27 Apr
2023
27 Apr
'23
5:16 p.m.
Hi Benoît
We use pike in combination with fail2ban.
Log a message -> create a fail2ban rule to block the ip for xxx time.
example:
if ($ua =~ "(friendly-scanner|sipvicious)") {
sl_send_reply("488", "Go away.");
xlog("L_INFO","$ci Blocking traffic from $si\n");
exit;
}
Cool thing is, you can write a log entry from every part in your
kamailio-config, and then fail2ban does the rest.
Regards
Stefan
Am 27.04.23 um 16:07 schrieb Benoit Panizzon:
Hi
Before I go too deep into try and error, I guess others have been there
too.
What are sensible value you use for the pike module to detect /
mitigate abusive behavior, especially dictionary attacks?
Are there better solutions that the pike module?
Mit freundlichen Grüssen
-Benoît Panizzon-