[asterisk-users] Auto ban IP addresses

[JR Richardson]

> I have been seeing a lot of
>
> [Jan  2 16:36:31] NOTICE[7519]: chan_sip.c:23149 handle_request_invite:
> Sending fake auth rejection for device
> 100<sip:100 at 108.161.145.18>;tag=2e921697
>
> in my logs lately. Is there a way to automatically ban IP address from
> attackers within asterisk ?
>
You may want to check out this presentation form the last Astricon, it
may be relevant:

http://www.astricon.net/2012/videos/Automated-Hacker-Mitigation.html

Cheers.

JR
-- 
JR Richardson
Engineering for the Masses