[OpenSIPS-Users] [NEW] Topology Hiding Module
Vlad Paiu
vladpaiu at opensips.org
Wed Mar 11 18:13:59 CET 2015
Hello,
I am happy to announce the new topology_hiding module.
Topology hiding is usually utilized as an approach to enhance SIP
network security. Since, in regular SIP traffic, critical IP address
data is forwarded to other networks, the concern is that third parties
can use that information in order to direct attacks at your internal SIP
network.
The new topology_hiding module strips and restores the headers that
contain topology information (Via, Record-Route, Route and Contact
headers) , and optionally it can also change the Call-ID of the requests.
Compared to the topology hiding solution offered by the B2B modules, it
has the great advantage that it can be used together with other script
functionalities that were previously incompatible ( eg. dialog vars &
profiles, accounting, etc.).
Compared to the previous solution of topology hiding which was
integrated into the dialog module ( which only supported topology hiding
for INVITE based dialogs ), the new module can work in stand-alone mode
as well ( without dialog support ), thus allowing to do topology hiding
for all types of dialogs ( eg. Presence dialogs ) and also for
standalone initial requests ( eg. SIP MESSAGE ).
Find the module readme at [1] and a tutorial with a script example at [2].
Testing and feedback are very much welcome.
[1] http://www.opensips.org/html/docs/modules/2.1.x/topology_hiding.html
[2] http://www.opensips.org/Documentation/Tutorials-Topology-Hiding
Best Regards,
--
Vlad Paiu
OpenSIPS Developer
http://www.opensips-solutions.com
More information about the Users
mailing list