Acme Packet (MOSC)

MOSC Banner

Difference between HMR and local-policy in SIPVicious protection technic.

edited Feb 23, 2015 12:11PM in Acme Packet (MOSC) 1 commentAnswered

Hello, community.

 

I prepared configuration based on sipvicious protection princip, but i used local-policy instead of incoming HMR:

1) local-policy - "if SBC receives message with "from" field started with 1, it forwards this message to the next-hop 5.5.5.5

 

local-policy
       from-address         1
       to-address             *
       source-realm         access
       next-hop               5.5.5.5
       realm                   core

2) session-agent - "5.5.5.5 is dummy agent, it is disabled and has local-response-map configured - "503drop""
session-agent


      hostname 5.5.5.5
      ip-address 5.5.5.5
      port 5090
      state disabled
      app-protocol SIP
      transport-method UDP
      realm-id *
      local-response-map 503drop


3) sip-response-map - rule "503drop" transforms response 503 to 665

response-map
      name 503drop
      entries
           503 -> 665 (dropAttack)

4) sip-interface - has option dropResponse=665 enabled

 

sip-interface
      state enabled
      realm-id access
      sip-port
           address A.B.C.D

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center