<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
Hi Ricardo,<br>
<br>
we are already using fail2ban but it bans my own ip address not the
real original ip of the attacker. How can I find it?<br>
<br>
Thank you<br>
<br>
Giorgio<br>
<br>
<br>
On 10/01/2013 02:16 PM, Ricardo Saffi Marques wrote:
<blockquote
cite="mid:CA+YoVnsJiXo-KXCismx7Mp+VhKp_K3x+sjjk9kUiSDXhUrHgDg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Well, you could use some software like denyhosts or
fail2ban to block an IP after a predefined number of (failed)
authentication attempts.<br>
<br>
</div>
Regards,<br>
<br>
Ricardo<br>
</div>
<div class="gmail_extra">
<br>
<br>
<div class="gmail_quote">On Tue, Oct 1, 2013 at 5:07 AM,
gincantalupo <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:gincantalupo@fgasoftware.com" target="_blank">gincantalupo@fgasoftware.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt
0.8ex; border-left: 1px solid rgb(204, 204, 204);
padding-left: 1ex;">
Hi,<br>
<br>
I get a lot of these messages on my Asterisk CLI:<br>
<br>
"Failed to authenticate user 1000<sip:1000@MY_OWN_IP_ADDRESS>;tag=03f82bb9"<br>
<br>
as if my PBX machine is trying to authenticate to itself. It
seems someone is attacking my asterisk PBX.<br>
<br>
Is there a way to fix this problem?<br>
<br>
Thank you.<br>
<br>
Giorgio Incantalupo<span class="HOEnZb"><font
color="#888888"><br>
<br>
<br>
-- <br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a
moz-do-not-send="true"
href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a>
--<br>
New to Asterisk? Join us for a live introductory webinar
every Thurs:<br>
<a moz-do-not-send="true"
href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a moz-do-not-send="true"
href="http://lists.digium.com/mailman/listinfo/asterisk-users"
target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
</font></span></blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
<div dir="ltr">
<div><b>Ricardo Saffi Marques</b><br>
</div>
<div><font size="1">[Linux SysAdmin]</font><br>
</div>
<div><b style="font-size: x-small;"><br>
</b></div>
<div><b style="font-size: x-small;">São Paulo/SP:</b><span
style="font-size: x-small;"> (11) 2104-000<font size="1">5</font></span><font
size="1"><br>
</font></div>
<div><font size="1"><br>
</font></div>
<div><img moz-do-not-send="true"
src="http://www.braslink.com/images/logo4.gif"><br>
</div>
</div>
</div>
</blockquote>
<br>
</body>
</html>