[asterisk-dev] AST-2008-011: Traffic amplification in IAX2 firmware provisioning system

[Tilghman Lesher]

On Tuesday 22 July 2008 18:30:02 Edwin Groothuis wrote:
> Will you write one too for the SIP traffic amplification feature?
>
> http://lists.digium.com/pipermail/asterisk-dev/2006-April/020038.html
>
> I's not 25 times as this one, only 15 times. But still...

You're also not accounting for IP and UDP headers.  44 vs. 251 is only a
factor of 5.  That's not a huge attack vector.

-- 
Tilghman