[asterisk-users] SIP Register DOS attack

[Al lists]

I'll check this option and see if it helps next time,
just to clarify, there were no actual calls in place, just DOS register
attack.


On Wed, Jun 1, 2011 at 12:22 PM, Ira <ira at extrasensory.com> wrote:

>  At 10:56 AM 6/1/2011, you wrote:
>
> Do you have:
>
> sip.conf
> [general]
> allowguest=no
>
>
> So because of this I decided to type "sip show channels" into my Asterisk
> and got this:
>
>  Peer             User/ANR    Call ID          Format     Hold  Last
> Message  Expiry  Peer
> 216.xxx.69.xxx   (None)      f2d8db55-0a7edd  (nothing)  No    Rx:
> OPTIONS           <guest>
> 216.xxx.69.xxx   (None)      2ce0b9a5-6de7f4  (nothing)  No    Rx:
> OPTIONS           <guest>
> 64.xxx.41.xxx    6314098389  2a482e4b684a59a  (nothing)
> No                          <guest>
> 192.168.233.xxx  (None)     ioh3fna2aw.n4mz  (nothing)  No    Rx:
> REGISTER          <guest>
> 4 active SIP dialogs
>
> I have allowguest=no and all of those IPs are either my providers or a SIP
> phone on my network so why would it show <guest> as the peer?
>
> I'm running Asterisk SVN-trunk-r319759M  if that matters.
>
> Ira
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20110602/011ee24f/attachment.htm>