8 Feb
2024
8 Feb
'24
2:27 p.m.
Hello all,
Is there any way of actually rejecting (RST) NEW tcp connection attempts,
while allowing the ongoing ones to finish naturally?
I’m thinking maybe we can add this feature?
Regards,
David Villasmil
email: david.villasmil.work(a)gmail.com
phone: +34669448337
9 Feb
9 Feb
2:08 p.m.
Hello,
what about e.g. just using something like iptables, nftables etc..?
iptables -A INPUT -p tcp --syn --destination-port <port> -j REJECT --reject-with
icmp-host-prohibited
Cheers,
Henning
From: David Villasmil via sr-users <sr-users(a)lists.kamailio.org>
Sent: Donnerstag, 8. Februar 2024 14:28
To: Kamailio (SER) - Users Mailing List <sr-users(a)lists.kamailio.org>
Cc: David Villasmil <david.villasmil.work(a)gmail.com>
Subject: [SR-Users] Reject TCP SYN
Hello all,
Is there any way of actually rejecting (RST) NEW tcp connection attempts, while allowing
the ongoing ones to finish naturally?
I’m thinking maybe we can add this feature?
Regards,
David Villasmil
email: david.villasmil.work@gmail.com<mailto:david.villasmil.work@gmail.com>
phone: +34669448337
2:42 p.m.
Hey, Henning, yeah I thought about that, but thought that maybe there was a
better way to do it via Kamailio
Thanks!
Regards,
David Villasmil
email: david.villasmil.work(a)gmail.com
phone: +34669448337
On Fri, 9 Feb 2024 at 14:08, Henning Westerholt <hw(a)gilawa.com> wrote:
Hello,
what about e.g. just using something like iptables, nftables etc..?
iptables -A INPUT -p tcp --syn --destination-port <port> -j REJECT
--reject-with icmp-host-prohibited
Cheers,
Henning
*From:* David Villasmil via sr-users <sr-users(a)lists.kamailio.org>
*Sent:* Donnerstag, 8. Februar 2024 14:28
*To:* Kamailio (SER) - Users Mailing List <sr-users(a)lists.kamailio.org>
*Cc:* David Villasmil <david.villasmil.work(a)gmail.com>
*Subject:* [SR-Users] Reject TCP SYN
Hello all,
Is there any way of actually rejecting (RST) NEW tcp connection attempts,
while allowing the ongoing ones to finish naturally?
I’m thinking maybe we can add this feature?
Regards,
David Villasmil
email: david.villasmil.work(a)gmail.com
phone: +34669448337
15 Feb
15 Feb
5:42 p.m.
Hi David,
I have most of my setups with OPTIONS pings (upstream carrier and myself).
If I want to fade out a Kamailio I set the option response to an not 200
value (like 603 or whatever) and my internal and the external system didn't
bring in new invites but leave the currently running out.
You can use cfg values for that or some kind of htable with value or so.
Maybe an idea for your setup.
David Villasmil via sr-users <sr-users(a)lists.kamailio.org> schrieb am Fr.,
9. Feb. 2024, 15:04:
Hey, Henning, yeah I thought about that, but thought that maybe there was
a better way to do it via Kamailio
Thanks!
Regards,
David Villasmil
email: david.villasmil.work(a)gmail.com
phone: +34669448337
On Fri, 9 Feb 2024 at 14:08, Henning Westerholt <hw(a)gilawa.com> wrote:
Hello,
what about e.g. just using something like iptables, nftables etc..?
iptables -A INPUT -p tcp --syn --destination-port <port> -j REJECT
--reject-with icmp-host-prohibited
Cheers,
Henning
*From:* David Villasmil via sr-users <sr-users(a)lists.kamailio.org>
*Sent:* Donnerstag, 8. Februar 2024 14:28
*To:* Kamailio (SER) - Users Mailing List <sr-users(a)lists.kamailio.org>
*Cc:* David Villasmil <david.villasmil.work(a)gmail.com>
*Subject:* [SR-Users] Reject TCP SYN
Hello all,
Is there any way of actually rejecting (RST) NEW tcp connection attempts,
while allowing the ongoing ones to finish naturally?
I’m thinking maybe we can add this feature?
Regards,
David Villasmil
email: david.villasmil.work(a)gmail.com
phone: +34669448337
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
To unsubscribe send an email to sr-users-leave(a)lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to
the sender!
Edit mailing list options or unsubscribe:
6 p.m.
Thanks Karsten,
That won’t work for me with TLS clients, which is what I’m trying to do.
I’m making a PR with a new tcp param.
Thanks!
Regards,
David Villasmil
email: david.villasmil.work(a)gmail.com
phone: +34669448337
On Thu, 15 Feb 2024 at 17:42, Karsten Horsmann <khorsmann(a)gmail.com> wrote:
Hi David,
I have most of my setups with OPTIONS pings (upstream carrier and myself).
If I want to fade out a Kamailio I set the option response to an not 200
value (like 603 or whatever) and my internal and the external system didn't
bring in new invites but leave the currently running out.
You can use cfg values for that or some kind of htable with value or so.
Maybe an idea for your setup.
David Villasmil via sr-users <sr-users(a)lists.kamailio.org> schrieb am
Fr., 9. Feb. 2024, 15:04:
Hey, Henning, yeah I thought about that, but thought that maybe there was
a better way to do it via Kamailio
Thanks!
Regards,
David Villasmil
email: david.villasmil.work(a)gmail.com
phone: +34669448337
On Fri, 9 Feb 2024 at 14:08, Henning Westerholt <hw(a)gilawa.com> wrote:
Hello,
what about e.g. just using something like iptables, nftables etc..?
iptables -A INPUT -p tcp --syn --destination-port <port> -j REJECT
--reject-with icmp-host-prohibited
Cheers,
Henning
*From:* David Villasmil via sr-users <sr-users(a)lists.kamailio.org>
*Sent:* Donnerstag, 8. Februar 2024 14:28
*To:* Kamailio (SER) - Users Mailing List <sr-users(a)lists.kamailio.org>
*Cc:* David Villasmil <david.villasmil.work(a)gmail.com>
*Subject:* [SR-Users] Reject TCP SYN
Hello all,
Is there any way of actually rejecting (RST) NEW tcp connection
attempts, while allowing the ongoing ones to finish naturally?
I’m thinking maybe we can add this feature?
Regards,
David Villasmil
email: david.villasmil.work(a)gmail.com
phone: +34669448337
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
To unsubscribe send an email to sr-users-leave(a)lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to
the sender!
Edit mailing list options or unsubscribe:
94
days inactive
101
days old
4 comments
3 participants
participants (3)
-
David Villasmil -
Henning Westerholt -
Karsten Horsmann