[asterisk-users] stopping unwanted attempts

[Eric Wieling]

It is far worse when you have multiple phones behind the same public address (i.e. NAT).    If any one of the phones has a bad password and the IP gets blocked by fail2ban, then all phones at that site would be blocked. 

-----Original Message-----
From: asterisk-users-bounces at lists.digium.com [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Chris Bagnall
Sent: Sunday, January 19, 2014 10:40 AM
To: asterisk-users at lists.digium.com
Subject: Re: [asterisk-users] stopping unwanted attempts

On 19/1/14 2:57 pm, Ron Wheeler wrote:
> fail2ban is so easy to set up, there is no reason not to set it up.

One of the dangers with fail2ban - at least in its default configuration
- is that a legitimate SIP phone with an incorrect password can quite easily send dozens of registration attempts in a couple of minutes, thus blocking that IP.