this disables all challenges, not just on the bye. If its configured as an individual subscriber which registers, you could disable authentication on the line but then it wont challenge for registers either, and thats bad...... On Wed, 2011-09-28 at 14:19 -0700, Mark Holloway wrote:
Avaya Aura platform trunked into Metaswitch. Avaya sends a BYE message towards Metaswitch and it's being challenged by Metaswitch but the Aura is ignoring the challenge. Does anyone know if there is a way to disable this on the Metaswitch platform? Is it something that is enabled by default? _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
Hi, Probably Metaswitch is configured to handle call drop attacks... Regards MT On Wed, Sep 28, 2011 at 22:19, Mark Holloway <mh at markholloway.com> wrote:
Avaya Aura platform trunked into Metaswitch. ?Avaya sends a BYE message towards Metaswitch and it's being challenged by Metaswitch but the Aura is ignoring the challenge. ?Does anyone know if there is a way to disable this on the Metaswitch platform? ?Is it something that is enabled by default? _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
participants (5)
-
abalashov＠evaristesys.com -
admin＠marcoteixeira.com -
anorexicpoodle＠gmail.com -
mh＠markholloway.com -
mysidia＠gmail.com