AudioCodes Mediant 3000, User Manual

Page: 254 / 872

User's Manual 254 Document #: LTRT-89729
Mediant 3000
Parameter Description

param.call.dst.user

param.call.dst.host + '.com'

param.call.src.user + '<' + header.from.url.user + '@' + header.p-
asserted-id.url.host + '>'
Note: Only single quotation marks must be used.
Row Role
[MessageManipulation
s_RowRole]
Determines which condition must be used for the rule of this table row.

[0] Use Current Condition = The condition entered in this row must be
matched in order to perform the defined action (default).

[1] Use Previous Condition = The condition of the rule configured
directly above this row must be used in order to perform the defined
action. This option allows you to configure multiple actions for the
same condition.
Note: When multiple manipulations rules apply to the same header, the
next rule applies to the result string of the previous rule.
17.5 Configuring SIP Message Policy Rules
You can configure SIP message policy rules for blocking (blacklist) unwanted incoming SIP
messages or allowing (whitelist) receipt of desired messages. This feature allows you to
define legal and illegal characteristics of a SIP message. Message policies can be applied
globally (default) or per signaling domain by assigning it to a SIP interface in the SIP
Interface table (see 'Configuring SIP Interface Table' on page
227 ).
This feature is helpful against VoIP fuzzing (also known as robustness testing), which
sends different types of packets to its "victims" for finding bugs and vulnerabilities. For
example, the attacker might try sending a SIP message containing either an over-sized
parameter or too many occurrences of a parameter.
Each message policy rule can be configured with the following:

Maximum message length

Maximum SIP header length

Maximum message body length

Maximum number of headers

Maximum number of bodies

Option to send 400 "Bad Request" response if message request is rejected

Blacklist and whitelist for defined SIP methods (e.g., INVITE)

Blacklist and whitelist for defined SIP bodies
Note: The Message Policy table can also be configured using the table ini file
parameter, MessagePolicy.