On Wed, Jan 12, 2011 at 10:13:22AM -0600, Kevin P. Fleming wrote: >His point is valid though... A's registration should not have been >overwritten until B *successfully* registered. A failed attempt to >register should have no effect on the existing registration.
Indeed, the avenue for a brute-force DoS (absent something like fail2ban) is fairly obvious. -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users