Good article - might solve our problems for now: http://jcs.org/notaweblog/2010/04/11/properly_stopping_a_sip_flood He got the bots to stop by writing a ruby script that responds back to them with a SIP 200 OK. I'm going give it a go when I'm back home... Cheers, Tom