On Wed, Jan 12, 2011 at 10:13:22AM -0600, Kevin P. Fleming wrote:

>His point is valid though... A's registration should not have been
>overwritten until B *successfully* registered. A failed attempt to
>register should have no effect on the existing registration.

Indeed, the avenue for a brute-force DoS (absent something like
fail2ban) is fairly obvious.


--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to