How to reject SIP messages based on user agent?
Hi list, I have a list of user agent regex pattern. For example: ^Asterisk PBX ^Zoiper ^SipP$ The list will have more and more members by time. All I want is to reject all the SIP messages (not only INVITE) that has User-Agent header value match any of the pattern in the list. How can I do that? I know this can be achieved with a sip proxy placed before FreeSwitch, but I don't want an additional SIP component for just that. Any help would be appreciated. rgds, Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com
hi, you can do it using iptables: |iptables -I INPUT -j DROP -p udp --dport 5060 -m string --string "zoiper" --algo bm source: https://freeswitch.org/confluence/display/FREESWITCH/Security | On 02/24/2017 09:26 AM, Lợi Đặng wrote:
Hi list, I have a list of user agent regex pattern. For example: ^Asterisk PBX ^Zoiper ^SipP$ The list will have more and more members by time. All I want is to reject all the SIP messages (not only INVITE) that has User-Agent header value match any of the pattern in the list. How can I do that?
I know this can be achieved with a sip proxy placed before FreeSwitch, but I don't want an additional SIP component for just that.
Any help would be appreciated. rgds, Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com <mailto:loi.dangthanh@gmail.com>
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
hi Antonio, I was looking for SIP solutions. But you save me a day. Many thanks. rgds, Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com On Fri, Feb 24, 2017 at 3:49 PM, Antonio Silva <asilva@wirelessmundi.com> wrote:
hi,
you can do it using iptables:
iptables -I INPUT -j DROP -p udp --dport 5060 -m string --string "zoiper" --algo bm
source: https://freeswitch.org/confluence/display/FREESWITCH/Security
On 02/24/2017 09:26 AM, Lợi Đặng wrote:
Hi list, I have a list of user agent regex pattern. For example: ^Asterisk PBX ^Zoiper ^SipP$ The list will have more and more members by time. All I want is to reject all the SIP messages (not only INVITE) that has User-Agent header value match any of the pattern in the list. How can I do that?
I know this can be achieved with a sip proxy placed before FreeSwitch, but I don't want an additional SIP component for just that.
Any help would be appreciated. rgds, Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.orghttp://www.freeswitchsolutions.com
Official FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon....
FreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.frees...
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
You could use the variable sip_user_agent and reject them. On Fri, Feb 24, 2017 at 11:40 AM Lợi Đặng <loi.dangthanh@gmail.com> wrote:
hi Antonio, I was looking for SIP solutions. But you save me a day. Many thanks.
rgds,
Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com
On Fri, Feb 24, 2017 at 3:49 PM, Antonio Silva <asilva@wirelessmundi.com> wrote:
hi,
you can do it using iptables:
iptables -I INPUT -j DROP -p udp --dport 5060 -m string --string "zoiper" --algo bm
source: https://freeswitch.org/confluence/display/FREESWITCH/Security
On 02/24/2017 09:26 AM, Lợi Đặng wrote:
Hi list, I have a list of user agent regex pattern. For example: ^Asterisk PBX ^Zoiper ^SipP$ The list will have more and more members by time. All I want is to reject all the SIP messages (not only INVITE) that has User-Agent header value match any of the pattern in the list. How can I do that?
I know this can be achieved with a sip proxy placed before FreeSwitch, but I don't want an additional SIP component for just that.
Any help would be appreciated. rgds, Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.orghttp://www.freeswitchsolutions.com
Official FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon....
FreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.frees...
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
hi David, I'm afraid your solution can only be used to process the INVITE message, which create a channel. rgds, Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com On Fri, Feb 24, 2017 at 6:28 PM, David Villasmil < david.villasmil.work@gmail.com> wrote:
You could use the variable sip_user_agent and reject them.
On Fri, Feb 24, 2017 at 11:40 AM Lợi Đặng <loi.dangthanh@gmail.com> wrote:
hi Antonio, I was looking for SIP solutions. But you save me a day. Many thanks.
rgds,
Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com
On Fri, Feb 24, 2017 at 3:49 PM, Antonio Silva <asilva@wirelessmundi.com> wrote:
hi,
you can do it using iptables:
iptables -I INPUT -j DROP -p udp --dport 5060 -m string --string "zoiper" --algo bm
source: https://freeswitch.org/confluence/display/FREESWITCH/Security
On 02/24/2017 09:26 AM, Lợi Đặng wrote:
Hi list, I have a list of user agent regex pattern. For example: ^Asterisk PBX ^Zoiper ^SipP$ The list will have more and more members by time. All I want is to reject all the SIP messages (not only INVITE) that has User-Agent header value match any of the pattern in the list. How can I do that?
