<div dir="ltr">THanks Alex,<div>do you think i can do something like where i check $FU reaching the rate limit then blocket somehow for a few minutes.</div><div><br></div><div>thank you, I apreciate your help.</div><div> </div><div># perform pipe match for INVITE</div><div><br></div><div> if (is_method("INVITE")) {</div><div> $var(invlimit) = 10;</div><div> if (!pl_check("$fU", "TAILDROP", "$var(invlimit)")) {</div><div> pl_drop();</div><div> exit;</div><div> }</div><div> }</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Sep 7, 2016 at 9:23 PM, Alex Balashov <span dir="ltr"><<a href="mailto:abalashov@evaristesys.com" target="_blank">abalashov@evaristesys.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">May I humbly suggest the very flexible pipelimit module?<div><div class="h5"><br>
<br>
On 09/08/2016 12:12 AM, anfecora wrote:<br>
<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5">
Hi is there any way to use pike and htable to mitigate ddos or flood<br>
attack from trusted trunks.<br>
<br>
I need help to build it the same way kamailio control registrations.<br>
<br>
Case a carrier trunk star calling several users from the system to more<br>
than 50 CPS(calls per second), it will affect the system but cannot<br>
block the trunk since it is pstn traffic coming from a sip provider,<br>
therefore we need to find a way to identify this traffic based on ANI or<br>
DNIS or any other header and then blocked for a time just like pike does<br>
with registrations, then start the cycle all over.<br>
<br>
in less words make kamailio be aware of invite request rate, then<br>
verify that is from the same source means ani or dnis then tagged as bad<br>
traffic them star dropping it for a specified time, while normal traffic<br>
still flowing unaffected.<br>
<br>
any recommendations will be highly appreciated.<br>
<br>
thank you<br>
<br>
<br></div></div>
______________________________<wbr>_________________<br>
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br>
<a href="mailto:sr-users@lists.sip-router.org" target="_blank">sr-users@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">http://lists.sip-router.org/cg<wbr>i-bin/mailman/listinfo/sr-user<wbr>s</a><br>
<br><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
<br>
-- <br>
Alex Balashov | Principal | Evariste Systems LLC<br>
<br>
Tel: <a href="tel:%2B1-706-510-6800" value="+17065106800" target="_blank">+1-706-510-6800</a> (direct) / <a href="tel:%2B1-800-250-5920" value="+18002505920" target="_blank">+1-800-250-5920</a> (toll-free)<br>
Web: <a href="http://www.evaristesys.com/" rel="noreferrer" target="_blank">http://www.evaristesys.com/</a>, <a href="http://www.csrpswitch.com/" rel="noreferrer" target="_blank">http://www.csrpswitch.com/</a><br>
<br>
______________________________<wbr>_________________<br>
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br>
<a href="mailto:sr-users@lists.sip-router.org" target="_blank">sr-users@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">http://lists.sip-router.org/cg<wbr>i-bin/mailman/listinfo/sr-user<wbr>s</a><br>
</font></span></blockquote></div><br></div>