That's a good point. Now I am really confused, though.<br><br>If someone is flooding 100,000 INVITE packets to Asterisk, then what should we do? Because we know, filtering the packets would only increase the workload..<br>
<br>Help please, as I am not that experienced as you guys are..<br><br>Fadil<br><br><div class="gmail_quote">On Jan 30, 2008 7:24 AM, Kevin P. Fleming <<a href="mailto:kpfleming@digium.com">kpfleming@digium.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="Ih2E3d">Abu 'Ubayd Fadil wrote:<br><br>> What I am thinking right now is to use some kind of authentication,<br>
> perhaps using OpenSSL, so that Asterisk can filter which packet to<br>> process, and which one to dump.<br>><br>> Any comments, suggestions, critics? What do you guys think?<br><br></div>All that will accomplish is to make the problem worse. The DoS is not<br>
usually making Asterisk do too much *real work*, it's just sending it<br>large volumes of traffic it must ignore. Adding complexity to figure out<br>which traffic to ignore and which to process will just increase the<br>
workload.<br><br>The larger issue though is that 'adding authentication ... using<br>OpenSSL' is all well and good if all your endpoints support it. If they<br>don't, you have to continue to use the existing mechanisms for<br>
communication.<br><font color="#888888"><br>--<br>Kevin P. Fleming<br>Director of Software Technologies<br>Digium, Inc. - "The Genuine Asterisk Experience" (TM)<br></font><div><div></div><div class="Wj3C7c"><br>
_______________________________________________<br>--Bandwidth and Colocation Provided by <a href="http://www.api-digital.com--" target="_blank">http://www.api-digital.com--</a><br><br>asterisk-security mailing list<br>To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-security" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-security</a><br></div></div></blockquote></div><br>