[asterisk-users] Under heavy attack

Hans Witvliet hwit at a-domani.nl
Mon Nov 1 03:42:14 CDT 2010


On Sun, 2010-10-31 at 11:39 -0600, Joel Maslak wrote:
> To guess an 8 character (which is short) password that consists of random upper case, lower case, numbers, and 10 symbols (there are more you can use if you want), the average number of passwords that you would have to try to get in is:
> 

Perhaps this is good enough reason for starting to use SIP-s (using TLS)
with large >= 2K) keys. Should be safe enough, i think.
Snom seems to be capable of handling it, so can asterisk 1.6.x

Any unsuccesfull register attempt should add the offending address to
your own blacklist (for iptables)

hw



More information about the asterisk-users mailing list