denial of service attacks for H.225.0 call signalling using T CP and UDP transport

Matt Holdrege matt at ASCEND.COM
Fri May 1 10:39:58 EDT 1998


At 11:44 AM 5/1/98 +0100, Andrew Draper WVdevmt-WS wrote:
>I think there is a more important issue here.  A UDP setup message sent to
>a H.323 endpoint will cause a (virtual) telephone to ring, or will leave
>a message on the answering machine etc.  If SETUP messages can be carried
>over UDP then I can do this with a single packet with a faked IP address.

If you are concerned about faking IP addresses, you should use read RFC 1826.

Matt Holdrege           http://www.ascend.com   matt at ascend.com



More information about the sg16-avd mailing list