Browse Source

add a block component

allow to view msg buf in logs & block misconfigured devices
update-rsyslog-config
lazedo 7 years ago
parent
commit
5e76ccff63
2 changed files with 45 additions and 0 deletions
  1. +43
    -0
      kamailio/block.cfg
  2. +2
    -0
      kamailio/default.cfg

+ 43
- 0
kamailio/block.cfg View File

@ -0,0 +1,43 @@
######## BLOCK BY IP[PORT] ########
#!ifndef KZ_BLOCK_DISABLE
#!trydef KZ_BLOCK_ENABLE 1
#!trydef KZ_BLOCK_LOG_LEVEL 1
#!trydef KZ_BLOCK_LOG_BUFFER 0
#!trydef KZ_BLOCK_DRY_RUN 0
#!ifdef KZ_BLOCK_COLD_CACHE
#!substdef "!BLOCK_S_WARM_CACHE!!g"
#!else
#!substdef "!BLOCK_S_WARM_CACHE!dbtable=block_cache;dbmode=1;!g"
#!endif
modparam("htable", "htable", "block=>size=8;BLOCK_S_WARM_CACHE")
modparam("statistics","variable", "block:blocked_requests")
kazoo.block_enable = KZ_BLOCK_ENABLE descr "enable block processing"
kazoo.block_log_level = KZ_BLOCK_LOG_LEVEL descr "block log level"
kazoo.block_log_buffer = KZ_BLOCK_LOG_BUFFER descr "log the received buffer"
kazoo.block_dry_run = KZ_BLOCK_DRY_RUN descr "log but keep processing"
## global param to enable route
received_route_mode=1
event_route[core:msg-received]
{
if($sel(cfg_get.kazoo.block_enable) == 1) {
if($sht(block=>$rcv(srcip)) || $sht(block=>$rcv(srcip)::$rcv(srcport))) {
if($sel(cfg_get.kazoo.block_log_buffer) == 1) {
xlog("$(sel(cfg_get.kazoo.block_log_level){s.int})", "|block|request from [$rcv(srcip):$rcv(srcport)] to [$rcv(rcvip):$rcv(rcvport)] was blocked => [$rcv(buf)]\n");
} else {
xlog("$(sel(cfg_get.kazoo.block_log_level){s.int})", "|block|request from [$rcv(srcip):$rcv(srcport)] to [$rcv(rcvip):$rcv(rcvport)] was blocked\n");
}
if($sel(cfg_get.kazoo.block_dry_run) == 0) {
drop;
}
}
}
}
#!endif

+ 2
- 0
kamailio/default.cfg View File

@ -269,6 +269,8 @@ include_file "sip_trace-role.cfg"
## auth ## ## auth ##
include_file "auth.cfg" include_file "auth.cfg"
## block ##
include_file "block.cfg"
####### Permissions module ########## ####### Permissions module ##########
loadmodule "permissions.so" loadmodule "permissions.so"


Loading…
Cancel
Save