FreePBX | Register | Issues | Wiki | Portal | Support

Stop SipVicious ('friendly-scanner')


(Infotek) #1

By default the SipVicious scanner uses the ua : “friendly-scanner”. To block this ua, you can have iptables search the packet for that text.

add the following line to /etc/sysconfig/iptables

-A INPUT -p udp -m udp --dport 5060 -m string --string “friendly-scanner” --algo bm --to 500 -j DROP