<!DOCTYPE html>
<html>
<head>
<title></title>
<style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}</style>
</head>
<body><div style="font-family:Arial;">TCP is definitely the way to go nowadays. We use TCP on Grandstreams all the time, especially on their ATAs. Speaking of which, switching from UDP to TCP will reduce your customers' support calls dramatically.<br></div>
<div style="font-family:Arial;"><br></div>
<div style="font-family:Arial;">I don't know the current status over there, but 2 years ago RingCentral moved to TCP as well: <a href="https://netstorage.ringcentral.com/documents/sip.pdf">https://netstorage.ringcentral.com/documents/sip.pdf</a><br></div>
<div style="font-family:Arial;"><br></div>
<div style="font-family:Arial;">Aviv</div>
<div><br></div>
<div><br></div>
<div>On Wed, Aug 8, 2018, at 12:21 PM, Carlos Alvarez wrote:<br></div>
<blockquote type="cite"><div dir="ltr"><div style="font-family:Arial;">It has, but it wasn't that long ago that people were still having challenges. Our preferred phone vendor, Grandstream, still generally advises against it.<br></div>
<div><br></div>
<div>So...who else on the list uses TCP and has any comments about it?<br></div>
<div><br></div>
</div>
<div style="font-family:Arial;"><br></div>
<div defang_data-gmailquote="yes"><div dir="ltr">On Wed, Aug 8, 2018 at 11:12 AM Alex Balashov <<a href="mailto:abalashov@evaristesys.com">abalashov@evaristesys.com</a>> wrote:<br></div>
<blockquote defang_data-gmailquote="yes" style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204, 204, 204);padding-left:1ex;"><div style="font-family:Arial;">That has changed greatly since 2005.<br></div>
<div style="font-family:Arial;"> <br></div>
<div style="font-family:Arial;"> On August 8, 2018 2:07:50 PM EDT, Carlos Alvarez <<a href="mailto:caalvarez@gmail.com">caalvarez@gmail.com</a>> wrote:<br></div>
<div style="font-family:Arial;"> >That's a change I've never investigated. Or more precisely, haven't<br></div>
<div style="font-family:Arial;"> >investigated since the days when the advice for doing it was "good<br></div>
<div style="font-family:Arial;"> >luck!!"<br></div>
<div style="font-family:Arial;"> ><br></div>
<div style="font-family:Arial;"> ><br></div>
<div style="font-family:Arial;"> >On Wed, Aug 8, 2018 at 11:00 AM Alex Balashov<br></div>
<div style="font-family:Arial;"> ><<a href="mailto:abalashov@evaristesys.com">abalashov@evaristesys.com</a>><br></div>
<div style="font-family:Arial;"> >wrote:<br></div>
<div style="font-family:Arial;"> ><br></div>
<div style="font-family:Arial;"> >> I would have to agree with Calvin. Just use TCP.<br></div>
<div style="font-family:Arial;"> >><br></div>
<div style="font-family:Arial;"> >> On August 8, 2018 1:58:47 PM EDT, Calvin Ellison<br></div>
<div style="font-family:Arial;"> ><<a href="mailto:calvin.ellison@voxox.com">calvin.ellison@voxox.com</a>><br></div>
<div style="font-family:Arial;"> >> wrote:<br></div>
<div style="font-family:Arial;"> >> >Using TCP or TLS would avoid open NAT issue, and can cure some<br></div>
<div style="font-family:Arial;"> >naughty<br></div>
<div style="font-family:Arial;"> >> >SIP<br></div>
<div style="font-family:Arial;"> >> >ALG issues as well, assuming you want to tolerate the overhead.<br></div>
<div style="font-family:Arial;"> >> ><br></div>
<div style="font-family:Arial;"> >> >For UDP, we've used both Digest and Source request validation with<br></div>
<div style="font-family:Arial;"> >> >Polycom<br></div>
<div style="font-family:Arial;"> >> >devices. Source validation is probably the easiest route, assuming<br></div>
<div style="font-family:Arial;"> >the<br></div>
<div style="font-family:Arial;"> >> >UA<br></div>
<div style="font-family:Arial;"> >> >doesn't need to receive calls from anyone but its proxy or<br></div>
<div style="font-family:Arial;"> >registrar.<br></div>
<div style="font-family:Arial;"> >> >Digest (nonce challenge) is better if you want to accept calls from<br></div>
<div style="font-family:Arial;"> >> >anyone<br></div>
<div style="font-family:Arial;"> >> >who knows your password, but we had an issue with a softswitch that<br></div>
<div style="font-family:Arial;"> >> >would<br></div>
<div style="font-family:Arial;"> >> >properly handle auth channel to INVITE but choked when a BYE was<br></div>
<div style="font-family:Arial;"> >> >challenged.<br></div>
<div style="font-family:Arial;"> >> ><br></div>
<div style="font-family:Arial;"> >> ><br></div>
<div style="font-family:Arial;"> >> ><br></div>
<div style="font-family:Arial;"> >> ><br></div>
<div style="font-family:Arial;"> >> >Regards,<br></div>
<div style="font-family:Arial;"> >> ><br></div>
<div style="font-family:Arial;"> >> >*Calvin Ellison*<br></div>
<div style="font-family:Arial;"> >> >Voice Operations Engineer<br></div>
