[asterisk-users] Attack on Sip server.

[Eric Wieling]

This is a common issue and is covered in the mailing list archives multiple times.

Do a Google search for something like:

    site:lists.digium.com fail2ban


From: asterisk-users-bounces at lists.digium.com [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Steven Howes
Sent: Friday, June 27, 2014 10:58 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] Attack on Sip server.

On 27 Jun 2014, at 15:37, Anurag Rana <anuragrana31189 at gmail.com<mailto:anuragrana31189 at gmail.com>> wrote:
There are lot of requests coming in and I am not able to stop it because I am unable to detect the IP address.
I used wireshark to capture the packets.

If you can capture the packet, surely you have the IP? If they intend to get the response then the IP header can't be forged.

Steve
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20140627/f5a851ce/attachment.html>