Mr.SIP icon indicating copy to clipboard operation
Mr.SIP copied to clipboard

Sip active response to attack

Open greenpdx opened this issue 2 years ago • 0 comments

I can detect attacks and block the IP of the UDP packet. But I want an active response to attacks to the sip server, return malformed headers, pen test the IP for open ports, .... REGISTER and INVITE responses would be needed.
Ideas; return the nonce or challenge with very large size to create buffer overflows, allow and never respond past ACK, force timeout on the the attacker software. Do you have any other ideas on how to respond to attacks?

greenpdx avatar Oct 19 '22 18:10 greenpdx