I know this can be achieved with a sip proxy placed before FreeSwitch, but I don't want an additional SIP component for just that.
Any help would be appreciated. rgds, Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.orghttp://www.freeswitchsolutions.com
Official FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon....
FreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.frees...
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
That is correct, it will. But you could also use iptables for block them. Let me know if you need the command, i have it somewhere :) On Sun, Feb 26, 2017 at 2:48 AM Lợi Đặng <loi.dangthanh@gmail.com> wrote:
hi David, I'm afraid your solution can only be used to process the INVITE message, which create a channel.
rgds,
Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com
On Fri, Feb 24, 2017 at 6:28 PM, David Villasmil < david.villasmil.work@gmail.com> wrote:
You could use the variable sip_user_agent and reject them.
On Fri, Feb 24, 2017 at 11:40 AM Lợi Đặng <loi.dangthanh@gmail.com> wrote:
hi Antonio, I was looking for SIP solutions. But you save me a day. Many thanks.
rgds,
Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com
On Fri, Feb 24, 2017 at 3:49 PM, Antonio Silva <asilva@wirelessmundi.com> wrote:
hi,
you can do it using iptables:
iptables -I INPUT -j DROP -p udp --dport 5060 -m string --string "zoiper" --algo bm
source: https://freeswitch.org/confluence/display/FREESWITCH/Security
On 02/24/2017 09:26 AM, Lợi Đặng wrote:
Hi list, I have a list of user agent regex pattern. For example: ^Asterisk PBX ^Zoiper ^SipP$ The list will have more and more members by time. All I want is to reject all the SIP messages (not only INVITE) that has User-Agent header value match any of the pattern in the list. How can I do that?
I know this can be achieved with a sip proxy placed before FreeSwitch, but I don't want an additional SIP component for just that.
Any help would be appreciated. rgds, Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.orghttp://www.freeswitchsolutions.com
Official FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon....
FreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.frees...
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
oh many thanks, David, the commands are already in FreeSwitch page. Actually, expecting a B2BUA like FreeSwitch process SIP messages as a SIP proxy is not really a good approach. So using iptables will help me achieve my goal somehow, if there's no workaround. rgds, Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com On Sun, Feb 26, 2017 at 9:26 AM, David Villasmil < david.villasmil.work@gmail.com> wrote:
That is correct, it will. But you could also use iptables for block them. Let me know if you need the command, i have it somewhere :)
On Sun, Feb 26, 2017 at 2:48 AM Lợi Đặng <loi.dangthanh@gmail.com> wrote:
hi David, I'm afraid your solution can only be used to process the INVITE message, which create a channel.
rgds,
Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com
On Fri, Feb 24, 2017 at 6:28 PM, David Villasmil < david.villasmil.work@gmail.com> wrote:
You could use the variable sip_user_agent and reject them.
On Fri, Feb 24, 2017 at 11:40 AM Lợi Đặng <loi.dangthanh@gmail.com> wrote:
hi Antonio, I was looking for SIP solutions. But you save me a day. Many thanks.
rgds,
Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com
On Fri, Feb 24, 2017 at 3:49 PM, Antonio Silva <asilva@wirelessmundi.com> wrote:
hi,
you can do it using iptables:
iptables -I INPUT -j DROP -p udp --dport 5060 -m string --string "zoiper" --algo bm
source: https://freeswitch.org/confluence/display/FREESWITCH/Security
On 02/24/2017 09:26 AM, Lợi Đặng wrote:
Hi list, I have a list of user agent regex pattern. For example: ^Asterisk PBX ^Zoiper ^SipP$ The list will have more and more members by time. All I want is to reject all the SIP messages (not only INVITE) that has User-Agent header value match any of the pattern in the list. How can I do that?
I know this can be achieved with a sip proxy placed before FreeSwitch, but I don't want an additional SIP component for just that.
Any help would be appreciated. rgds, Loi Dang Thanh Phone : +84. 1224.735.448 Email : loi.dangthanh@gmail.com
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.orghttp://www.freeswitchsolutions.com
Official FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon....
FreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.frees...
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (3)
-
Antonio Silva
-
David Villasmil
-
Lợi Đặng