[asterisk-dev] [PATCH] Silently drop non-conformingcirpack keep-alive packets

[Jeffrey C. Ollie]

If you are using Linux and have a recent enough kernel, it should be
possible to drop packets like these using iptables:

iptables -A INPUT -p udp -m udp --dport 5060 -m string --string "Cirpack KeepAlive Packet" -j DROP

The above is completely untested, but that should get you started.  I'm
sure that similar firewall rules are possible on other platforms.

On Wed, 2006-05-31 at 21:43 +0500, Anton wrote:
> If anyone know about similar behaviour of switches from 
> other vendors, that might be reasonable to make a 
> configuration section which would allow preconfiguring of 
> ingnorance of the frames of certain types/content. As I see 
> from the code - it's trivial.
> 
> On 31 May 2006 20:40, Paul Cadach wrote:
> > Hello,
> >
> > Kevin P. Fleming wrote:
> > > > A packet is sent every 15s, causing Asterisk to write
> > > > the same line in the logs every 15s too. The
> > > > following hack ignores those packets. I do not know
> > > > whether this should be included in the mainstream
> > > > sources or not. I will report this to Free Telecom,
> > > > hoping that they can do something about it (such as
> > > > contacting Cirpack).
> > >
> > > No, this is completely invalid behavior on their part.
> > > We cannot make code changes to check for this stuff
> > > when it is completely outside the specs.
> >
> > This is not compatibility but interoperability issue, so
> > support of sorts of implementation-specific behaviours
> > would be very helpful.
> >
> >
> > WBR,
> > Paul.
> >
> > _______________________________________________
> > --Bandwidth and Colocation provided by Easynews.com --
> >
> > asterisk-dev mailing list
> > To UNSUBSCRIBE or update options visit:
> >    http://lists.digium.com/mailman/listinfo/asterisk-dev
> _______________________________________________
> --Bandwidth and Colocation provided by Easynews.com --
> 
> asterisk-dev mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-dev
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.digium.com/pipermail/asterisk-dev/attachments/20060531/cf06faed/attachment.pgp