TLS/SRTP is not guaranteed. Since SRTP is still RTP, it is distinguishable by the filters so even if you get TLS to penetrate the filters there is a big possibility that you won't get any audio. You have to find a way to mangle the RTP packets in some way that they won't be recognized by the filters. And so far, the only way it can be done is through proprietary means.
From: varun pratapsingh
Sent: Friday, July 24, 2009 3:57 PM
To: pjsip list
Subject: Re: SIP blocked countries issue. Do any body havethesolution?
Hi Joegen,
So using TLS/SRTP in Pjsip will resolve the issue. Will it be a right choice. Can you guide me something more on this implementation. What are the limitations which you have tried to point out in the your reply in using TLS /SRTP.
Thanks ....
Regards:
Ravi
On Fri, Jul 24, 2009 at 9:33 AM, Joegen Baclor <joegen.baclor at gmail.com> wrote:
In countries that are blocked (mostly in middle east), they are using deep penetration packet analyzers for both SIP and RTP. So changing the ports wont usually work. You might get away with a TLS/SRTP combo but this is an end to end requirement limiting the softphone to only work with providers that support both. Another option would be to install SBC's with proprietary encryption support within the blocked country and in another location where SIP is allowed. This would hide SIP and RTP from the filters. OpenSBC for example works with grandstream proprietary CBCom encryption and is tested to bypass these types of blockage.
Joegen
--------------------------------------------------
From: "Paulo Rog?rio Panhoto" <paulo@xxxxxxxxxxxxxxxxxxxxxx>
Sent: Thursday, July 23, 2009 10:57 PM
To: "pjsip list" <pjsip at lists.pjsip.org>
Subject: Re: SIP blocked countries issue. Do any body have thesolution?
Hello Ravi,
I guess someone might have asked this before: is SIPS also blocked?
varun pratapsingh wrote:
Hi All,
In some countries SIP is blocked means our softphones are not working. Is there any way which can be used to reslove this issue. some peoples are suggesting VPNs but can,t it be like if we do some encryption of our SIP traffic.
Please if any body can give a real solution then it would be a great help.
Regards:
Ravi
------------------------------------------------------------------------
_______________________________________________
Visit our blog: http://blog.pjsip.org
pjsip mailing list
pjsip at lists.pjsip.org
http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
_______________________________________________
Visit our blog: http://blog.pjsip.org
pjsip mailing list
pjsip at lists.pjsip.org
http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
_______________________________________________
Visit our blog: http://blog.pjsip.org
pjsip mailing list
pjsip at lists.pjsip.org
http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
--------------------------------------------------------------------------------
_______________________________________________
Visit our blog: http://blog.pjsip.org
pjsip mailing list
pjsip at lists.pjsip.org
http://lists.pjsip.org/mailman/listinfo/pjsip_lists.pjsip.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.pjsip.org/pipermail/pjsip_lists.pjsip.org/attachments/20090724/c0b331aa/attachment.html>
