[OpenSIPS-Users] Opensips 2.5 and fraud module

[Liviu Chircu]

Hi Denis,

The fraud detection module has no such mechanism, currently. We could 
invent some variables such as $frd_last_warn, $frd_last_crit, 
$frd_first_warn, $frd_first_crit. They would output a UNIX timestamp. If 
there were no warnings during the current interval, the timestamp value 
would be 0. Can't think of anything better now - you can polish this 
idea and open up a pull request if you want.

How many users do you have? The "cachedb_local" offers a fast and 
configurable hash implementation. Why wouldn't it be a good solution in 
order to store/fetch the above-mentioned timestamps for each of your users?

Best regards,

Liviu Chircu
OpenSIPS Developer
http://www.opensips-solutions.com

On 10.04.2018 13:11, Denis via Users wrote:
> Hello, Liviu!
> "So you want to check the time of the last fraud detection attempt for 
> a user?"
> Yes, but not for store this time to anywhere.
> I want to detect the time of the first fraud call, and if this time, 
> for example, between 19:00 and 09:00, make some actions.
> Can i do it with Opensips?
> Thank you.
> -- 
> С уважением, Денис.
> Best regards, Denis
> 10.04.2018, 12:28, "Liviu Chircu" <liviu at opensips.org>:
>>
>> Hi Denis,
>>
>> Yes, the "sequential calls" holds the size of the last batch of calls
>> sent to the same number. For example, if a user were to dial 44 and 45
>> prefixes in a round-robin manner, his "sequential calls" value would
>> never exceed 1.
>>
>> So you want to check the time of the last fraud detection attempt for a
>> user? You can use "cachedb_local", for example, and hold the last fraud
>> detection timestamp for each user. Also, note that check_fraud() [1] has
>> some useful return codes (-1 and -2), in case you don't want to use the
>> E_FRD_ events.
>>
>> Cheers,
>>
>> [1]:
>> http://www.opensips.org/html/docs/modules/2.4.x/fraud_detection.html#func_check_fraud
>>
>> Liviu Chircu
>> OpenSIPS Developer
>> http://www.opensips-solutions.com <http://www.opensips-solutions.com/>
>>
>> On 09.04.2018 09:12, Denis via Users wrote:
>>
>>      Hello, Liviu!
>>      Thank you very much!
>>      I will try your fix.
>>      And, What does "Sequential calls" mean? These are calls to one
>>     number?
>>      So, if we have situation dealing with reset counters, i want to make
>>      one thing.
>>      I want to check the time when fraud has been detected and if this
>>      time, say, after 19:00 make some actions. How can i check time
>>     of the
>>      call processing?
>>      Thank you.
>>
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opensips.org <mailto:Users at lists.opensips.org>
>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>>
>
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20180412/dc2bf405/attachment.html>