Hi, sometimes i receive these users trying to make a call (injection) in my FreeSwitch I already use events to know what's happen in the FS. sofia::register_failure - to figure a invalid register sofia::gateway_state - when a gateway comes down sofia::gateway_add - when someone add a gateway (daemon) sofia::gateway_delete - when someone delete a gateway (daemon) [NOTICE] switch_channel.c:1075 New Channel sofia/profile_1/'o[97bf779b-2e0d-e611-be46-00145ec01e69] [DEBUG] switch_core_session.c:1061 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_session.c:1061 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_state_machine.c:472 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Running State Change CS_NEW [DEBUG] sofia.c:8848 sofia/profile_1/'or''='@1.2.3.4>@nowhere receiving invite from 62.4.6.227:5076 version: 1.5.final git 6a2fc5e 2015-05-28 17:35:17Z 64bit [DEBUG] sofia.c:9015 IP 62.4.6.227 Rejected by acl "domains". Falling back to Digest auth. [DEBUG] switch_core_state_machine.c:491 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State NEW [DEBUG] switch_core_session.c:1061 Send signal sofia/profile_1/'o[BREAK] [DEBUG] sofia.c:2065 detaching session 97bf779b-2e0d-e611-be46-00145ec01e69 [WARNING] switch_core_state_machine.c:572 97bf779b-2e0d-e611-be46-00145ec01e69 sofia/profile_1/'or''='@1.2.3.4>@nowhere Abandoned [NOTICE] switch_core_state_machine.c:575 Hangup sofia/profile_1/'o[CS_NEW] [WRONG_CALL_STATE] [DEBUG] switch_channel.c:3242 Send signal sofia/profile_1/'o[KILL] [DEBUG] switch_core_session.c:1396 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_state_machine.c:472 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Running State Change CS_HANGUP [DEBUG] switch_core_state_machine.c:735 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Callstate Change DOWN -> HANGUP [DEBUG] switch_core_state_machine.c:737 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State HANGUP [DEBUG] mod_sofia.c:413 Channel sofia/profile_1/'or''='@1.2.3.4>@nowhere hanging up, cause: WRONG_CALL_STATE [DEBUG] switch_core_state_machine.c:60 sofia/profile_1/'or''='@1.2.3.4>@nowhere Standard HANGUP, cause: WRONG_CALL_STATE [DEBUG] switch_core_state_machine.c:737 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State HANGUP going to sleep [DEBUG] switch_core_state_machine.c:504 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State Change CS_HANGUP -> CS_REPORTING [DEBUG] switch_core_session.c:1396 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_state_machine.c:472 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Running State Change CS_REPORTING [DEBUG] switch_core_state_machine.c:823 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State REPORTING [DEBUG] switch_core_state_machine.c:104 sofia/profile_1/'or''='@1.2.3.4>@nowhere Standard REPORTING, cause: WRONG_CALL_STATE [DEBUG] switch_core_state_machine.c:823 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State REPORTING going to sleep [DEBUG] switch_core_state_machine.c:498 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State Change CS_REPORTING -> CS_DESTROY [DEBUG] switch_core_session.c:1396 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_session.c:1623 Session 139 (sofia/profile_1/'or''='@ 1.2.3.4>@nowhere) Locked, Waiting on external entities [NOTICE] switch_core_session.c:1641 Session 139 (sofia/profile_1/'or''='@ 1.2.3.4>@nowhere) Ended [NOTICE] switch_core_session.c:1645 Close Channel sofia/profile_1/'o[CS_DESTROY] [DEBUG] switch_core_state_machine.c:626 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Running State Change CS_DESTROY [DEBUG] switch_core_state_machine.c:636 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State DESTROY [DEBUG] mod_sofia.c:323 sofia/profile_1/'or''='@1.2.3.4>@nowhere SOFIA DESTROY [DEBUG] switch_core_state_machine.c:111 sofia/profile_1/'or''='@1.2.3.4>@nowhere Standard DESTROY [DEBUG] switch_core_state_machine.c:636 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State DESTROY going to sleep Is there a Event (or another way), to know when someone is trying to make a call without register, so i can count how many times some IP try to do this and add it in a firewall.
mod_fail2ban <https://freeswitch.org/jira/browse/FS-7394> module is that you want Also look at PR771 <https://freeswitch.org/stash/projects/FS/repos/freeswitch/pull-requests/771/overview> чт, 28 апр. 2016 г. в 14:40, Luiz Fernando Softov <fernando@softov.com.br>:
Hi, sometimes i receive these users trying to make a call (injection) in my FreeSwitch
I already use events to know what's happen in the FS.
