<p>Please don't mention about restarting the server, you are not dealing with MS Windows.</p>
<p>For further investigation, <br></p>
<p>Zeeshan A Zakaria</p>
<p>--<br>
<a href="http://www.ilovetovoip.com">www.ilovetovoip.com</a></p>
<p><blockquote type="cite">On 2010-06-24 2:34 PM, "Steve Edwards" <<a href="http://asterisk.org">asterisk.org</a>@<a href="http://sedwards.com">sedwards.com</a>> wrote:<br><br><p><font color="#500050">On Thu, 24 Jun 2010, bruce bruce wrote:<br>
</font></p><p><font color="#500050">> Despite doing that, if you still see many registration attempts coming onto the box what could be ...</font></p>
Did your "save" save or overwrite your new rules?<br>
<br>
(BTW, I don't like iptables-save because I like to keep a modification history and comments about blocks of rules in /etc/sysconfig/iptables. Three years from now, will the next guy know why this address was being blocked?)<br>
<br>
Does "sudo iptables --list --numeric --verbose" show that you are dropping the attempts? (The first number is the number of packets that matched that rule.)<br>
<br>
If you have a rule like:<br>
<br>
--append INPUT --dport 5060 --jump LOG<br>
<br>
you can see who is sending packets and then depending on the filtering policy that is applicable to your environment either explicitly allow the good guys and drop everybody else or play whack-a-mole and drop the bad guys as you find them.<p>
<font color="#500050"><br><br>-- <br>Thanks in advance,<br>-------------------------------------------------------------------------<br>S...</font></p><br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
<br>
asterisk-biz mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-biz" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-biz</a><br></blockquote></p>