Module: sip-router Branch: master Commit: ef86e60ef178fc451a69c5fe527fcd897fe0573b URL: http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=ef86e60e...
Author: Daniel-Constantin Mierla miconda@gmail.com Committer: Daniel-Constantin Mierla miconda@gmail.com Date: Fri Mar 14 21:02:51 2014 +0100
kamailio.cfg: catch friendly-scanner if antiflood is enabled
---
etc/kamailio.cfg | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-)
diff --git a/etc/kamailio.cfg b/etc/kamailio.cfg index 4c982cb..73079db 100644 --- a/etc/kamailio.cfg +++ b/etc/kamailio.cfg @@ -555,6 +555,10 @@ route[REQINIT] { exit; } } + if($ua =~ "friendly-scanner") { + sl_send_reply("200", "OK"); + exit; + } #!endif
if (!mf_process_maxfwd_header("10")) {
Daniel-Constantin Mierla writes:
kamailio.cfg: catch friendly-scanner if antiflood is enabled
is it really so that most of scanners use this ua name? i would imagine that any serious one would use something else or nothing at all.
-- juha
On 14/03/14 21:07, Juha Heinanen wrote:
Daniel-Constantin Mierla writes:
kamailio.cfg: catch friendly-scanner if antiflood is enabled
is it really so that most of scanners use this ua name? i would imagine that any serious one would use something else or nothing at all.
Indeed, I expect is the kiddies that keep the user agent, I wanted just to show the placeholder, that's why I put it inside the WITH_ANTIFLOOD.
Cheers, Daniel
There are a few of them that get used, however there are probably less than you would expect. I have a list of about 10 UA's ive seen in the last few months, but friendly_scanner is still the one we see the most.
Jay
On 15 March 2014 06:10, Daniel-Constantin Mierla miconda@gmail.com wrote:
On 14/03/14 21:07, Juha Heinanen wrote:
Daniel-Constantin Mierla writes:
kamailio.cfg: catch friendly-scanner if antiflood is enabled
is it really so that most of scanners use this ua name? i would imagine that any serious one would use something else or nothing at all.
Indeed, I expect is the kiddies that keep the user agent, I wanted just to show the placeholder, that's why I put it inside the WITH_ANTIFLOOD.
Cheers, Daniel
-- Daniel-Constantin Mierla - http://www.asipto.com http://twitter.com/#!/miconda - http://www.linkedin.com/in/miconda Kamailio World Conference - April 2-4, 2014, Berlin, Germany http://www.kamailioworld.com
sr-dev mailing list sr-dev@lists.sip-router.org http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev
-
Daniel-Constantin Mierla -
jay binks -
Juha Heinanen