Forum Discussion

Evelin_195902's avatar
Evelin_195902
Icon for Nimbostratus rankNimbostratus
Aug 21, 2015

SIP irule for checking dialed string

Hi guys, Please help me with creating na irule for checking a dialed string in SIP INVITE request. I need to drop every call that has !=8 or !=0 symbols in the SIP INVITE. Like this: sip:3286184@20...
application delivery
devops
irule
iRules
LTM
sip
Evelin_195902's avatar
Evelin_195902
Icon for Nimbostratus rankNimbostratus
Sep 17, 2015

Thanks Syed, It's a bit more complicated because we may have valid SIP request without any meeting number: like sip: or sip:.

Here is the final version of my irule:

when SIP_REQUEST {
    if { [SIP::method] == "INVITE" && [SIP::uri] matches_regex {^.+@.+$} }
    {
        if { not ([SIP::uri] matches_regex {^(sip:|sips:)[0-9]{7}@}) }
        {            
            log local0. "SIP Drop for [SIP::uri] from [IP::remote_addr] - possible frauder"
            drop   
        }

    }
}

I hope this can be useful for other people having similar case.

regards, Evelin