[asterisk-users] asterisk and fail2ban

[Administrator TOOTAI]

Le 29/03/2011 19:34, Sherwood McGowan a écrit :
> On 3/29/2011 12:25 PM, Steve Edwards wrote:
>>> On Tue, 29 Mar 2011 12:10:59 -0500, Sherwood McGowan
>>>> First thing I'd do is restrict the ip blocks your sip endpoints can
>>>> register/call from in sip.conf (or your database's table for sip
>>>> endpoints)
>> On Tue, 29 Mar 2011, Gilles wrote:
>>
>>> Thanks for the idea, but it's not possible, as the Asterisk must be
>>> accessible for road warriors and receive SIP calls from anyone.
>> Really? How many callers are you expecting from North Korea, Libya,
>> China, Iran, etc?
>>
> Thanks Steve, you just emailed exactly what I was going to say...
>
> Remember guys, there's a LOT of IP blocks out there that are almost
> definitely not going to be somewhere you expect to receive SIP traffic
> from.

Well, I can tell you that our servers in europe those days are mainly 
attacked by US IP ranges (remember last year the problem with amazon 
cloud). They now disappear here in europe but lots of other US networks 
quickly replace them :-(

-- 
Daniel