[asterisk-users] Force ip disconnect after register?

Bryant Zimmerman BryantZ at zktech.com
Mon Sep 13 10:22:33 CDT 2010


Is there a way to drop a ip connection to asterisk after a number of 
register attempts.

I have been having issues with hackers doing registration scanning against 
our server. We block their address at the fire wall but since asterisk does 
not force a drop of the connect after so many bad reg attempts I can't 
enforce the block until they drop and try again. This allows them to run 
the box with reg attempts as long as they maintain their initial connection 
or I reset the state tables on the firewall. This is very bad. Is there a 
way to force the connection to drop and reconnect after let's say 50 
attempts.

Thanks for any input.
Bryant
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20100913/94094be1/attachment.htm 


More information about the asterisk-users mailing list