<div dir="ltr"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Apr 4, 2014 at 10:05 AM, Daniel Taylor <span dir="ltr"><<a href="mailto:dtaylor@vocalabs.com" target="_blank">dtaylor@vocalabs.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF" text="#000000">
    <div>I don't know what platform you are on,
      but if you are on Linux (and possibly BSD) you could use
      "fail2ban" to block them at the network interface.<div><div class="h5"><br></div></div></div></div></blockquote><div>      I second fail2ban. If you need some ideas to configure it, you can steal them from the freepbx setup.<br>
<br></div><div>      How many sip phones do you have outside your network? If few and in well-known IPs, consider limiting access to only those (and the sip provider you are using).<br> <br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><div><div><div class="h5">
      <br>
      On 04/04/2014 09:00 AM, motty cruz wrote:<br>
    </div></div></div><div><div class="h5">
    <blockquote type="cite">
      <div dir="ltr">Hello All, my asterisk server is constantly under
        attack
        <div><br>
          [Apr  4 06:56:00] NOTICE[21745]: chan_sip.c:25673
          handle_request_register: Registration from '"4941"
          <sip:4941@public_ip>' failed for '<span>194.100.46.132</span><span dir="ltr"><span dir="ltr"><span><img><span>194.100.46.132</span><span></span></span></span></span>:56714'
          - Wrong password<br>
          [Apr  4 06:56:00] NOTICE[21745]: chan_sip.c:25673
          handle_request_register: Registration from '"4941"
          <sip:4941@public_ip>' failed for '<span>194.100.46.132</span><span dir="ltr"><span dir="ltr"><span><img><span>194.100.46.132</span><span></span></span></span></span>:56714'
          - Wrong password<br>
          [Apr  4 06:56:00] NOTICE[21745]: chan_sip.c:25673
          handle_request_register: Registration from '"4941"
          <sip:4941@public_ip>' failed for '<span>194.100.46.132</span><span dir="ltr"><span dir="ltr"><span><img><span>194.100.46.132</span><span></span></span></span></span>:56714'
          - Wrong password<br>
          [Apr  4 06:56:00] NOTICE[21745]: chan_sip.c:25673
          handle_request_register: Registration from '"4941"
          <sip:4941@public_ip>' failed for '<span>194.100.46.132</span><span dir="ltr"><span dir="ltr"><span><img><span>194.100.46.132</span><span></span></span></span></span>:56714'
          - Wrong password<br>
          [Apr  4 06:56:00] NOTICE[21745]: chan_sip.c:25673
          handle_request_register: Registration from '"4941"
          <sip:4941@public_ip>' failed for '<span>194.100.46.132</span><span dir="ltr"><span dir="ltr"><span><img><span>194.100.46.132</span><span></span></span></span></span>:56714'
          - Wrong password<br>
          <br>
        </div>
        <div>is there a way to reject their registration after a three
          consecutive tries? <br>
        </div>
        <div><br>
        </div>
        <div>Thanks, <br>
        </div>
        <div>
          <div><a>Call</a></div>
          <div><a>Send SMS</a></div>
          <div><a>Add to Skype</a></div>
          <div><span>You'll need Skype
              Credit</span><span>Free
              via Skype</span></div>
        </div>
      </div>
      <br>
      <fieldset></fieldset>
      <br>
    </blockquote>
    <br>
    <br>
    </div></div><span class="HOEnZb"><font color="#888888"><pre cols="72">-- 
Daniel Taylor          VP Operations            Vocal Laboratories, Inc.
<a href="mailto:dtaylor@vocalabs.com" target="_blank">dtaylor@vocalabs.com</a>   <a href="http://www.vocalabs.com/" target="_blank">http://www.vocalabs.com/</a>            <a href="tel:%28612%29235-5711" value="+16122355711" target="_blank">(612)235-5711</a>
</pre>
  </font></span></div>

<br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
               <a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
   <a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br></div></div>