Ovidiu, With stolen account credentials one can cause major frauds during a single weekend without looking like a DOS attack. Rate limiting of normal SIP accounts to a few simultaneous calls or whatever is normal usage is the best defensive strategy. Pike is not useful for non-DOS situations like this.
Adrian On Feb 22, 2011, at 8:39 PM, Ovidiu Sas wrote: > The ratelimit module was designed to deal with SIP trunks and not with > subscriber traffic. > Under normal circumstances, the subscriber traffic does not need to be > ratelimit-ed. > The pike module can be used to identify DoS traffic from a particular > subscriber and then take appropriate action. > > Regards, > Ovidiu Sas > > On Tue, Feb 22, 2011 at 12:52 PM, Jeff Pyle <[email protected]> wrote: >> Ronald, >> >> I got into this very same question: >> http://www.openser.org/pipermail/users/2009-November/009405.html >> >> Despite my apparent enthusiasm at the time I never did implement anything >> useful. >> >> >> - Jeff >> >> >> >> On 2/22/11 12:27 PM, "Ovidiu Sas" <[email protected]> wrote: >> >>> Yes, you can do this with opensips. Just assign a pipe number to an >>> account and use that pipe to limit traffic for that account: >>> http://www.opensips.org/html/docs/modules/devel/ratelimit.html#id250282 >>> >>> For now, there is a limit of 16 pipes: >>> http://www.opensips.org/html/docs/modules/devel/ratelimit.html#id293075 >>> >>> >>> Regards, >>> Ovidiu Sas >>> >>> On Mon, Feb 21, 2011 at 11:41 AM, Ronald Cepres <[email protected]> >>> wrote: >>>> Hi everyone, >>>> I would like to ask all of you if it is possible to use ratelimit >>>> module to >>>> limit cps per account/group (i.e.: account A has limit of 10 cps, >>>> account >>>> B's is 20 cps, etc.)? Is it even possible to implement this set-up on >>>> opensips? >>>> Thanks for any kind of help. >>>> Regards, >>>> Ronald >> >> >> _______________________________________________ >> Users mailing list >> [email protected] >> http://lists.opensips.org/cgi-bin/mailman/listinfo/users >> > > _______________________________________________ > Users mailing list > [email protected] > http://lists.opensips.org/cgi-bin/mailman/listinfo/users > _______________________________________________ Users mailing list [email protected] http://lists.opensips.org/cgi-bin/mailman/listinfo/users
