Fixing the attack shield so it doesn't produce attacks... Issue 8265 - never reply...

git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.4@47250 65c4cc65-6c06-0410-ace0-fbb531ad65f3

diff --git a/channels/chan_sip.c b/channels/chan_sip.c
index a5bd3589d7368db8f7f29677062fd42c084f3942..489351155e16a0a23eaa5845d1f3981c5bcd08aa 100644 (file)
--- a/channels/chan_sip.c
+++ b/channels/chan_sip.c
@@ -4310,8 +4310,10 @@ static struct sip_pvt *find_call(struct sip_request *req, struct sockaddr_in *si
        } else if( sip_methods[intended_method].can_create == CAN_CREATE_DIALOG_UNSUPPORTED_METHOD) {
                /* A method we do not support, let's take it on the volley */
                transmit_response_using_temp(callid, sin, 1, intended_method, req, "501 Method Not Implemented");
-       } else if (intended_method != SIP_RESPONSE) {
-               /* This is a request outside of a dialog that we don't know about */
+       } else if (intended_method != SIP_RESPONSE && intended_method != SIP_ACK) {
+               /* This is a request outside of a dialog that we don't know about 
+                       ...never reply to an ACK!
+               */
                transmit_response_using_temp(callid, sin, 1, intended_method, req, "481 Call leg/transaction does not exist");
        }
        /* We do not respond to responses for dialogs that we don't know about, we just drop