Difference between HMR and local-policy in SIPVicious protection technic.
Hello, community.
I prepared configuration based on sipvicious protection princip, but i used local-policy instead of incoming HMR:
1) local-policy - "if SBC receives message with "from" field started with 1, it forwards this message to the next-hop 5.5.5.5
local-policy
from-address 1
to-address *
source-realm access
next-hop 5.5.5.5
realm core
2) session-agent - "5.5.5.5 is dummy agent, it is disabled and has local-response-map configured - "503drop""
session-agent
hostname 5.5.5.5
ip-address 5.5.5.5
port 5090
state disabled
app-protocol SIP
transport-method UDP
realm-id *
local-response-map 503drop
3) sip-response-map - rule "503drop" transforms response 503 to 665
response-map
name 503drop
entries
503 -> 665 (dropAttack)
4) sip-interface - has option dropResponse=665 enabled
sip-interface
state enabled
realm-id access
sip-port
address A.B.C.D