Slow attack problem

[ALing0]

Problem:
In the client using some method (such as telnet) to establish a tcp connection with server-side sip listening port , but after the establishment of tcp connection, the client does not send any data. However, sip-servlets will not disconnect this tcp connection, may lead to the number of connections exhausted , Resulting in DOS

The attack process：

1. The client executes the telnet service port
   Start the client telnet server port 5061, do not exit for a long time:
   Excuting an order:
   telnet 172.22.17.26 5061

[gsaslis]

Hi @ALing0

Thanks for reporting this issue.
Do you have some specific proposal for how this issue should be addressed? (apart from the obvious solution of blocking access on the firewall level, of course... I presume that's not an option for you? )