<div dir="ltr">Hi Lorenzo, the attacks are not to our servers. It's more on the client's PBXes etc which we don't control which is the issue. Even with Fraud Protection and education to end users, there's still times when losses are incurred and are difficult to get back. It's more time consuming to even find out what happened and push the blame here and there.<div>
<br></div><div>Considering that it's always in the midnights/early hours etc where no one is actively monitoring systems that things occur, we want to just ban the call outs say to foreign DIDs for the clients who agree. </div>
<div><br></div><div>We thought about updating say iptables at night to stop sip traffic for example, but that would send alarm bells ringing on monitored systems so not good.<br></div><div hspace="streak-pt-mark" style="max-height:1px">
<img style="width:0px; max-height:0px;" src="https://mailfoogae.appspot.com/t?sender=abWFydGluLndvbmdAYmluYXJ5ZWxlbWVudHMuY29tLmF1&type=zerocontent&guid=2adc3859-7e21-472d-8451-7b525fc395b1"><font color="#ffffff" size="1">ᐧ</font></div>
<div class="gmail_extra"><br></div><div class="gmail_extra"><div>If you can direct me in someway of how to start this off, we can try it out. One personal failure is that I'm not proficient enough in Kamailio to hack it. I know it's not a very good option to "hard code" it in but it'll be good if we can manage it via another MYSQL table or something.</div>
</div><div class="gmail_extra"><br clear="all"><div><div>Thanks</div></div><div><br></div><div>Martin</div>
<br><br><div class="gmail_quote">On Thu, May 1, 2014 at 8:33 AM, Lorenzo Mangani <span dir="ltr"><<a href="mailto:lorenzo.mangani@gmail.com" target="_blank">lorenzo.mangani@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr">Martin,<div><br></div><div>That's understandable - If you're willing to resort to "hacks" which would potentially impact other functional aspects, then surely you can achieve/hardcode this in quite a few ways internally but I'll myself avoid giving advice on an approach would not endorse - and probably neither would users in case of emergencies ;)</div>
<div>If you really, really want to blackout services (or certain service) you might also just address this from a network interface perspective and transparently to the elements. If your hack attempts consist of scanning attacks, maybe you can pull some info from the other threads today (or in the archive) where ideas on how to enforce further banning rules were discussed.</div>
<div><br></div></div><div class="gmail_extra"><div class=""><br clear="all"><div><div dir="ltr"><span style="font-family:arial,sans-serif"><span style="font-family:Arial"><div style="font-size:13px;color:rgb(119,119,119)">
<font><span style="font-family:Arial;color:rgb(119,119,119)"><br></span></font></div><div style="font-size:13px;color:rgb(119,119,119)"><font><span style="font-family:Arial;color:rgb(119,119,119)"><br></span></font></div>
<div style="font-size:13px"><font color="#666666"><span style="font-family:Arial">Lorenzo Mangani</span></font></div><div style="font-size:13px"><font color="#666666"><div style="font-size:x-small"><br></div><div style="font-size:x-small">
HOMER DEV TEAM</div></font></div><div style="font-size:x-small"><font size="1" color="#666666"><span style="font-family:Arial">QXIP - Capture Engineering</span></font></div><div style="font-size:x-small"><font size="1" color="#666666"><span style="font-family:Arial">Desk: <a href="tel:%2B1%20%28202%29%20470-5312" value="+12024705312" target="_blank">+1 (202) 470-5312</a></span></font></div>
<div style="font-size:x-small"><font size="1" color="#666666"><span style="font-family:Arial">Mobile: <a href="tel:%2B31%206%204603-2730" value="+31646032730" target="_blank">+31 6 4603-2730</a></span></font></div><div style="font-size:x-small">
<font size="1" color="#666666"><span style="font-family:Arial"><br>
</span></font></div><div style="font-size:x-small"><br></div></span></span></div></div>
<br><br></div><div><div class="h5"><div class="gmail_quote">On Thu, May 1, 2014 at 12:12 AM, Martin Wong <span dir="ltr"><<a href="mailto:martin.wong@binaryelements.com.au" target="_blank">martin.wong@binaryelements.com.au</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr">Hi Lorenzo, thanks for the link.<div><br></div>
<div>Was looking for a hack in Kamailio to do this? Adding another component into the picture is a bit of a hassle.</div>
<div><br></div><div>Thanks</div>
<span><font color="#888888">
</font></span><div class="gmail_extra"><span><font color="#888888"><br clear="all"><div><div>Martin</div></div><br></font></span><div class="gmail_quote"><div>On Thu, May 1, 2014 at 1:59 AM, Lorenzo Mangani <span dir="ltr"><<a href="mailto:lorenzo.mangani@gmail.com" target="_blank">lorenzo.mangani@gmail.com</a>></span> wrote:<br>
