<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.2180" name=GENERATOR></HEAD>
<BODY>
<DIV>Hi all,</DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV>I need to bother about crazy client by considering “Flood” detection
technique. I can do it by using OpenSER <A
href="http://kamailio.org/docs/modules/1.2.x/pike.html" target=_blank>Pike</A>
module which helps to keep trace of all (or selected ones) incoming request's IP
source and blocks the ones that exceeded some limit.</DIV>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><FONT face=Arial
size=2></FONT> </P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt">In my case: If the number of SIP
messages from a single IP address to my SIP Proxy exceeds <SPAN
class=421472606-14102008><STRONG>200</STRONG></SPAN> per <SPAN
style="FONT-WEIGHT: bold">minute</SPAN>. Recommended action: Block IP for <SPAN
style="FONT-WEIGHT: bold">2 hours</SPAN>.</P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><FONT face=Arial
size=2></FONT> </P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt">I tried with the pike module but
I’m <SPAN class=421472606-14102008>little bit confused </SPAN>with
sampling, density, and timeout value.</P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><FONT face=Arial
size=2></FONT> </P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt">Please help me with example
configuration by considering my point.</P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt"><FONT face=Arial
size=2></FONT> </P>
<P class=MsoNormal style="MARGIN: 0in 0in 0pt">Thanks,<BR>ARIF</P>
<DIV><FONT face=Arial size=2></FONT> </DIV></BODY></HTML>