Re: [SR-Users] SIP Scanning Attacks Experiences

2010-11-19 Thread Daniel-Constantin Mierla
Thanks, I read it in the past, I added a note about it and mentioned that one can use sl_send_reply(200, OK) config for a similar solution. Cheers, Daniel On 11/18/10 3:44 PM, Mark R wrote: This might also be of use if bandwidth is an issue:

Re: [SR-Users] SIP Scanning Attacks Experiences

2010-11-19 Thread Daniel-Constantin Mierla
On 11/18/10 2:57 PM, marius zbihlei wrote: On 11/18/2010 03:59 PM, Fred Posner wrote: On Nov 18, 2010, at 8:49 AM, marius zbihlei wrote: On 11/18/2010 01:58 PM, Daniel-Constantin Mierla wrote: Hello, during the testing period of Kamailio 3.1.0, while running it at voipuser.org, I had the

[SR-Users] SIP Scanning Attacks Experiences

2010-11-18 Thread Daniel-Constantin Mierla
Hello, during the testing period of Kamailio 3.1.0, while running it at voipuser.org, I had the chance to watch live and analyze a SIP scanning attack. Yesterday I noticed another one by looking at Siremis 2.0 charts, therefore I wrote an article with some hints about what you can use to

Re: [SR-Users] SIP Scanning Attacks Experiences

2010-11-18 Thread marius zbihlei
On 11/18/2010 03:59 PM, Fred Posner wrote: On Nov 18, 2010, at 8:49 AM, marius zbihlei wrote: On 11/18/2010 01:58 PM, Daniel-Constantin Mierla wrote: Hello, during the testing period of Kamailio 3.1.0, while running it at voipuser.org, I had the chance to watch live and analyze a

Re: [SR-Users] SIP Scanning Attacks Experiences

2010-11-18 Thread Mark R
This might also be of use if bandwidth is an issue: http://jcs.org/notaweblog/2010/04/11/properly_stopping_a_sip_flood/ Rgds, Mark On Thu, Nov 18, 2010 at 1:57 PM, marius zbihlei marius.zbih...@1and1.rowrote: On 11/18/2010 03:59 PM, Fred Posner wrote: On Nov 18, 2010, at 8:49 AM, marius

Re: [SR-Users] SIP Scanning Attacks Experiences

2010-11-18 Thread Danny Dias
Thanks Daniel...Very nice article!!! 2010/11/18 Daniel-Constantin Mierla mico...@gmail.com: Hello, during the testing period of Kamailio 3.1.0, while running it at voipuser.org, I had the chance to watch live and analyze a SIP scanning attack. Yesterday I noticed another one by looking at