[asterisk-users] being bombarded with SIP packets

Norbert Zawodsky norbert at zawodsky.at
Thu Oct 28 04:19:06 CDT 2010


  Am 28.10.2010 09:41, schrieb Per Jessen:
> Over the last two weeks, we have had at least two "incidents" where our
> asterisk server got flooded (a hundred or more per second) by SIP
> packets.  Once from 114.31.50.10, second time from 173.212.200.146.  We
> became aware of the problem when bandwidth started suffering because
> asterisk got very busy sending back replies or rejects (dunno which, I
> didn't investigate it any further).
> The immediate issues were dealt with by having the firewall drop those
> packets, but I was wondering:
>
> 1) if anyone has seen the same problem, and
> 2) if you've got some iptables rules for limiting inbound SIP by rate?
> (or some such).
>
>
> thanks
> Per Jessen, Zürich
>
Hello Per,

(iptables) rule #1: search the archives !!!!
You will find nearly as many postings about that problem, as your server 
SIP packets received ... ;-)

Norbert



More information about the asterisk-users mailing list