[Serusers] limiting no. of concurrent calls ?

[Frank Fischer]

In case he's encountering DOS attacks SER is IMHO the wrong place to defend
against these attacks. A smart Firewall should do that job. 
In case it's only a bandwith problem again a firewall or any kind of QoS
device could manage the bandwith "before" SER. 
In case he really wants to limit calls per user some kind of call statefull
module would be requiered in SER. As far as i have been told recently some
basic work related to call state tracking is done in the current development
iof a module call b2buac or similar. This might deliver the basic mechanisms
needed to implement call limits per user.

- Frank
 

> -----Original Message-----
> From: serusers-bounces at lists.iptel.org 
> [mailto:serusers-bounces at lists.iptel.org] On Behalf Of Hendrik Scholz
> Sent: Wednesday, February 08, 2006 4:27 PM
> To: Mike W
> Cc: serusers at lists.iptel.org
> Subject: Re: [Serusers] limiting no. of concurrent calls ?
> 
> Hi!
> 
> Mike W wrote:
> > Thanks for the pointer,  i need to look at the total calls 
> at the proxy.
> > It could be a counter that increments at a INVITE (and 
> subsequent OK)
> > and decrements at a BYE/ CANCEL
> 
> You'll still run into the very same problems. You have to 
> take INVITEs 
> without Authentication into account. How about retransmissions?
> People might want to throw advertisements for Session Border 
> Controllers 
> at you ;)
> 
> > Is this something that can be configured/ customised ?
> 
> If it's the plain number of requests per second that you want to allow
> not taking any specific behaviour into account you might want to try
> the ratelimit module from CVS.
> 
> What's the problem you are facing? Are you seeing DOS-like attacks?
> I'm asking as I'm interested in implementing countermeasures.
> 
> Hendrik
> 
> -- 
> freenet Cityline GmbH, Hamburger Chaussee 2-4, 24114 Kiel, Germany
> Phone: +49 (0)431 9020552, Fax: +49 (0)431 9020559
> Internet: http://www.freenet.de, eMail: hendrik.scholz at freenet-ag.de
> 
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
>