[Kamailio-Users] How to handle DoS attack and OpenSER Pike module!

[Arif-Uz-Zaman]

Hi all,
 
I need to bother about crazy client by considering "Flood" detection
technique. I can do it by using OpenSER Pike
<http://kamailio.org/docs/modules/1.2.x/pike.html>  module which helps to
keep trace of all (or selected ones) incoming request's IP source and blocks
the ones that exceeded some limit.

 

In my case: If the number of SIP messages from a single IP address to my SIP
Proxy exceeds 200 per minute. Recommended action: Block IP for 2 hours.

 

I tried with the pike module but I'm little bit confused with sampling,
density, and timeout value.

 

Please help me with example configuration by considering my point.

 

Thanks,
ARIF

 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.kamailio.org/pipermail/users/attachments/20081014/2a4793b2/attachment.htm