Chapter 10. SIP Services

Open Port 6891 For File Transfer

Messenger clients do not always use the ports that are negotiated in the SIP signaling. In particular, the File Transfer function always uses the same port, regardless of what is nego- tiated. To make File Transfer work through the Telecommuting Module you must open port 6891, the Messenger File Transfer port.

You only need to do this if File Transfers are made between clients on different networks; if transfers are always only made between clients on the same network, no extra ports need to be opened.

Note: If more than one Messenger client performs file transfer through the Telecommuting Module at the same time, they could end up sending to each other’s peers instead of their own. An attacker could possibly use this to intercept transfered files; don’t use this mechanism to transfer sensistive data.

Here, you select to open port 6891 automatically or not. The recommended setting is not to open it unless negotiated.

Allow RFC 2069 Authentication

Some SIP units can’t handle Digest authentication as described in RFC 2617, but they still do authentication. 3Com VCX IP Telecommuting Module can allow the simpler form of authentication described in RFC 2069 to be able to interoperate with these units.

To allow this can decrease security. Use it only if units in your system need it.

Select if authentication according to RFC 2069 should be allowed (On) or not (Off). It is recommended to keep this setting off.

Convert Escaped Whitespaces in URIs

Sometimes, whitespaces in incoming URIs are escaped, which make them look like "%20". This is most common in URIs in the Refer-To header used by the REFER method. As some other SIP devices cannot properly decrypt these escaped whitespaces, the Telecommuting Module can be made to convert them back to normal whitespaces.

173