<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>It is not very clear what you look for .. you don't know where
the log messages are written? Or you want to see the list of ip
addresses from pike module?</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div class="moz-cite-prefix">On 18.02.19 20:01, PICCORO McKAY Lenz
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CALci+FTnTM+j8NbxOQHbu5tOKbyi9Vc9afvMA3QicX_fWJ4KHw@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div>i configure rules for routing banned ip and i want
to see where i can autdit this issues.. i mean where i
can automatically define a cron setup that grep those
logs definitios.. where are loggin those all?<br>
<br>
my rules are:<br>
<br>
</div>
define at begining of kamailio.cfg "#!WITH_ANTIFLOOD",
later add:<br>
<br>
#!ifdef WITH_ANTIFLOOD<br>
loadmodule "htable.so"<br>
loadmodule "pike.so"<br>
<br>
modparam("pike", "sampling_time_unit", 2)<br>
modparam("pike", "reqs_density_per_unit", 16)<br>
modparam("pike", "remove_latency", 4)<br>
modparam("htable", "htable",
"ipban=>size=8;autoexpire=300;")<br>
#!endif<br>
<br>
</div>
<div>later routing definitions:<br>
<br>
route[REQINIT] {<br>
if(src_ip!=myself) {<br>
if($sht(ipban=>$si)!=$null) {<br>
xdbg("request from blocked IP - $rm from $fu
(IP:$si:$sp)\n");<br>
exit;<br>
}<br>
if (!pike_check_req()) {<br>
xlog("L_ALERT","ALERT: pike blocking $rm
from $fu (IP:$si:$sp)\n");<br>
$sht(ipban=>$si) = 1;<br>
exit;<br>
}<br>
}<br>
if($ua =~ "friendly-scanner|sipcli|VaxSIPUserAgent")
{<br>
xlog("L_ALERT","ALERT: friendly canings from
$fu (IP:$si:$sp)\n");<br>
exit;<br>
}<br>
if (!mf_process_maxfwd_header("10")) {<br>
sl_send_reply("483","Too Many Hops");<br>
exit;<br>
}<br>
if(is_method("OPTIONS") && uri==myself
&& $rU==$null) {<br>
sl_send_reply("200","Keepalive");<br>
exit;<br>
}<br>
if(!sanity_check("1511", "7")) {<br>
xlog("Malformed SIP message from $si:$sp\n");<br>
exit;<br>
}<br>
}<br>
</div>
<div dir="ltr">
<div><br clear="all">
<div>
<div>
<div dir="ltr" class="gmail_signature"><font
color="#888888">Lenz McKAY Gerardo (PICCORO)</font>
<div><font color="#888888"><a
href="http://qgqlochekone.blogspot.com"
target="_blank" moz-do-not-send="true">http://qgqlochekone.blogspot.com</a></font></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org">sr-users@lists.kamailio.org</a>
<a class="moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Kamailio World Conference - May 6-8, 2019 -- <a class="moz-txt-link-abbreviated" href="http://www.kamailioworld.com">www.kamailioworld.com</a>
Kamailio Advanced Training - Mar 4-6, 2019 in Berlin; Mar 25-27, 2019, in Washington, DC, USA -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a></pre>
</body>
</html>