|
|
@ -1,5 +1,5 @@ |
|
|
######## DoS prevention module ######## |
|
|
######## DoS prevention module ######## |
|
|
# Default "order" is "Deny,Allow"(DA). |
|
|
|
|
|
|
|
|
# Default "order" is "deny,allow". |
|
|
# So if there is no data from DB request will be permitted by default. |
|
|
# So if there is no data from DB request will be permitted by default. |
|
|
# |
|
|
# |
|
|
loadmodule "ipops.so" |
|
|
loadmodule "ipops.so" |
|
|
@ -7,7 +7,7 @@ modparam("htable", "htable", "acl=>initval=-1;autoexpire=7200") |
|
|
|
|
|
|
|
|
#!trydef ACL_MESSAGE_DENY "Rejected by ACL" |
|
|
#!trydef ACL_MESSAGE_DENY "Rejected by ACL" |
|
|
#!trydef ACL_CODE_DENY "603" |
|
|
#!trydef ACL_CODE_DENY "603" |
|
|
#!trydef ACL_ORDER_ALLOW_DENY "AD" |
|
|
|
|
|
|
|
|
#!trydef ACL_ORDER_ALLOW_DENY "allow,deny" |
|
|
#!trydef ACL_IP_ADDR_ANY "0.0.0.0/0" |
|
|
#!trydef ACL_IP_ADDR_ANY "0.0.0.0/0" |
|
|
|
|
|
|
|
|
#!trydef IP_REGEX "[0-9]{1,3}\.[0-9]{1,3}.[0-9]{1,3}\.[0-9]{1,3}" |
|
|
#!trydef IP_REGEX "[0-9]{1,3}\.[0-9]{1,3}.[0-9]{1,3}\.[0-9]{1,3}" |
|
|
@ -28,7 +28,7 @@ route[ACL_CHECK] { |
|
|
$var(sip-packet) = $rm; |
|
|
$var(sip-packet) = $rm; |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
# FIXUP for BYE method with IPinstead of REALM in From, take REALM fron To header |
|
|
|
|
|
|
|
|
# FIX for BYE method with IP instead of REALM in From, take REALM from To header |
|
|
if ($fd =~ IP_REGEX) { |
|
|
if ($fd =~ IP_REGEX) { |
|
|
xlog("L_WARNING","$ci |ACL-realm| Fixup for $var(sip-packet) with IP in from URI: use to-domain"); |
|
|
xlog("L_WARNING","$ci |ACL-realm| Fixup for $var(sip-packet) with IP in from URI: use to-domain"); |
|
|
$var(realm) = $td; |
|
|
$var(realm) = $td; |
|
|
|