Hey, Henning, yeah I thought about that, but thought that maybe there was a better way to do it via Kamailio

Thanks!

Regards,

David Villasmil email: david.villasmil.work@gmail.com phone: +34669448337

On Fri, 9 Feb 2024 at 14:08, Henning Westerholt hw@gilawa.com wrote:

Hello,

what about e.g. just using something like iptables, nftables etc..?

iptables -A INPUT -p tcp --syn --destination-port <port> -j REJECT --reject-with icmp-host-prohibited

Cheers,

Henning

*From:* David Villasmil via sr-users sr-users@lists.kamailio.org *Sent:* Donnerstag, 8. Februar 2024 14:28 *To:* Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org *Cc:* David Villasmil david.villasmil.work@gmail.com *Subject:* [SR-Users] Reject TCP SYN

Hello all,

Is there any way of actually rejecting (RST) NEW tcp connection attempts, while allowing the ongoing ones to finish naturally?

I’m thinking maybe we can add this feature?

Regards,

David Villasmil

email: david.villasmil.work@gmail.com

phone: +34669448337

Thanks Karsten,

That won’t work for me with TLS clients, which is what I’m trying to do. I’m making a PR with a new tcp param.

Thanks!

Regards,

David Villasmil email: david.villasmil.work@gmail.com phone: +34669448337

On Thu, 15 Feb 2024 at 17:42, Karsten Horsmann khorsmann@gmail.com wrote:

Hi David,

I have most of my setups with OPTIONS pings (upstream carrier and myself). If I want to fade out a Kamailio I set the option response to an not 200 value (like 603 or whatever) and my internal and the external system didn't bring in new invites but leave the currently running out.

You can use cfg values for that or some kind of htable with value or so.

Maybe an idea for your setup.

David Villasmil via sr-users sr-users@lists.kamailio.org schrieb am Fr., 9. Feb. 2024, 15:04:

...

Hey, Henning, yeah I thought about that, but thought that maybe there was a better way to do it via Kamailio

Thanks!

Regards,

David Villasmil email: david.villasmil.work@gmail.com phone: +34669448337

On Fri, 9 Feb 2024 at 14:08, Henning Westerholt hw@gilawa.com wrote:

...

Hello,

what about e.g. just using something like iptables, nftables etc..?

iptables -A INPUT -p tcp --syn --destination-port <port> -j REJECT --reject-with icmp-host-prohibited

Cheers,

Henning

*From:* David Villasmil via sr-users sr-users@lists.kamailio.org *Sent:* Donnerstag, 8. Februar 2024 14:28 *To:* Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org *Cc:* David Villasmil david.villasmil.work@gmail.com *Subject:* [SR-Users] Reject TCP SYN

Hello all,

Is there any way of actually rejecting (RST) NEW tcp connection attempts, while allowing the ongoing ones to finish naturally?

I’m thinking maybe we can add this feature?

Regards,

David Villasmil

email: david.villasmil.work@gmail.com

phone: +34669448337

---

Kamailio - Users Mailing List - Non Commercial Discussions To unsubscribe send an email to sr-users-leave@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: