Version 6.6 225 Mediant 2000
User's Manual 17. SIP Definitions
Parameter Description
Note: Only single quotation marks must be used.
Row Role
[MessageManipulation
s_RowRole]
Determines which condition must be used for the rule of this table row.
[0] Use Current Condition = The condition entered in this row must be
matched in order to perform the defined action (default).
[1] Use Previous Condition = The condition of the rule configured
directly above this row must be used in order to perform the defined
action. This option allows you to configure multiple actions for the
same condition.
Note: When multiple manipulations rules apply to the same header, the
next rule applies to the result string of the previous rule.
17.5 Configuring SIP Message Policy Rules
You can configure SIP message policy rules for blocking (blacklist) unwanted incoming SIP
messages or allowing (whitelist) receipt of desired messages. This feature allows you to
define legal and illegal characteristics of a SIP message. Message policies can be applied
globally (default) or per signaling domain by assigning it to a SIP interface in the SIP
Interface table (see 'Configuring SIP Interface Table' on page 202).
This feature is helpful against VoIP fuzzing (also known as robustness testing), which
sends different types of packets to its "victims" for finding bugs and vulnerabilities. For
example, the attacker might try sending a SIP message containing either an over-sized
parameter or too many occurrences of a parameter.
Each message policy rule can be configured with the following:
Maximum message length
Maximum SIP header length
Maximum message body length
Maximum number of headers
Maximum number of bodies
Option to send 400 "Bad Request" response if message request is rejected
Blacklist and whitelist for defined SIP methods (e.g., INVITE)
Blacklist and whitelist for defined SIP bodies
Note: The Message Policy
table can also be configured using the table ini file
parameter, MessagePolicy.
To Next Page
Loading...
Need help?
General
