diff --git a/ChangeLog b/ChangeLog index e4d28ef..7f46078 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,6 +1,6 @@ 0.8.3dev ======== - 14-Mar-2017: - plugin_blacklist: new plugin to block UACs that cause + 16-Apr-2017: - plugin_blacklist: new plugin to block UACs that cause excessive failures durign REGISTER attempts. 27-Feb-2017: - improved memory behavior of some plugins during shutdown - fixed 2 minor memory leaks diff --git a/doc/siproxd.conf.example b/doc/siproxd.conf.example index 88b411e..a7e108e 100644 --- a/doc/siproxd.conf.example +++ b/doc/siproxd.conf.example @@ -530,15 +530,15 @@ plugin_fix_fbox_anoncall_networks = 192.168.0.0/16,10.0.0.0/8,172.16.0.0/20 # # This plugin maintains count of failed REGISTER attempts of # individual local UACs (clients) and does block outgoing requests -# from such a UAC once a limit (hitcount) has been reached. The +# from such a UAC once a limit /hitcount) has been reached. The # duration of the block is configurable. It is required that a blocked # UAC does *not* send any packets that are going to be blocked -# during the recovery duration the UAC must remain silent during +# during the duration to recover (the UAC must remain silent during # this period). # # ...dbpath: path where the database is located # ...mode: 0: no block, 1: IP based, 2: IP and SIP-user based -# ...simulate: 0: block UACs once the failure limit is reached +# ...simulate: 0: block UACs once the failure count limit has been reached # 1: simulate, only log but don't block # ...duration: block duration in seconds, 0: forever # ...hitcount: required failed REGISTER attempts until blocked. diff --git a/src/plugin_blacklist.c b/src/plugin_blacklist.c index b977a0b..b9d41cf 100644 --- a/src/plugin_blacklist.c +++ b/src/plugin_blacklist.c @@ -151,6 +151,11 @@ blacklist - failcount count of failed attempts - lastfail UNIX timestamp of last failure activity (last failed auth) - lastseen UNIX timestamp of last activity +requests + - timestamp timestamp of outgoing REGISTER request + - ip IP address of source (xxx.xxx.xxx.xxx) + - sipuri SIP authentication username + - callid SIP CallID of REGISTER request */