On 02-12-2005 11:26, Juha Heinanen wrote:
Klaus Darilion said:
If the username/password is wrong, the Radius
server should reply
with Authentication-Reject, thus the sip proxy should reply with
401/403. This should not need more time then the reply for a successful
authentication.
depends on the radius server and its reject delay. it would be a good
idea to have reejct delay built in to ser so that it would apply no matter
what kind of authentication is in question.
Alternatively you can block excessive traffic using pike module. SER
could just drop incoming messages if the amount of traffic exceeds
some threshold, and send back "4xx Too Much Traffic" once in a while
to notify the user that he should slow down/replace the ua. Once in a
while pike would let the icoming message through.
Jan.