sofia::register_failure - to figure a invalid register sofia::gateway_state - when a gateway comes down sofia::gateway_add - when someone add a gateway (daemon) sofia::gateway_delete - when someone delete a gateway (daemon)
[NOTICE] switch_channel.c:1075 New Channel sofia/profile_1/'o[97bf779b-2e0d-e611-be46-00145ec01e69] [DEBUG] switch_core_session.c:1061 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_session.c:1061 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_state_machine.c:472 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Running State Change CS_NEW [DEBUG] sofia.c:8848 sofia/profile_1/'or''='@1.2.3.4>@nowhere receiving invite from 62.4.6.227:5076 version: 1.5.final git 6a2fc5e 2015-05-28 17:35:17Z 64bit [DEBUG] sofia.c:9015 IP 62.4.6.227 Rejected by acl "domains". Falling back to Digest auth. [DEBUG] switch_core_state_machine.c:491 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State NEW [DEBUG] switch_core_session.c:1061 Send signal sofia/profile_1/'o[BREAK] [DEBUG] sofia.c:2065 detaching session 97bf779b-2e0d-e611-be46-00145ec01e69 [WARNING] switch_core_state_machine.c:572 97bf779b-2e0d-e611-be46-00145ec01e69 sofia/profile_1/'or''='@1.2.3.4>@nowhere Abandoned [NOTICE] switch_core_state_machine.c:575 Hangup sofia/profile_1/'o[CS_NEW] [WRONG_CALL_STATE] [DEBUG] switch_channel.c:3242 Send signal sofia/profile_1/'o[KILL] [DEBUG] switch_core_session.c:1396 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_state_machine.c:472 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Running State Change CS_HANGUP [DEBUG] switch_core_state_machine.c:735 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Callstate Change DOWN -> HANGUP [DEBUG] switch_core_state_machine.c:737 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State HANGUP [DEBUG] mod_sofia.c:413 Channel sofia/profile_1/'or''='@1.2.3.4>@nowhere hanging up, cause: WRONG_CALL_STATE [DEBUG] switch_core_state_machine.c:60 sofia/profile_1/'or''='@1.2.3.4>@nowhere Standard HANGUP, cause: WRONG_CALL_STATE [DEBUG] switch_core_state_machine.c:737 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State HANGUP going to sleep [DEBUG] switch_core_state_machine.c:504 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State Change CS_HANGUP -> CS_REPORTING [DEBUG] switch_core_session.c:1396 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_state_machine.c:472 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Running State Change CS_REPORTING [DEBUG] switch_core_state_machine.c:823 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State REPORTING [DEBUG] switch_core_state_machine.c:104 sofia/profile_1/'or''='@1.2.3.4>@nowhere Standard REPORTING, cause: WRONG_CALL_STATE [DEBUG] switch_core_state_machine.c:823 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State REPORTING going to sleep [DEBUG] switch_core_state_machine.c:498 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State Change CS_REPORTING -> CS_DESTROY [DEBUG] switch_core_session.c:1396 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_session.c:1623 Session 139 (sofia/profile_1/'or''='@ 1.2.3.4>@nowhere) Locked, Waiting on external entities [NOTICE] switch_core_session.c:1641 Session 139 (sofia/profile_1/'or''='@ 1.2.3.4>@nowhere) Ended [NOTICE] switch_core_session.c:1645 Close Channel sofia/profile_1/'o[CS_DESTROY] [DEBUG] switch_core_state_machine.c:626 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Running State Change CS_DESTROY [DEBUG] switch_core_state_machine.c:636 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State DESTROY [DEBUG] mod_sofia.c:323 sofia/profile_1/'or''='@1.2.3.4>@nowhere SOFIA DESTROY [DEBUG] switch_core_state_machine.c:111 sofia/profile_1/'or''='@1.2.3.4>@nowhere Standard DESTROY [DEBUG] switch_core_state_machine.c:636 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State DESTROY going to sleep
Is there a Event (or another way), to know when someone is trying to make a call without register, so i can count how many times some IP try to do this and add it in a firewall.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks for the reply, but I don't wanna a module. I just make a example. I want to receive a event and make some log, or check a table to do something else, or make a alarm, etc. I already see this module, i tried to find the source to see how to do it, but the git is off. Thanks for the links, i will check this. The PR771 <https://freeswitch.org/stash/projects/FS/repos/freeswitch/pull-requests/771/overview> is in master. If i want to clone again FreeSwitch, which one do you recommend? 2016-04-28 7:47 GMT-04:00 Sergey Safarov <s.safarov@gmail.com>:
mod_fail2ban <https://freeswitch.org/jira/browse/FS-7394> module is that you want Also look at PR771 <https://freeswitch.org/stash/projects/FS/repos/freeswitch/pull-requests/771/overview>
чт, 28 апр. 2016 г. в 14:40, Luiz Fernando Softov <fernando@softov.com.br
:
Hi, sometimes i receive these users trying to make a call (injection) in my FreeSwitch
I already use events to know what's happen in the FS.
