[asterisk-users] Auto ban IP addresses

[Danny Nicholas]

From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Carlos Alvarez
Sent: Wednesday, January 02, 2013 4:54 PM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] Auto ban IP addresses

 

 

On Wed, Jan 2, 2013 at 3:49 PM, Frank <frank at efirehouse.com> wrote:

Greetings all,

I have been seeing a lot of

[Jan  2 16:36:31] NOTICE[7519]: chan_sip.c:23149 handle_request_invite:
Sending fake auth rejection for device 100<sip:100 at 108.161.145.18
<mailto:sip%3A100 at 108.161.145.18> >;tag=2e921697

in my logs lately. Is there a way to automatically ban IP address from
attackers within asterisk ?

 

http://www.fail2ban.org/wiki/index.php/Asterisk

 

Fail2ban is a nice program, but deny=108.161.145.18 in sip.conf should
satisfy OP's request.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20130102/aba96ce6/attachment.htm>