[asterisk-users] being bombarded with SIP packets
Norbert Zawodsky
norbert at zawodsky.at
Thu Oct 28 04:19:06 CDT 2010
Am 28.10.2010 09:41, schrieb Per Jessen:
> Over the last two weeks, we have had at least two "incidents" where our
> asterisk server got flooded (a hundred or more per second) by SIP
> packets. Once from 114.31.50.10, second time from 173.212.200.146. We
> became aware of the problem when bandwidth started suffering because
> asterisk got very busy sending back replies or rejects (dunno which, I
> didn't investigate it any further).
> The immediate issues were dealt with by having the firewall drop those
> packets, but I was wondering:
>
> 1) if anyone has seen the same problem, and
> 2) if you've got some iptables rules for limiting inbound SIP by rate?
> (or some such).
>
>
> thanks
> Per Jessen, Zürich
>
Hello Per,
(iptables) rule #1: search the archives !!!!
You will find nearly as many postings about that problem, as your server
SIP packets received ... ;-)
Norbert
More information about the asterisk-users
mailing list