[asterisk-users] disable sip registration

[Steve Edwards]

On Fri, 27 May 2011, vip killa wrote:

> Is there a way to disable all SIP registration and block any requests? 
> The reason I'm asking is this particular Asterisk server will just be 
> originating calls. I've noticed sip attacks where the attacker attempts 
> to register a user 100x per second causing CPU to rise significantly. 

Gordon Henderson posted an iptables firewall script that 'rate limited' 
INVITEs and REGISTERs.

It should be trivial to modify that to always drop these packets.

Unloading the SIP channel driver should also be effective :)

-- 
Thanks in advance,
-------------------------------------------------------------------------
Steve Edwards       sedwards at sedwards.com      Voice: +1-760-468-3867 PST
Newline                                              Fax: +1-760-731-3000