Slashdot Mirror

Perhaps you should include engineers from the real world in your deliberations. The IETF has consistently and adamantly refused to accept that NATs exist for security reasons (NOT JUST TO SAVE ADDRESSES!!) and are not going to go away with IPv6. In that regard, please stop inventing protocols that require a masters degree thesis to pass through NATs. (Thesis here: http://www.minisip.org/publications/Thesis_LaTorreYurkov_feb2006.pdf)

Perhaps, many within the IETF understand that NATs exist to generate more address space and they also provide some firewall-like security features. Perhaps some of them might even think that when the additional address space needs are unnecessary, the use of NATs as a firewall is also unnecessary. You might even just use, I don't know, something that is explicitly a firewall and not bother NATing.

If you really want security, having a device which functions explicitly for security might be better than, "Hey, I'm doing this NAT thing because I want more address space at home instead of that stinking single static (most people dynamic, sigh) IP my ISP is giving me. But now that I have 18 quintillion IP addresses at home I can't possibly get rid of NAT and use a firewall that blocks incoming connections because, ..., Bueller?"

Perhaps you should include engineers from the real world in your deliberations. The IETF has consistently and adamantly refused to accept that NATs exist for security reasons (NOT JUST TO SAVE ADDRESSES!!) and are not going to go away with IPv6. In that regard, please stop inventing protocols that require a masters degree thesis to pass through NATs. (Thesis here: http://www.minisip.org/publications/Thesis_LaTorreYurkov_feb2006.pdf)

What are the "security reasons" for NAT vs SPI? What is the difference?

Yes, yes there are.

Twinkle (Linux) supports both SRTP and ZRTP.
Minisip and Minisplat (both Linux) presently support SRTP and are working toward ZRTP support.
Eyebeam (Windows) supports SRTP
ZFone (Windows, Linux, MacOSX) uses ZRTP and can work with any SIP-based software (because it intercepts and encrypts the stream).
OpenWengo (Windows, Linux) is in the process of implementing SRTP, with some automated key exchange, and later ZRTP is planned.

So really, the answer is: yes, yes there are implementations.

Tapioca, Gtalk, and Gizmo do not support true SIP connections on the Nokia 770, even though they are "based on SIP"?

minisip is trying to update their client for maemo 2.0 (nokia 770):
http://lists.minisip.org/pipermail/minisip-users/2 006-July/thread.html#1175

i plan replace my office phone with a nokia 770 once a SIP client is available.

VoIP not only needs to catch up but also be open like email, and unlike the divided IM space.
Unfortunately Skype is not the application which connects to an open network.

Only applications like Gizmo http://www.gizmoproject.com/ and many other ones (which I don't use) connect to the International Standard-compliant Protocol known as SIP.

If you want voice chat (VoIP) on Linux then you have a good selection too (I don't know which are SIP compliant and which are not though):

http://www.phonegaim.com/
http://cockatoo.mozdev.org/
http://www.gizmoproject.com/
http://www.linphone.org/
http://www.wirlab.net/kphone/
http://www.minisip.org/
http://www.sflphone.org/
http://www.sipfoundry.org/
http://www.twinklephone.com/
http://www.openwengo.com/
http://yate.null.ro/
http://www.divmod.org/projects/shtoom

How about xten, firefly, pulver, sjphone, sflphone, minisip, kphone, linphone, phonegaim? This is just the software I know of, there are probably many more that other people can add to the list. Which that would suit you depends of course on what your needs are.

Minisip
M5T Safe
snom 190

Also, the newest firmware for the SPA-1001 seems to have some support for encryption, though it's not well documented yet.

I can't make any specific PPC / big endian recommendations, as I don't have a big endian machine. However, I've played with Linphone and it worked alright. Another one I've come across recently is minisip, which looks pretty good, although I haven't tried it.

For some others to look at, try this Freshmeat search - sip