</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr"><div>Martin,<div><br></div><div>You could use something like OS-Prey and set null routes for certain time ranges.</div>
<div><a href="http://www.transnexus.com/index.php/osprey" target="_blank">http://www.transnexus.com/index.php/osprey</a><br>
</div><div><br></div></div><div class="gmail_extra"><div><div><div dir="ltr"><span style="font-family:arial,sans-serif"><span style="font-family:Arial"><div style="font-size:13px;color:rgb(119,119,119)">
<font><span style="font-family:Arial;color:rgb(119,119,119)">Best,</span></font></div><div style="font-size:13px;color:rgb(119,119,119)"><font><span style="font-family:Arial;color:rgb(119,119,119)"><br></span></font></div>
<div style="font-size:13px"><font color="#666666"><span style="font-family:Arial">Lorenzo Mangani</span></font></div><div style="font-size:13px"><font color="#666666"><div style="font-size:x-small"><br></div><div style="font-size:x-small">
HOMER DEV TEAM</div></font></div><div style="font-size:x-small"><font size="1" color="#666666"><span style="font-family:Arial">QXIP - Capture Engineering</span></font></div><div style="font-size:x-small"><font size="1" color="#666666"><span style="font-family:Arial">Desk: <a href="tel:%2B1%20%28202%29%20470-5312" value="+12024705312" target="_blank">+1 (202) 470-5312</a></span></font></div>
<div style="font-size:x-small"><font size="1" color="#666666"><span style="font-family:Arial">Mobile: <a href="tel:%2B31%206%204603-2730" value="+31646032730" target="_blank">+31 6 4603-2730</a></span></font></div><div style="font-size:x-small">
<font size="1" color="#666666"><span style="font-family:Arial"><br>
</span></font></div><div style="font-size:x-small"><br></div></span></span></div></div></div><div><div>
<br><br><div class="gmail_quote"><div>On Wed, Apr 30, 2014 at 5:25 PM, Martin Wong <span dir="ltr"><<a href="mailto:martin.wong@binaryelements.com.au" target="_blank">martin.wong@binaryelements.com.au</a>></span> wrote:<br>
</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr"><div>Hi Daniel, <div><br></div><div>
was thinking ... if I can set it so that we can do a rule like</div>
<div>
<br></div><div>disable calls for all subscribers except a,b,c....</div><div><br></div><div>a,b,c being manually controlled.</div>
<div><br></div><div>Not sure if time can be also managed (group 1, group 2 etc).</div><div><br></div><div>I guess I can start simple and then figure out how to group subscribers and active times.</div>
</div><div><div>
<div class="gmail_extra"><br><div><div><div class="gmail_quote">On Thu, May 1, 2014 at 12:37 AM, Daniel Grotti <span dir="ltr"><<a href="mailto:dgrotti@sipwise.com" target="_blank">dgrotti@sipwise.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
Hi,<br>
<br>
do you want to disable calls on your platform or do you want to disable<br>
calls to/from certain peers/subscribers ?<br>
<br>
Daniel<br>
<div><div><br>
<br>
<br>
On 04/30/2014 04:30 PM, Martin Wong wrote:<br>
> Hi guys,<br>
><br>
> is there a hack where I can disable any calls matching foreign calls or<br>
> subscribers after midnight?<br>
><br>
> Just a thought as we do have a lot of issues with customer end points<br>
> getting hacked (we don't manage them). Fraud protection works but it<br>
> happens too much too often that it still amounts to something.<br>
><br>
> Thanks<br>
><br>
> Martin<br>
</div></div>> ᐧ<br>
><br>
><br>
> _______________________________________________<br>
> Spce-user mailing list<br>
> <a href="mailto:Spce-user@lists.sipwise.com" target="_blank">Spce-user@lists.sipwise.com</a><br>
> <a href="http://lists.sipwise.com/listinfo/spce-user" target="_blank">http://lists.sipwise.com/listinfo/spce-user</a><br>
><br>
<br>
_______________________________________________<br>
Spce-user mailing list<br>
<a href="mailto:Spce-user@lists.sipwise.com" target="_blank">Spce-user@lists.sipwise.com</a><br>
<a href="http://lists.sipwise.com/listinfo/spce-user" target="_blank">http://lists.sipwise.com/listinfo/spce-user</a><br>
</blockquote></div><br></div></div></div></div></div></div><div><div>
<br>_______________________________________________<br>
Spce-user mailing list<br>
<a href="mailto:Spce-user@lists.sipwise.com" target="_blank">Spce-user@lists.sipwise.com</a><br>
<a href="http://lists.sipwise.com/listinfo/spce-user" target="_blank">http://lists.sipwise.com/listinfo/spce-user</a><br>
<br></div></div></blockquote></div><br></div></div></div></div>
</blockquote></div><br></div></div>
</blockquote></div><br></div></div></div>
</blockquote></div><br></div></div>