That still will not fix the problem, if the person installing asterisk does not add it on. And like it or not, it doesn't matter if it's user error or not, it will make the press and taint the Asterisk/Opensource name. I would have it as a default install, and let people that know how to, deactivate/modify it. kind of like apache does it disallow all then allow specific actions. Security is the one thing I would not skimp on.<br>
<br><div><br></div><div>--Mike </div><div><br><div class="gmail_quote">On Tue, Mar 10, 2009 at 11:10 AM, Mike <span dir="ltr"><<a href="mailto:list@virtutel.ca">list@virtutel.ca</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
><br>
> > I guess there should be some configurable options in Asterisk to cover<br>
> > for that. Like 10 consecutive failed login attempts should invoke<br>
> > asterisk to reply a login denied to that IP address and another option<br>
> > that would allow for let's say 5 attempts in 5 minutes and then block<br>
> > the extension for login.<br>
<br>
<br>
> 1. Should this even be Asterisk's responsibility, when it can already be<br>
> implemented w/ external tools that are much better suited to the task, are<br>
> already well supported and work really well:<br>
<br>
Should it? Not in an ideal world; as you suggest, external tools may be<br>
better for this task and it might keep * decluttered of tangential features.<br>
But not having this feature is just asking to be talked about, and in this<br>
case bad publicity (as in "my VoIP company using Asterisk got hacked out of<br>
250,000$" would not be good publicity IMO.<br>
<br>
If anything, something in Asterisk-addons would be good enough.<br>
<br>
Mike<br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
--Bandwidth and Colocation Provided by <a href="http://www.api-digital.com--" target="_blank">http://www.api-digital.com--</a><br>
<br>
asterisk-biz mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-biz" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-biz</a><br>
</blockquote></div><br></div>