[asterisk-users] asterisk and fail2ban

[Steve Edwards]

>> On 03-29-2011 19:25, Steve Edwards wrote:

>>> Really? How many callers are you expecting from North Korea, Libya, 
>>> China, Iran, etc?

> On Tue, 29 Mar 2011 23:09:06 +0200, adamk at 3a.hu wrote:

>> after reviewing last week's log i'd say around 25-28k/min :)

On Tue, 29 Mar 2011, Gilles wrote:

> So it looks like I should check out sshguard instead of relying on 
> blocks of IP's :-)

It's not A or B, think A AND B.

Security should be in layers -- my pocket GPS is in my locked glove box, 
in my locked car, in my locked garage, in my gated community.

If there is never a need to accept callers from North Korea, how will you 
explain to your boss that some NK script weenie discovered some weakness 
in A or B and racked up a bazillion minutes to Libya?

What if you misconfigure A or B?

What if A or B has a 'window of opportunity' during system restart?

-- 
Thanks in advance,
-------------------------------------------------------------------------
Steve Edwards       sedwards at sedwards.com      Voice: +1-760-468-3867 PST
Newline                                              Fax: +1-760-731-3000