Fwd: Sensible values for pike mudule? - sr-users

27 Apr 2023

Hi Benoît

We use pike in combination with fail2ban.
Log a message -> create a fail2ban rule to block the ip for xxx time.

example:

if ($ua =~ "(friendly-scanner|sipvicious)") {
         sl_send_reply("488", "Go away.");
         xlog("L_INFO","$ci Blocking traffic from $si\n");
         exit;
}

Cool thing is, you can write a log entry from every part in your 
kamailio-config, and then fail2ban does the rest.

Regards
Stefan

Am 27.04.23 um 16:07 schrieb Benoit Panizzon:
...
  Hi

 Before I go too deep into try and error, I guess others have been there
 too.

 What are sensible value you use for the pike module to detect /
 mitigate abusive behavior, especially dictionary attacks?

 Are there better solutions that the pike module?

 Mit freundlichen Grüssen

 -Benoît Panizzon-