[asterisk-users] asterisk and fail2ban

Cary Fitch caryf at usawide.net
Tue Mar 29 15:57:34 CDT 2011


Obviously, the other side of the world wants connections to your side, no
matter what side you are on.
:-)

Cary


-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Administrator
TOOTAI
Sent: Tuesday, March 29, 2011 3:21 PM
To: asterisk-users at lists.digium.com
Subject: Re: [asterisk-users] asterisk and fail2ban

Le 29/03/2011 19:34, Sherwood McGowan a écrit :
> On 3/29/2011 12:25 PM, Steve Edwards wrote:
>>> On Tue, 29 Mar 2011 12:10:59 -0500, Sherwood McGowan
>>>> First thing I'd do is restrict the ip blocks your sip endpoints can
>>>> register/call from in sip.conf (or your database's table for sip
>>>> endpoints)
>> On Tue, 29 Mar 2011, Gilles wrote:
>>
>>> Thanks for the idea, but it's not possible, as the Asterisk must be
>>> accessible for road warriors and receive SIP calls from anyone.
>> Really? How many callers are you expecting from North Korea, Libya,
>> China, Iran, etc?
>>
> Thanks Steve, you just emailed exactly what I was going to say...
>
> Remember guys, there's a LOT of IP blocks out there that are almost
> definitely not going to be somewhere you expect to receive SIP traffic
> from.

Well, I can tell you that our servers in europe those days are mainly 
attacked by US IP ranges (remember last year the problem with amazon 
cloud). They now disappear here in europe but lots of other US networks 
quickly replace them :-(

-- 
Daniel

--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users




More information about the asterisk-users mailing list