From 25d0dabf0b1dbdbf15b2c8e7828ae5ca684cf3af Mon Sep 17 00:00:00 2001 From: Mooseable Date: Thu, 13 Mar 2025 20:38:05 +0800 Subject: [PATCH] revert original traffic-filter-role.cfg as its redundant with the extra traffic filter role --- kamailio/traffic-filter-role.cfg | 27 +-------------------------- 1 file changed, 1 insertion(+), 26 deletions(-) diff --git a/kamailio/traffic-filter-role.cfg b/kamailio/traffic-filter-role.cfg index a1baf4e..942037f 100644 --- a/kamailio/traffic-filter-role.cfg +++ b/kamailio/traffic-filter-role.cfg @@ -53,29 +53,4 @@ route[FILTER_TO_DOMAIN] drop(); exit; } -} - -route[CCP_SECURITY_CHECKS] { -#!ifdef WITH_CCP_SECURITY_CHECKS - if (is_method("INVITE|REGISTER")) { - - if($ua =~ "(friendly-scanner|sipvicious|pplsip)") { - xlog("$ci|block|Fail2Ban blocking traffic from $si Script Kiddie trying to exploit\n"); - drop(); - exit; - } - - if($au =~ "(\=)|(\-\-)|(')|(\#)|(\%27)|(\%24)" and $au != $null) { - xlog("$ci|block|Fail2Ban blocking traffic from $si SQL Injection attack over SIP\n"); - drop(); - exit; - } - - if($(hdr(Record-Route)[0]{nameaddr.uri}) != $si and $(hdr(Record-Route)[0]{nameaddr.uri}) != $null) { - xlog("$ci|block|Fail2Ban blocking traffic from $si Spoofing attack over SIP\n"); - drop(); - exit; - } - } -#!endif -} +} \ No newline at end of file