Forums Read-only archive

Want to reject/block undesired packets.

4 posts · Brekeke SIP Server Forum

ambrosio Original post
1. Brekeke Product Name and version: 2.4.7.3

2. Java version: 1.5

3. OS type and the version: Windows and Linux

4. UA (phone), gateway or other hardware/software involved:

5. Select your network pattern from http://www.brekeke-sip.com/bbs/network/ ... terns.html :

6. Your problem:

There are many undesired SIP packets sent from "friendly-scanner" and "sundayddr".
How can I reject and block them?

Thank you
hope
matching
$request=^INVITE
User-Agent=friendly-scanner|sundayddr

deploy
$action=403
james
- Refer the section "8. Security" on the document
http://www.brekeke-sip.com/download/bss ... min_en.pdf

- Use the Address Filtering at [Configuration] > [System] > [Address Filtering].
If you have list of trusted IP addresses, select the "allow" in the [IP address filter], and set these IP addresses in the [Filter pattern].
For example: ^172.16.0.10$|^172.16.0.20$|^192.168.0.+$
(Refer the section "3) Address Filtering" for more details.)

- Use a firewall in the front of SIP Server to block unknown remote IP address. (If possible)

- Use the latest version of Brekeke SIP Server.

- Use the following DialPlan rules to reject such an attacking packet.
ambrosio
Thanks!