1. Diameter Security Application User Guide with UDR
  2. Understanding DSA Functionality and Logic
  3. DSA Stateless Countermeasure Logic
  4. Destination-Realm and Origin-Realm Match Check (DrOrMatch)

2.4.5 Destination-Realm and Origin-Realm Match Check (DrOrMatch)

This countermeasure screens the ingress diameter request message to check if the Origin-Realm and Destination-Realm are having different value.

This countermeasure considers the ingress diameter request message as vulnerable if the Origin-Realm and Destination-Realm of the ingress diameter request have the same value.

Apart from the mandatory configuration in DSA Mandatory Configuration, no other tables need to be configured for this countermeasure.