[asterisk-users] Interesting attack tonight & fail2ban them
Jeroen Eeuwes
jeroeneeuwes at gmail.com
Wed Dec 28 23:29:28 CST 2011
Hi Michelle,
> I just realized there is no IP (host) in the message line, so no way for fail2ban to catch it.
Probably my understanding is limited, but it seems to me that they
have already 'access' to your Asterisk for them to be able to try to
make outgoing calls. Wouldn't it be better to make sure they get the
"usual" errors like "Registration from failed - no matching peer
found"?
In other words, how did they get this far in the first place?
Best regards,
Jeroen Eeuwes
More information about the asterisk-users
mailing list