<div style="font-family:Arial;"> >> ><a href="mailto:calvin.ellison@voxox.com">calvin.ellison@voxox.com</a><br></div>
<div style="font-family:Arial;"> >> >+1 (213) 285-0555<br></div>
<div style="font-family:Arial;"> >> ><br></div>
<div style="font-family:Arial;"> >> >-----------------------------------------------<br></div>
<div style="font-family:Arial;"> >> >*<a href="http://voxox.com">voxox.com</a> <<a href="http://www.voxox.com/">http://www.voxox.com/</a>> *<br></div>
<div style="font-family:Arial;"> >> >5825 Oberlin Drive, Suite 5<br></div>
<div style="font-family:Arial;"> >> >San Diego, CA 92121<br></div>
<div style="font-family:Arial;"> >> >[image: Voxox]<br></div>
<div style="font-family:Arial;"> >> ><br></div>
<div style="font-family:Arial;"> >> >On Wed, Aug 8, 2018 at 10:43 AM, Carlos Alvarez<br></div>
<div style="font-family:Arial;"> ><<a href="mailto:caalvarez@gmail.com">caalvarez@gmail.com</a>><br></div>
<div style="font-family:Arial;"> >> >wrote:<br></div>
<div style="font-family:Arial;"> >> ><br></div>
<div style="font-family:Arial;"> >> >> Do most of you have the phones authenticate incoming calls? We<br></div>
<div style="font-family:Arial;"> >> >haven't<br></div>
<div style="font-family:Arial;"> >> >> been, but occasionally find a router that has unfiltered full cone<br></div>
<div style="font-family:Arial;"> >> >NAT<br></div>
<div style="font-family:Arial;"> >> >> (Cisco) or that puts one phone on 5060 with no filtering by IP. <br></div>
<div style="font-family:Arial;"> >The<br></div>
<div style="font-family:Arial;"> >> >result<br></div>
<div style="font-family:Arial;"> >> >> is that the phone will start ringing at random as script kiddies<br></div>
<div style="font-family:Arial;"> >hit<br></div>
<div style="font-family:Arial;"> >> >the IP<br></div>
<div style="font-family:Arial;"> >> >> and port 5060 trying to find servers to exploit. I don't see a<br></div>
<div style="font-family:Arial;"> >> >downside to<br></div>
<div style="font-family:Arial;"> >> >> changing to auth, but not having done it outside of a few tests of<br></div>
<div style="font-family:Arial;"> >a<br></div>
<div style="font-family:Arial;"> >> >small<br></div>
<div style="font-family:Arial;"> >> >> number of phones, I figured I would ask.<br></div>
<div style="font-family:Arial;"> >> >><br></div>
<div style="font-family:Arial;"> >> >><br></div>
<div style="font-family:Arial;"> >> >> _______________________________________________<br></div>
<div style="font-family:Arial;"> >> >> VoiceOps mailing list<br></div>
<div style="font-family:Arial;"> >> >> <a href="mailto:VoiceOps@voiceops.org">VoiceOps@voiceops.org</a><br></div>
<div style="font-family:Arial;"> >> >> <a href="https://puck.nether.net/mailman/listinfo/voiceops">https://puck.nether.net/mailman/listinfo/voiceops</a><br></div>
<div style="font-family:Arial;"> >> >><br></div>
<div style="font-family:Arial;"> >> >><br></div>
<div style="font-family:Arial;"> >><br></div>
<div style="font-family:Arial;"> >><br></div>
<div style="font-family:Arial;"> >> -- Alex<br></div>
<div style="font-family:Arial;"> >><br></div>
<div style="font-family:Arial;"> >> --<br></div>
<div style="font-family:Arial;"> >> Sent via mobile, please forgive typos and brevity.<br></div>
<div style="font-family:Arial;"> >> _______________________________________________<br></div>
<div style="font-family:Arial;"> >> VoiceOps mailing list<br></div>
<div style="font-family:Arial;"> >> <a href="mailto:VoiceOps@voiceops.org">VoiceOps@voiceops.org</a><br></div>
<div style="font-family:Arial;"> >> <a href="https://puck.nether.net/mailman/listinfo/voiceops">https://puck.nether.net/mailman/listinfo/voiceops</a><br></div>
<div style="font-family:Arial;"> >><br></div>
<div style="font-family:Arial;"> <br></div>
<div style="font-family:Arial;"> <br></div>
<div style="font-family:Arial;"> -- Alex<br></div>
<div style="font-family:Arial;"> <br></div>
<div style="font-family:Arial;"> --<br></div>
<div style="font-family:Arial;"> Sent via mobile, please forgive typos and brevity. <br></div>
<div style="font-family:Arial;"> _______________________________________________<br></div>
<div style="font-family:Arial;"> VoiceOps mailing list<br></div>
<div style="font-family:Arial;"> <a href="mailto:VoiceOps@voiceops.org">VoiceOps@voiceops.org</a><br></div>
<div style="font-family:Arial;"> <a href="https://puck.nether.net/mailman/listinfo/voiceops">https://puck.nether.net/mailman/listinfo/voiceops</a><br></div>
</blockquote></div>
<div><u>_______________________________________________</u><br></div>
<div>VoiceOps mailing list<br></div>
<div><a href="mailto:VoiceOps@voiceops.org">VoiceOps@voiceops.org</a><br></div>
<div><a href="https://puck.nether.net/mailman/listinfo/voiceops">https://puck.nether.net/mailman/listinfo/voiceops</a><br></div>
</blockquote><div style="font-family:Arial;"><br></div>
</body>
</html>