[asterisk-bugs] [JIRA] (ASTERISK-19716) Don't validate Contact URI hostpart when nat=yes

Joshua Colp (JIRA) noreply at issues.asterisk.org
Tue Dec 19 06:01:08 CST 2017


     [ https://issues.asterisk.org/jira/browse/ASTERISK-19716?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Joshua Colp updated ASTERISK-19716:
-----------------------------------

    Affects Version/s: 13.18.4

> Don't validate Contact URI hostpart when nat=yes
> ------------------------------------------------
>
>                 Key: ASTERISK-19716
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-19716
>             Project: Asterisk
>          Issue Type: Improvement
>      Security Level: None
>          Components: Channels/chan_sip/Interoperability
>    Affects Versions: 1.8.11.0, 13.18.4
>            Reporter: Iñaki Baz Castillo
>            Severity: Minor
>
> Asterisk 1.8 validates the host in the Contact URI of a REGISTER/INVITE. Such a URI host must be a valid IP address or a *resolvable* hostname (via DNS A/AAAA) for Asterisk to accept the request. This is not a real requirement in RFC 3261.
> This validation makes sense for the case in which such a URI will be used for routing requests to the peer, but it makes no sense at all (it's useless) when the peer is configured with nat=yes (so the Contact URI is ignored and instead the real source IP:port used for sending outgoing requests to the peer).
> The problem is that it avoids some cases in which the SIP client sets a non resolvable domain in its Contact URI (for example "sip:alice at idsukjdsf.invalid;transport=ws"), which is expected to occur in SIP over WebSocket access due to the fact that JavaScript running in web browsers doesn't know the source IP:port from which the WebSocket connection has been made. In these cases, using a .invalid domain (RFC 2606) seems much more ellegant than inventing a random IP or using a resolvable domain (google.com?).



--
This message was sent by Atlassian JIRA
(v6.2#6252)



More information about the asterisk-bugs mailing list