[asterisk-users] Binding to 0.0.0.0 a security risk?

Josh mojo1736 at privatedemail.net
Tue Feb 7 11:41:45 CST 2012


> As far as I know, Asterisk would use the default Linux/Unix routing 
> algorithms to send packets out, in which case yes: responses may not go 
> out on the same interface packets were received on.
>
> E.g. if you receive packets with non-LAN IP addresses on eth0, while 
> your default route is set to eth1, in the absence of custom routing 
> Linux will send the responses over eth1.
>   
Thanks, another mystery solved then - Asterisk does rely on the 
Linux/Unix routing, in which case I would definitely need to take care 
of the SNAT/DNAT and proper routing/forwarding of packets between 
interfaces using core Linux/Unix tools. Am I correct in thinking that?




More information about the asterisk-users mailing list