Re: [Linphone-developers] Security problem: Linphone for Android

[Johan Pascal]

Hi,
to disable the possibility to receive a local call(or external one when your IP is public...) on tcp or udp, you shall set in your .linphonerc
in the [sip] section
sip_port=0
sip_tcp_port=0

regards,

johan

On 01/04/16 00:09, PAFPAF wrote:

While Linphone for Android is registered with a SIP server, it still receives a call when we…

 

1) call it from anywhere with <SIP ID>@<ip-address of LinPhone client>

2) call it with xyz@<ip-address of LinPhone client> where “xyz” may be any string

 

As some mobile networks use public ip addresses and no firewall, it means Linphone can be reached from anywhere in the world.

We got several calls from SIP scanners which are probably searching for open SIP servers, dialing random numbers.

 

When a SIP client is registered with a SIP server, it is expected to be able to receive calls from that server only.

 

Peter

 

 

_______________________________________________
Linphone-developers mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/linphone-developers