[asterisk-biz] IP Spoofing - Brute Force Attack Prevention

[Andrew Latham]

ISA server can help.  It can help by changing the fingerprint of the
address.  If your public address looks promising then seperating the
services amongst alternate IPs will help you identify the service that
identified you server as a "fun target"..


~
Andrew "lathama" Latham
lathama at gmail.com

* Learn more about OSS http://en.wikipedia.org/wiki/Open-source_software
* Learn more about Linux http://en.wikipedia.org/wiki/Linux
* Learn more about Tux http://en.wikipedia.org/wiki/Tux



On Fri, Feb 5, 2010 at 6:07 PM, Cyriaz at Gmail.com <cyriaz at gmail.com> wrote:
> My server is under IP spoof attack along with brute force. I am looking for
> a solution to get rid of this. The attacker is using my softphone to trace
> the IP. Its windows 2003 server, Can ISA server help?
>
> On Sat, Feb 6, 2010 at 12:53 AM, Kevin P. Fleming <kpfleming at digium.com>
> wrote:
>>
>> Cyriaz at Gmail.com wrote:
>> > Does it require to write firewall rules? how can I write a firewall rule
>> > to block IP Spoofing
>>
>> It is not possible to block IP spoofing, except for IPs that exist on
>> the inside of your firewall. If the source IP is outside your firewall,
>> it is not possible to know whether it originated from the proper owner
>> of that IP or whether it was spoofed.
>>
>> --
>> Kevin P. Fleming
>> Digium, Inc. | Director of Software Technologies
>> 445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
>> skype: kpfleming | jabber: kpfleming at digium.com
>> Check us out at www.digium.com & www.asterisk.org
>>
>> --
>> _____________________________________________________________________
>> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>>
>> asterisk-biz mailing list
>> To UNSUBSCRIBE or update options visit:
>>   http://lists.digium.com/mailman/listinfo/asterisk-biz
>
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> asterisk-biz mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-biz
>