Want to reject/block undesired packets.

Discuss any topic about Brekeke SIP Server.

Moderator: Brekeke Support Team

Post Reply
ambrosio
Posts: 215
Joined: Thu Mar 27, 2008 12:20 pm

Want to reject/block undesired packets.

Post by ambrosio »

1. Brekeke Product Name and version: 2.4.7.3

2. Java version: 1.5

3. OS type and the version: Windows and Linux

4. UA (phone), gateway or other hardware/software involved:

5. Select your network pattern from http://www.brekeke-sip.com/bbs/network/ ... terns.html :

6. Your problem:

There are many undesired SIP packets sent from "friendly-scanner" and "sundayddr".
How can I reject and block them?

Thank you
hope
Posts: 862
Joined: Tue Jan 15, 2008 4:08 pm

Post by hope »

matching
$request=^INVITE
User-Agent=friendly-scanner|sundayddr

deploy
$action=403
james
Posts: 501
Joined: Mon Dec 10, 2007 12:56 pm

Post by james »

- Refer the section "8. Security" on the document
http://www.brekeke-sip.com/download/bss ... min_en.pdf

- Use the Address Filtering at [Configuration] > [System] > [Address Filtering].
If you have list of trusted IP addresses, select the "allow" in the [IP address filter], and set these IP addresses in the [Filter pattern].
For example: ^172.16.0.10$|^172.16.0.20$|^192.168.0.+$
(Refer the section "3) Address Filtering" for more details.)

- Use a firewall in the front of SIP Server to block unknown remote IP address. (If possible)

- Use the latest version of Brekeke SIP Server.

- Use the following DialPlan rules to reject such an attacking packet.
ambrosio
Posts: 215
Joined: Thu Mar 27, 2008 12:20 pm

Post by ambrosio »

Thanks!
Post Reply