<br><br><div class="gmail_quote">On Sun, Sep 6, 2009 at 7:50 PM, Faiz Rehman <span dir="ltr"><<a href="mailto:faiz_grw@yahoo.com">faiz_grw@yahoo.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit;" valign="top">
<div>Hi </div>
<div> </div>
<div>IMy asterisk has been hacked my this IP "66.7.197.76". When i blocked this ip from Linux Firewall then he tried to attack from 2nd IP "200.90.72.141". </div>
<div>He fhound one my extension with a weak password and started dialing out.</div>
<div>Thanks</div>
<div> </div>
<div>Faiz</div></td></tr></tbody></table><br><br></blockquote><div>Since this is the biz list, I would expect that you are an ITSP? Why not only allow customer IPs and block the rest.<br><br>If you cannot do that, why not add a alpha character to your extensions. Instead of 101, make it z101 or whatever.<br>
<br>Bottom line, don't have weak credentials or firewall rules. <br></div></div><br>-- <br>Senior Systems and Network Administrator<br>Triple Canopy, Inc.,<br>2250 Corporate Park Drive, Suite 300<br>ph. +1.703.673.5191<br>
mob.+1.240.938.1212<br>FAX.+1.703.673.1279<br><a href="mailto:steve.totaro@triplecanopy.com">steve.totaro@triplecanopy.com</a><br>