<div dir="ltr"><div dir="ltr">Guy , any help on the previous email below ?</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Aug 12, 2020 at 4:43 PM morris edery <<a href="mailto:morrisedery@gmail.com">morrisedery@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hello , i am having an issue with fraud detection in openesips 2.4.<div>config below.</div><div><br></div><div>fraud_detection table </div><div><br></div><div><br><table border="1" style="font-size:13.008px;line-height:1.66em;color:rgb(102,102,102);font-family:"Trebuchet MS",sans-serif,Verdana,Arial"><tbody><tr><td align="center"><strong>rule id</strong></td><td align="center"><strong>profile id</strong></td><td align="center"><strong>prefix</strong></td><td align="center"><strong>start hour</strong></td><td align="center"><strong>end hour</strong></td><td align="center"><strong>days of the week</strong></td><td align="center"><strong>cpm warning</strong></td><td align="center"><strong>cpm critical</strong></td><td align="center"><strong>call duration warning</strong></td><td align="center"><strong>call duration critical</strong></td><td align="center"><strong>total calls warning</strong></td><td align="center"><strong>total calls critical</strong></td><td align="center"><strong>concurrent calls warning</strong></td><td align="center"><strong>concurrent calls critical</strong></td><td align="center"><strong>sequential calls warning</strong></td><td align="center"><strong>sequential calls critical</strong></td></tr><tr><td align="left">1</td><td align="center">1</td><td align="center">99</td><td align="center">00:00</td><td align="center">23:59</td><td align="center">Sat,Sun</td><td align="center">3</td><td align="center">5</td><td align="center">7200</td><td align="center">13200</td><td align="center">3</td><td align="center">5</td><td align="center">3</td><td align="center">5</td><td align="center">3</td><td align="center">5</td></tr></tbody></table></div><div><br></div><div><br></div><div>dialed number over 5 times 9913057772211</div><div><br></div><div>opensips.cfg</div><div><br></div><div><pre style="font-size:0.9em;font-family:"Lucida Console","Andale Mono","Courier New",Courier;margin-top:0px;margin-bottom:0px;padding:6px;border:1px solid rgb(235,235,235);background-color:rgb(251,254,250);color:rgb(102,102,102)">loadmodule "drouting.so"
loadmodule "dialog.so"
loadmodule "fraud_detection.so"
</pre><br></div><div><pre style="font-size:0.9em;font-family:"Lucida Console","Andale Mono","Courier New",Courier;margin-top:0px;margin-bottom:0px;padding:6px;border:1px solid rgb(235,235,235);background-color:rgb(251,254,250);color:rgb(102,102,102)">modparam("drouting", "db_partitions_url", "mysql://root:123456@localhost/opensips")
modparam("drouting", "use_partitions", 1)
modparam("fraud_detection", "db_url", "mysql://root:123456@localhost/opensips")</pre></div><div><br></div><div> check_fraud("$fU", "$rU", "1");</div><div> switch ($rc)<br> {<br> case 2:<br> xlog("L_INFO","Fraud No matching rule found, call ok $rc");<br> break;<br> case 1:<br> xlog("L_INFO","Fraud Matching rule found, but call still ok");<br> break;<br> case -1:<br> xlog("L_INFO","Fraud Possible fraud detected in warning level,<br> please check events, but call will complete");<br> break;<br> case -2:<br> xlog("L_INFO","Fraud Possible fraud detected in critical level,<br> please check events, call will be dropped for security<br> reasons");<br> exit;<br> case -3:<br> xlog("L_INFO","Fraud Malfuntion in fraud detection module, please<br> check, call not authorized");<br> exit;<br> default:<br> xlog("L_INFO","Fraud Undefined return code");<br> exit;<br> } <br></div><div><br></div><div><br></div><div>syslog result below</div><div><br></div><div>faraud outpout ->
Fraud No matching rule found, call ok <br><br><br>Any help will be appreciated </div><div><br></div><div>Thx<br><br></div></div>
</blockquote></div></div>