{"id":9949,"date":"2021-05-06T19:18:17","date_gmt":"2021-05-06T14:18:17","guid":{"rendered":"https:\/\/alexeyka.zantsev.com\/?p=9949"},"modified":"2021-05-24T13:04:09","modified_gmt":"2021-05-24T08:04:09","slug":"oracle-sbc-prevent-options-forwarding","status":"publish","type":"post","link":"https:\/\/alexeyka.zantsev.com\/?p=9949","title":{"rendered":"Oracle SBC: prevent OPTIONS forwarding"},"content":{"rendered":"\n<p>A quick howto with illustrations of what you need to do to prevent OPTIONS requests from being forwarded by your OracleSBC\/AcmePacket from outside to the core of your VoIP network.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/oraclesbc_options.png\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/oraclesbc_options-edited.png\" alt=\"\" class=\"wp-image-9970\" width=\"475\" height=\"244\"\/><\/a><\/figure><\/div>\n\n\n\n<hr class=\"wp-block-separator\"\/>\n\n\n\n<p>Just specify correct SIP methods in the policy-attributes of local-policy and add one more policy-attribute for OPTIONS.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/opt.png\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/opt.png\" alt=\"\" class=\"wp-image-9960\" width=\"475\" srcset=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/opt.png 676w, https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/opt-237x300.png 237w\" sizes=\"(max-width: 676px) 100vw, 676px\" \/><\/a><\/figure><\/div>\n\n\n\n<hr class=\"wp-block-separator\"\/>\n\n\n\n<p>Specifying &#8216;next-hop&#8217; as &#8216;0.0.0.0&#8217; will make SBC to reply 404.<\/p>\n\n\n\n<p>Specifying &#8216;next-hop&#8217; as &#8216;*&#8217; will make SBC to reply 403.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/opt2.png\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/opt2.png\" alt=\"\" class=\"wp-image-9961\" width=\"475\" srcset=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/opt2.png 976w, https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/opt2-300x40.png 300w, https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/opt2-768x102.png 768w\" sizes=\"(max-width: 976px) 100vw, 976px\" \/><\/a><\/figure><\/div>\n\n\n\n<hr class=\"wp-block-separator\"\/>\n\n\n\n<p>Without these settings your SBC will forward OPTIONS sent by session-agents in the Internet (e.g. VoIP providers with which you configured SIP trunking) to your next-hops, usually this is your core network. Finally, such OPTIONS requests are answered not by SBC, but by your inner VoIP servers. These replies are not just undesirable, they also contain User-Agent header of your core equipment and the Contact header indicates their IP address.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/options_acme_4.png\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/options_acme_4.png\" alt=\"\" class=\"wp-image-10072\" width=\"475\" srcset=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/options_acme_4.png 1232w, https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/options_acme_4-300x50.png 300w, https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/options_acme_4-1024x171.png 1024w, https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/options_acme_4-768x128.png 768w\" sizes=\"(max-width: 1232px) 100vw, 1232px\" \/><\/a><\/figure><\/div>\n\n\n\n<hr class=\"wp-block-separator\"\/>\n\n\n\n<p>You may also skip the creation of a separate policy-attribute for OPTIONS method, just leaving the one for every other methods you need (e.g. INVITE, PRACK, REFER, UPDATE). In this case your SBC will reply &#8220;480 No Routes Found&#8221;:<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/options_acme_5.png\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/options_acme_5.png\" alt=\"\" class=\"wp-image-10073\" width=\"475\" srcset=\"https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/options_acme_5.png 1000w, https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/options_acme_5-300x38.png 300w, https:\/\/alexeyka.zantsev.com\/wp-content\/uploads\/2021\/05\/options_acme_5-768x98.png 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/a><\/figure><\/div>\n","protected":false},"excerpt":{"rendered":"<p>A quick howto with illustrations of what you need to do to prevent OPTIONS requests from being forwarded by your OracleSBC\/AcmePacket from outside to the core of your VoIP network. Just specify correct SIP methods in the policy-attributes of local-policy and add one more policy-attribute for OPTIONS. Specifying &#8216;next-hop&#8217; as &#8216;0.0.0.0&#8217; will make SBC to [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[204,196,195,205,217,201],"class_list":["post-9949","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-acme","tag-acme-packet","tag-acmepacket","tag-oracle","tag-oracle-sbc","tag-sbc"],"_links":{"self":[{"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=\/wp\/v2\/posts\/9949","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9949"}],"version-history":[{"count":32,"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=\/wp\/v2\/posts\/9949\/revisions"}],"predecessor-version":[{"id":12094,"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=\/wp\/v2\/posts\/9949\/revisions\/12094"}],"wp:attachment":[{"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9949"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9949"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/alexeyka.zantsev.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9949"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}