Blog

Chargen DoS Attack

If you were to encounter a Chargen DoS attack from your Sun Server, disable this service as it is not required.

Edit the file below an remark by adding a pound sign before each line containing chargen.
Restart service or reboot server.

vi /etc/inet/inetd.conf

# Echo, discard, daytime, and chargen are used primarily for testing.
#
echo stream tcp6 nowait root internal
echo dgram udp6 wait root internal
discard stream tcp6 nowait root internal
discard dgram udp6 wait root internal
daytime stream tcp6 nowait root internal
daytime dgram udp6 wait root internal
#chargen stream tcp6 nowait root internal
#chargen dgram udp6 wait root internal

Source:
http://www.deer-run.com/~hal/SolarisWebcast.pdf

183 with SDP (early media)

To force PGW on call control mode to send 183 with SDP (early media) use support183="4".
See sample below.

USE VIRTUAL SIP IP:
prov-add:sippath:name="sip-path-1",MDO="IETF_SIP"
prov-add:siplnk:name="sip-lnk-1",IPADDR="Virtual_IP_Addr1",PORT=5060,PRI=1,svc="sip-path-1"

prov-add:trnkgrp:name="100",svc="sip-path-1",type="SIP_IN"
prov-add:TRNKGRPPROP:name="100",Localport="5060",CustGrpId="1111",support183="4"
prov-ed:TRNKGRPPROP:name="100",mgcdomain="10.34.2.100",compressiontype="1",support183="4"

Provision the property support183 on the incoming trunk group.

•If the terminating side cannot play the remote ringback tone, you can provision the support183 property:

–0 (183 not supported) = The Cisco PGW 2200 Softswitch sends a 180 Ringing without SDP.
–1 (Q1912.5 supported without SDP in 180 message) = The Cisco PGW 2200 Softswitch sends a 180 Ringing without SDP.
–2 (Q1912.5 supported with InbandInfo check) = The Cisco PGW 2200 Softswitch sends a 180 Ringing without SDP.
–3 (183 supported) = The Cisco PGW 2200 Softswitch sends a 180 Ringing without SDP.

•If the terminating side can play the remote ringback tone and the alerting signaling includes the InbandInfo indicator, you can provision the support183 property:

–2 (Q1912.5 supported with InbandInfo check) = The Cisco PGW 2200 Softswitch sends a 180 Ringing with SDP.
–3 (183 supported) = The Cisco PGW 2200 Softswitch sends a 183 Session Progress with SDP.
–4 (always send 183) = The Cisco PGW 2200 Softswitch sends a 183 Session Progress with SDP.
–5 (Q1912.5 supported) = The Cisco PGW 2200 Softswitch sends a 180 Ringing with SDP.

•If the terminating side can play the remote ringback tone but the alerting signaling does not include the Inbandinfo indicator, you can provision the support183 property:

–4 (always send 183) = The Cisco PGW 2200 Softswitch sends a 183 Session Progress with SDP.
–5 (Q1912.5 supported) = The Cisco PGW 2200 Softswitch sends a 180 Ringing with SDP.

Cisco PGW 2200 Variants

Cisco PGW 2200 Variants

The Common Channel Signaling System 7 (SS7/C7) is a packet-based signaling network used worldwide by service providers to control PSTN traffic. Although it is based primarily on two families of protocols, ANSI and ITU-T, it has evolved over the years to the point where virtually every country in the world (and many TDM switches) have a custom variant that supports its specific requirements. Within those countries, products that interconnect to the national SS7 network are required to pass stringent interconnection tests before they can pass live traffic.

The Cisco PGW 2200 PSTN Gateway supports rapid development of SS7 variants. The product currently supports more than 90 SS7 variants and is used in more than 50 countries, making it the most widely deployed call agent on the market today.

Here is a list of Variants from version 9.6.1.

ANSISS7_2K
ANSISS7_92
ANSISS7_C2
ANSISS7_C3
ANSISS7_E1
ANSISS7_STANDARD
BTNUP_BTNR167
BTNUP_IUP
ETS_300_121
ETS_300_356
GR317
HONGKONG
ISUPV1_POLI
ISUPV2_32DIG
ISUPV2_AUSTRIAN
ISUPV2_AUSTRIAN_C2
ISUPV2_CZECH
ISUPV2_DUTCH
ISUPV2_FINNISH96
ISUPV2_FRENCH
ISUPV2_GERMAN
ISUPV2_ISRAEL
ISUPV2_JAPAN
ISUPV2_JAPAN_C2
ISUPV2_NORWEGIAN
ISUPV2_POLISH
ISUPV2_SPANISH
ISUPV2_SPANISH_C2
ISUPV2_SWISS
ISUPV2_SWISS_C2
ISUPV2_VIETNAM
ISUPV3
ISUPV3_UK
ISUPV3_UK_C2
ISUPV3_UK_C3
ISUPV3_UK_C4
Q721_BASE
Q721_BRAZILIAN
Q721_CHINA
Q721_FRENCH
Q721_PHILLIPINE
Q761_ARGENTINA
Q761_ARGENTINA_C2
Q761_AUSTRL
Q761_AUSTRL_C2
Q761_BASE
Q761_BELG
Q761_BELG_97VER
Q761_CHILE
Q761_CHINA
Q761_CHINA_C2
Q761_DANISH
Q761_GERMAN
Q761_INDIA
Q761_JAPAN
Q761_KOREAN
Q761_MALAYSIAN
Q761_NEWZEALAND
Q761_PERU
Q761_PORTUGAL
Q761_SINGAPORE
Q761_SINGAPORE_C2
Q761_TAIWAN
Q761_THAILAND
Q767_AUSTRALIA
Q767_BASE
Q767_BRAZIL
Q767_COLOMBIA
Q767_GUATEMALA
Q767_INDONESIA
Q767_ITAL
Q767_ITAL_C2
Q767_MEXICAN
Q767_NIGERIAN
Q767_RUSS
Q767_SINGAPORE
Q767_SPAN
Q767_SWED
Q767_TURKISH