Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 464402 - net-misc/asterisk-11.3.0 - DNS based chan_sip denial of service
Summary: net-misc/asterisk-11.3.0 - DNS based chan_sip denial of service
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Server (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Tony Vroon (RETIRED)
URL: https://issues.asterisk.org/jira/brow...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-04-03 19:31 UTC by Jaco Kroon
Modified: 2018-03-15 03:53 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jaco Kroon 2013-04-03 19:31:25 UTC
Tony,

I know the subject is provocative, but I'm afraid I have no better way to describe it.  Short version:

If you use host=some.dns.name or register => user:pass@some.dns.name/fneh then you're liable to have chan_sip die under you should some.dns.name die (ie, all DNS servers authoritative for that name become unreachable and you keep getting timeouts on them).

In my particular case sip.iburst.co.za for which I have 16 register => lines and one host= peer went awol, taking chan_sip with.

No fix from upstream yet (obviously).  I have a work-around.

Figured I'd post the bug here so long to ensure that you're aware of this.  It affects all asterisk-11.* installs as far as I can determine (design flaw).

Reproducible: Always