Terry Wilson 480f412858 Make contactdeny apply to src ip when nat=yes ...

chan_sip's "contactdeny" feature screens the "to be registered contact".
In case of nat=yes it should not use the address information from the
Contact header (which is not used at all for routing), but the source
IP address of the request.

Thus, if nat=yes and a client sends a request from a denied IP address
(e.g. by spoofing the src-IP address) it can bypass the screening.

This commit makes contactdeny apply to the src ip when nat=yes instead.

(closes issue #17276)
Reported by: klaus3000
Patches: 
      patch-asterisk-trunk-contactdeny.txt uploaded by klaus3000 (license 65)
Tested by: klaus3000


git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@270658 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2010-06-15 20:18:04 +00:00

..

h323

Comment out a rule that likes to run implicitly unnecessarily, breaking builds

2010-06-03 14:48:09 +00:00

misdn

Enhancements to connected line and redirecting work.

2010-05-17 15:36:31 +00:00

sip

Add SRTP support for Asterisk

2010-06-08 05:29:08 +00:00

xpmr

AST-2009-005

2009-08-10 19:20:57 +00:00

chan_agent.c

Add option to get untruncated channel name from AGENT function.

2010-06-14 19:41:43 +00:00

chan_alsa.c

fixes adaptive jitterbuffer configuration

2010-03-02 19:08:38 +00:00

chan_bridge.c

Expand codec bitfield from 32 bits to 64 bits.

2009-11-04 14:05:12 +00:00

chan_console.c

Fix an off by one error that causes a crash.

2010-05-13 15:36:12 +00:00

chan_dahdi.c

Extract sig_ss7_init_linkset() to sig_ss7.

2010-06-14 20:51:09 +00:00

chan_gtalk.c

fixes adaptive jitterbuffer configuration

2010-03-02 19:08:38 +00:00

chan_h323.c

Consolidate ast_channel.cid.cid_rdnis into ast_channel.redirecting.from.number.

2010-04-03 02:12:33 +00:00

chan_iax2.c

Add SRTP support for Asterisk

2010-06-08 05:29:08 +00:00

chan_jingle.c

fixes adaptive jitterbuffer configuration

2010-03-02 19:08:38 +00:00

chan_local.c

Enhancements to connected line and redirecting work.

2010-05-17 15:36:31 +00:00

chan_mgcp.c

Only change the RTP ssrc when we see that it has changed

2010-03-12 22:04:51 +00:00

chan_misdn.c

Enhancements to connected line and redirecting work.

2010-05-17 15:36:31 +00:00

chan_multicast_rtp.c

Expand codec bitfield from 32 bits to 64 bits.

2009-11-04 14:05:12 +00:00

chan_nbs.c

Missed these two channel drivers on the codec_bits merge

2009-11-06 19:38:33 +00:00

chan_oss.c

Merged revisions 269495 via svnmerge from

2010-06-09 22:19:20 +00:00

chan_phone.c

More 32->64 bit codec conversions.

2009-12-01 20:27:37 +00:00

chan_phone.h

rename DialTone.h to chan_phone.h because chan_phone.c is the only file using it

2008-05-28 20:00:21 +00:00

chan_sip.c

Make contactdeny apply to src ip when nat=yes

2010-06-15 20:18:04 +00:00

chan_skinny.c

Ignore Redial softkey when no previous dialed number is known

2010-04-02 06:45:54 +00:00

chan_unistim.c

fixes adaptive jitterbuffer configuration

2010-03-02 19:08:38 +00:00

chan_usbradio.c

Don't stop Asterisk if chan_usbradio isn't configured.

2010-06-03 17:31:41 +00:00

chan_vpb.cc

Formats are inconsistent between even 32-bit and 64-bit Linux. Use casts to ensure both compile.

2010-01-21 15:14:55 +00:00

console_board.c

import the recent additions for video console into trunk,

2008-06-29 21:17:14 +00:00

console_gui.c

Const-ify the world (or at least a good part of it)

2009-05-21 21:13:09 +00:00

console_video.c

(closes issue #13557)

2008-10-09 14:17:33 +00:00

console_video.h

implement the 'freeze' function for incoming frames;

2008-06-30 15:45:15 +00:00

iax2-parser.c

Informational message, not an error.

2010-01-28 20:00:09 +00:00

iax2-parser.h

Expand codec bitfield from 32 bits to 64 bits.

2009-11-04 14:05:12 +00:00

iax2-provision.c

AST-2009-005

2009-08-10 19:20:57 +00:00

iax2-provision.h

…

iax2.h

Expand codec bitfield from 32 bits to 64 bits.

2009-11-04 14:05:12 +00:00

Makefile

Extract sig_ss7 out of chan_dahdi.

2010-06-07 20:04:42 +00:00

misdn_config.c

Enhancements to connected line and redirecting work.

2010-05-17 15:36:31 +00:00

sig_analog.c

The inalarm flag is not passed up from the sig_analog and sig_pri submodules.

2010-05-04 21:10:58 +00:00

sig_analog.h

The inalarm flag is not passed up from the sig_analog and sig_pri submodules.

2010-05-04 21:10:58 +00:00

sig_pri.c

Add digit manipulation tag support to chan_dahdi/sig_pri like chan_misdn.

2010-06-14 15:55:35 +00:00

sig_pri.h

Add digit manipulation tag support to chan_dahdi/sig_pri like chan_misdn.

2010-06-14 15:55:35 +00:00

sig_ss7.c

Extract sig_ss7_init_linkset() to sig_ss7.

2010-06-14 20:51:09 +00:00

sig_ss7.h

Extract sig_ss7_init_linkset() to sig_ss7.

2010-06-14 20:51:09 +00:00

vcodecs.c

Const-ify the world (or at least a good part of it)

2009-05-21 21:13:09 +00:00

vgrabbers.c

free memory used by the x11 grabber when closing it.

2008-07-14 16:50:54 +00:00