[OpenSIPS-Users] ratelimit: per group/account limiting

[Adrian Georgescu]

Ovidiu,

With stolen account credentials one can cause major frauds during a single weekend without looking like a DOS attack. Rate limiting of normal SIP accounts to a few simultaneous calls or whatever is normal usage is the best defensive strategy. Pike is not useful for non-DOS situations like this.

Adrian

On Feb 22, 2011, at 8:39 PM, Ovidiu Sas wrote:

> The ratelimit module was designed to deal with SIP trunks and not with
> subscriber traffic.
> Under normal circumstances, the subscriber traffic does not need to be
> ratelimit-ed.


> The pike module can be used to identify DoS traffic from a particular
> subscriber and then take appropriate action.
> 
> Regards,
> Ovidiu Sas
> 
> On Tue, Feb 22, 2011 at 12:52 PM, Jeff Pyle <jpyle at fidelityvoice.com> wrote:
>> Ronald,
>> 
>> I got into this very same question:
>>  http://www.openser.org/pipermail/users/2009-November/009405.html
>> 
>> Despite my apparent enthusiasm at the time I never did implement anything
>> useful.
>> 
>> 
>> - Jeff
>> 
>> 
>> 
>> On 2/22/11 12:27 PM, "Ovidiu Sas" <osas at voipembedded.com> wrote:
>> 
>>> Yes, you can do this with opensips.  Just assign a pipe number to an
>>> account and use that pipe to limit traffic for that account:
>>> http://www.opensips.org/html/docs/modules/devel/ratelimit.html#id250282
>>> 
>>> For now, there is a limit of 16 pipes:
>>> http://www.opensips.org/html/docs/modules/devel/ratelimit.html#id293075
>>> 
>>> 
>>> Regards,
>>> Ovidiu Sas
>>> 
>>> On Mon, Feb 21, 2011 at 11:41 AM, Ronald Cepres <rbcepres at gmail.com>
>>> wrote:
>>>> Hi everyone,
>>>> I would like to ask all of you if it is possible to use ratelimit
>>>> module to
>>>> limit cps per account/group (i.e.: account A has limit of 10 cps,
>>>> account
>>>> B's is 20 cps, etc.)? Is it even possible to implement this set-up on
>>>> opensips?
>>>> Thanks for any kind of help.
>>>> Regards,
>>>> Ronald
>> 
>> 
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>> 
> 
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>