[asterisk-users] one for your filters

[Tarek Sawah]

you can start by simply telling us what is the purpose of your server.. and does it have long distance of overseas?? do you use Numeric usernames? simple passwords? passwords the same as your username? this way you can offer more info so we can help you.a quick answer will be.. opening a few and blocking ALL is easier.. as you can have upto 400 prefix to block .. unless you call world wide.. then you will have to block the countries you don't call .. another option.. make your usernames more complex.. letters and numbers.. an additional option is to use fail2ban with Asterisk support.. it will block the IP after the number of attempts you set in the configs. a client of mine wanted simple usernames and passwords to be setup using the keypad on the ipphones.. two months ago they had the same problem you faced.. 400$ to Zimbabway .. and later on 1200$ to Zimbabway.. their provider have a limit of 30 minutes per call .. so the caller had to redial.. unless it's automated.still you can provide us with more info.Regards
-- Tarek Sawah

Integrated Digital Systems

CCNA, MCSE, RHCE, VoIP USA: +1 386 492 9993



> Date: Wed, 23 Jun 2010 16:08:51 +0000
> From: jeff at sunfone.com
> To: asterisk-users at lists.digium.com
> Subject: [asterisk-users] one for your filters
> 
> 
> Some !@$#@@# in the Czech Republic used one of our SIP accounts to place 
> four thousand calls to what appears to be a toll number in Zimbabwe last 
> night.  Filter 82.150.165.5.
> 
> A more overriding problem for me is how do we know what *destinations* to 
> filter so this idea of war dialing a toll number is something we can 
> cutoff before it gets to our upstream provider?  Is there some collected 
> list of toll prefixes that I can filter on?
> 
> Cheers,
> 
> j
> 
> -- 
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>                http://www.asterisk.org/hello
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
 		 	   		  
_________________________________________________________________
The New Busy is not the old busy. Search, chat and e-mail from your inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_3
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20100623/839a0c59/attachment.htm