<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Instead of using <i>exit</i>, which
causes the <i>User Agent: friendly-scanner</i> to keep sending
packets waiting for a reply, I use <i>sl_send_reply("200", "OK");
exit;</i> the reason for this is that the friendly-scanner seems
to stop after it finally receives a 200 OK thinking it got a valid
registration back, it usually immediately stops scanning and any
saturation on our links drops way back down.<br>
<br>
On 17/09/2012 6:25 AM, Klaus Darilion wrote:<br>
</div>
<blockquote cite="mid:5056EC8E.7000907@pernau.at" type="cite">On
17.09.2012 09:08, Vijay Thakur wrote:
<br>
<blockquote type="cite">All Experts,
<br>
<br>
I want to change my SIP port from 5060 for other one. Before
making any
<br>
change in my live server (Kamailio 3.2.1, i want to be sure.
<br>
Kindly suggest me that where should i make changes to implement
it. This
<br>
is a security measure for kamailio from port scanning.
<br>
</blockquote>
<br>
This is just "security by obscurity" and of course your SIP proxy
configuration must be secure to handle such scanning attacks.
<br>
<br>
Nevertheless these scans are annoying and using a non-default port
is a good practice. You can change the port easily with the
"listen" directive, see
<a class="moz-txt-link-freetext" href="http://www.kamailio.org/wiki/cookbooks/3.3.x/core#listen">http://www.kamailio.org/wiki/cookbooks/3.3.x/core#listen</a>
<br>
<br>
Further, this snippet at the beginning of your config may help
too:
<br>
<br>
# ignore requests generated by sipvicious
<br>
# User-Agent: friendly-scanner
<br>
if ($ua == "friendly-scanner") {
<br>
exit;
<br>
}
<br>
<br>
regards
<br>
Klaus
<br>
<br>
_______________________________________________
<br>
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing
list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a>
<br>
<a class="moz-txt-link-freetext" href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a>
<br>
</blockquote>
<br>
</body>
</html>