vicidial.org

Hello Vicidial Team,

We have experienced tons of calls on a specific time frame which causes the system to hangup due to high utilization. Is there any way that we can automatically block a caller ID calling to specific DID so we can prohibit this from happening?

Thanks.

Regards,

Jessie Kid Fernando

Yes, that is why we created Inbound Filter Phone Groups.

Hello Matt,

Thanks for your quick response. However what I am trying to achieve is that let's say there's like a brute force from outside world that wants to call the inbound DID for how many times on a specific period of time. Like a fail2ban setup in asterisk.

Regards,

Jessie Kid Fernando

Somebody is knocking your DID offline by brute force calling it?
Why cant you just change your DID to a new number?

Hello thephaseuse,

Yes you are correct someone is knocking our DID by brute force.. We cannot just change it as it is our mainline and being used and published on most of our websites.

Regards,

Jessie

You could write a PHP script to do a lookup using your DID log and a specific time period(like the last 5 minutes) and then put that in the Filter URL setting of the DID.

Hello Mflorrel,

Then you want to run it via cron? By the way do you have any reference about the filter URL settings of the did? Just saw some description on the manual but no how to use and how it is working on the background. Thanks

No, it would not be in the cron, this would be a PHP script on your webserver that would be called by the internal DID routing process.

Hello Mflorrel,

Do you have sample script for this? Or an existing script similar to this that I can replicate?

Ingroup setting: No Agent Call URL

This can be a php script. PHP can do anything you like, including add the CID of the caller to a filter phone group after checking to see how often this number has called in recently.

Beware: Your solution is still imperfect because the caller need only rotate their caller ID just like a rotating IP address brute force attack (from a botnet) results in DDOS. Except a caller doesn't need to actually have a botnet for this, they can modify the CID on each call just like you can.

But if you are in the US your phone company can identify and initiate an FCC investigation into someone hammering your phone system. It's illegal in the US to use an autodialer to take up more than one line on a multiline company PBX.

The "vtiger_phone_match.php" script was originally written for the DID Filter URL feature, you can use that as an example.