[OpenSIPS-Users] Opensips security problem

2010-10-08 Thread James Mbuthia
Hi, Am having a problem with someone trying to use my opensips to relay calls. Below is a snippet of my log file Oct 8 08:50:32 CL-T020-483CL /usr/local/sbin/opensips[4680]: DBG:core:parse_msg: SIP Request: Oct 8 08:50:32 CL-T020-483CL /usr/local/sbin/opensips[4680]: DBG:core:parse_msg: method

Re: [OpenSIPS-Users] Opensips security problem

2010-10-08 Thread Bogdan-Andrei Iancu
Hi James, use the domain module to list in DB all your local domains and check in script if the domain in RURI is local or not. Use http://www.opensips.org/html/docs/modules/1.6.x/domain.html#id227177 If the domain is not local, reject the registration Regards, Bogdan James Mbuthia wrot

Re: [OpenSIPS-Users] Opensips security problem

2010-10-08 Thread James Mbuthia
Thanks, will try it and get back to you. james On Fri, Oct 8, 2010 at 5:10 PM, Bogdan-Andrei Iancu wrote: > Hi James, > > use the domain module to list in DB all your local domains and check in > script if the domain in RURI is local or not. Use > http://www.opensips.org/html/docs/modules/

Re: [OpenSIPS-Users] Opensips security problem

2010-10-08 Thread logan
Check out fail2ban for monitoring your log file and integrating with ipatables. http://www.opensips.org/Resources/DocsTutFail2ban -- View this message in context: http://opensips-open-sip-server.1449251.n2.nabble.com/Opensips-security-problem-tp5614818p5616940.html Sent from the OpenSIPS - User