<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Times New Roman; font-size: 12pt; color: #000000'><span>Your server is being brute-forced. Read this article (http://www.voip-info.org/wiki/view/Fail2Ban+(with+iptables)+And+Asterisk) and set up fail2ban on your machine <b>right now.</b><br><br><span name="x"></span>Atenciosamente,<br><br>Vinícius Fontes<br>Gerente de Segurança da Informação<br>Canall Tecnologia em Comunicações<br>Passo Fundo - RS - Brasil<br>+55 54 2104-7000<br><br><div><img src="cid:DWT1354" doc="Briefcase/VMW_09Q3_LGO_VTSP_K.png"><br><br>Information Security Manager<br>Canall Tecnologia em Comunicações<br>Passo Fundo - RS - Brazil<br>+55 54 2104-7000</div><span name="x"></span><br></span><br><hr id="zwchr"><blockquote style="border-left:2px solid rgb(16, 16, 255);margin-left:5px;padding-left:5px;"><br>> Am 20.12.2010 21:39, schrieb Ernie Dunbar:<br>>> We have an issue with our Asterisk install where Asterisk produces many<br>>> Zombie processes (on the order of several hundred per minute) until<br>>> either<br>>> the Asterisk server is restarted (and the zombies die a natural death),<br>>> or<br>>> the kernel runs out of PID space (happens within hours) and brings the<br>>> system to a halt.<br>>><br>>> This problem only happens when the server is under some non-trivial<br>>> load.<br>>> We were testing this server with 8 SCCP phones, making up to five<br>>> simultaneous calls through the DAHDI interface (a Digium Wildcard<br>>> TE410P/TE405P (1st Gen)). Once our customers (nearly all SIP clients)<br>>> start logging on and we get around 7 or 8 simultaneous DAHDI calls,<br>>> Asterisk starts producing zombie processes at a high rate.<br>>><br>>> We are using the following software:<br>>><br>>> Debian Lenny 5.0<br>>> Asterisk 1.6.2.15<br>>> `dahdi show version`: DAHDI Version: 2.4.0 Echo Canceller: MG2<br>>> Libpri 1.4.11.4<br>>><br>>> A2Billing is also installed on this server, if that matters at all.<br>>><br>>> Any help with this issue, including help in troubleshooting the cause,<br>>> is<br>>> highly appreciated.<br>><br>> What does /var/log/asterisk/messages say? And /var/log/syslog?<br>><br><br>Not much. In /var/log/asterisk/messages here's a lot of lines like this:<br><br>[Dec 17 19:10:13] NOTICE[25518] chan_sip.c: Registration from<br>'<sip:XXXXX@voip.lightspeed.ca>' failed for 'XX.XXX.X.XXX' - No matching<br>peer found<br><br>And /var/log/syslog has all the normal output from a2billing.php and<br>making calls complete and such.<br><br>The other funny thing is that except for the massive number of zombie<br>processes, calls are being made and completed just fine. Even voice<br>quality is quite high.<br><br><br>--<br>_____________________________________________________________________<br>-- Bandwidth and Colocation Provided by http://www.api-digital.com --<br>New to Asterisk? Join us for a live introductory webinar every Thurs:<br> http://www.asterisk.org/hello<br><br>asterisk-users mailing list<br>To UNSUBSCRIBE or update options visit:<br> http://lists.digium.com/mailman/listinfo/asterisk-users<br></blockquote><br></div></body></html>