[asterisk-dev] Client Puzzle Protocol in SIP

[Fadil Sutomo]

Hi Tzafrir,

I think Benny is right. The impact will not increase..

So, anyone can give me pointers regarding how to implement client-puzzle in
Asterisk?

Thanks..
Fadil

On Feb 17, 2008 12:11 PM, Benny Amorsen <benny+usenet at amorsen.dk> wrote:

> Tzafrir Cohen <tzafrir.cohen at xorcom.com> writes:
>
> > If this makes the reply to the invite longer, then it has increased the
> > impact of Asterisk as a potential amplifier for DoS attacks (think of
> > the attacker sending 100,000 invites to my PBX with your PBX as the
> > source address)
>
> If it makes the invite itself correspondingly longer, the impact not
> increased.
>
>
> /Benny
>
>
>
> _______________________________________________
> --Bandwidth and Colocation Provided by http://www.api-digital.com--
>
> asterisk-dev mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-dev/attachments/20080217/53556d83/attachment.htm