There are some good suggestions here as a starting point:<br><br><a href="http://jcs.org/notaweblog/2010/04/11/properly_stopping_a_sip_flood/">http://jcs.org/notaweblog/2010/04/11/properly_stopping_a_sip_flood/</a><br><br>
Rgds,<br><br>mcr<br><br><div class="gmail_quote">On 29 June 2010 15:39, Rodrigo Lang <span dir="ltr"><<a href="mailto:rodrigoferreiralang@gmail.com">rodrigoferreiralang@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<span><span title="">Hello list.<br><br></span><span title="">I'm trying to find a way to block any ip that tries to login
more than three times with the wrong password and try to log in three
different extensions. </span><span title="">For I have suffered some
brute force attacks on my asterisk in the morning period.<br><br></span><span title="">The idea would be: Any ip with three attempts without success
to log into an extension is blocked.<br><br></span><span title="">Is
there any way to accomplish this directly by the asterisk? </span><span title="">Or is there some kind of asterisk spit this information via the
AMI?<br><br></span><span title=""></span></span><span><span title="">I was
wondering to make a Java program to listen to the AMI and create a rule
in iptables for ip in specific.</span></span><br><span><span title=""><br></span><span title="">Does anyone have any suggestions?<br><br><br></span><span title="">Thanks,<br></span><font color="#888888"><span title="">Rodrigo Lang.</span></font></span>
<br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br>