Browse Source

revert original traffic-filter-role.cfg as its redundant with the extra traffic filter role

ruhnet
Mooseable 9 months ago
parent
commit
a7976fa23e
1 changed files with 1 additions and 26 deletions
  1. +1
    -26
      kamailio/traffic-filter-role.cfg

+ 1
- 26
kamailio/traffic-filter-role.cfg View File

@ -53,29 +53,4 @@ route[FILTER_TO_DOMAIN]
drop();
exit;
}
}
route[CCP_SECURITY_CHECKS] {
#!ifdef WITH_CCP_SECURITY_CHECKS
if (is_method("INVITE|REGISTER")) {
if($ua =~ "(friendly-scanner|sipvicious|pplsip)") {
xlog("$ci|block|Fail2Ban blocking traffic from $si Script Kiddie trying to exploit\n");
drop();
exit;
}
if($au =~ "(\=)|(\-\-)|(')|(\#)|(\%27)|(\%24)" and $au != $null) {
xlog("$ci|block|Fail2Ban blocking traffic from $si SQL Injection attack over SIP\n");
drop();
exit;
}
if($(hdr(Record-Route)[0]{nameaddr.uri}) != $si and $(hdr(Record-Route)[0]{nameaddr.uri}) != $null) {
xlog("$ci|block|Fail2Ban blocking traffic from $si Spoofing attack over SIP\n");
drop();
exit;
}
}
#!endif
}
}

Loading…
Cancel
Save