sofia::register_failure - to figure a invalid register sofia::gateway_state - when a gateway comes down sofia::gateway_add - when someone add a gateway (daemon) sofia::gateway_delete - when someone delete a gateway (daemon)
[NOTICE] switch_channel.c:1075 New Channel sofia/profile_1/'o[97bf779b-2e0d-e611-be46-00145ec01e69] [DEBUG] switch_core_session.c:1061 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_session.c:1061 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_state_machine.c:472 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Running State Change CS_NEW [DEBUG] sofia.c:8848 sofia/profile_1/'or''='@1.2.3.4>@nowhere receiving invite from 62.4.6.227:5076 version: 1.5.final git 6a2fc5e 2015-05-28 17:35:17Z 64bit [DEBUG] sofia.c:9015 IP 62.4.6.227 Rejected by acl "domains". Falling back to Digest auth. [DEBUG] switch_core_state_machine.c:491 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State NEW [DEBUG] switch_core_session.c:1061 Send signal sofia/profile_1/'o[BREAK] [DEBUG] sofia.c:2065 detaching session 97bf779b-2e0d-e611-be46-00145ec01e69 [WARNING] switch_core_state_machine.c:572 97bf779b-2e0d-e611-be46-00145ec01e69 sofia/profile_1/'or''='@1.2.3.4>@nowhere Abandoned [NOTICE] switch_core_state_machine.c:575 Hangup sofia/profile_1/'o[CS_NEW] [WRONG_CALL_STATE] [DEBUG] switch_channel.c:3242 Send signal sofia/profile_1/'o[KILL] [DEBUG] switch_core_session.c:1396 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_state_machine.c:472 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Running State Change CS_HANGUP [DEBUG] switch_core_state_machine.c:735 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Callstate Change DOWN -> HANGUP [DEBUG] switch_core_state_machine.c:737 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State HANGUP [DEBUG] mod_sofia.c:413 Channel sofia/profile_1/'or''='@1.2.3.4>@nowhere hanging up, cause: WRONG_CALL_STATE [DEBUG] switch_core_state_machine.c:60 sofia/profile_1/'or''='@1.2.3.4>@nowhere Standard HANGUP, cause: WRONG_CALL_STATE [DEBUG] switch_core_state_machine.c:737 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State HANGUP going to sleep [DEBUG] switch_core_state_machine.c:504 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State Change CS_HANGUP -> CS_REPORTING [DEBUG] switch_core_session.c:1396 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_state_machine.c:472 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Running State Change CS_REPORTING [DEBUG] switch_core_state_machine.c:823 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State REPORTING [DEBUG] switch_core_state_machine.c:104 sofia/profile_1/'or''='@1.2.3.4>@nowhere Standard REPORTING, cause: WRONG_CALL_STATE [DEBUG] switch_core_state_machine.c:823 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State REPORTING going to sleep [DEBUG] switch_core_state_machine.c:498 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State Change CS_REPORTING -> CS_DESTROY [DEBUG] switch_core_session.c:1396 Send signal sofia/profile_1/'o[BREAK] [DEBUG] switch_core_session.c:1623 Session 139 (sofia/profile_1/'or''='@ 1.2.3.4>@nowhere) Locked, Waiting on external entities [NOTICE] switch_core_session.c:1641 Session 139 (sofia/profile_1/'or''='@ 1.2.3.4>@nowhere) Ended [NOTICE] switch_core_session.c:1645 Close Channel sofia/profile_1/'o[CS_DESTROY] [DEBUG] switch_core_state_machine.c:626 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) Running State Change CS_DESTROY [DEBUG] switch_core_state_machine.c:636 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State DESTROY [DEBUG] mod_sofia.c:323 sofia/profile_1/'or''='@1.2.3.4>@nowhere SOFIA DESTROY [DEBUG] switch_core_state_machine.c:111 sofia/profile_1/'or''='@1.2.3.4>@nowhere Standard DESTROY [DEBUG] switch_core_state_machine.c:636 (sofia/profile_1/'or''='@1.2.3.4>@nowhere) State DESTROY going to sleep
Is there a Event (or another way), to know when someone is trying to make a call without register, so i can count how many times some IP try to do this and add it in a firewall.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (2)
-
Luiz Fernando Softov
-
Sergey Safarov