>From time to time a similar subject pops up on the list. I'd like to repeat it is extremely dangerous to ban IP based on a suspicious UDP activity. The source IP of an UDP packet can be easily forged, so if you start using fail2ban or other blacklist techniques, it can be very awesome to start sending bogus invite and let you blacklist all major SIP providers...<div>
<br></div><div>However I am using fail2ban on all my servers :-)</div><div><br></div><div>Leandro<br><br><div class="gmail_quote">2011/10/12 Jack Honey Pot <span dir="ltr"><<a href="mailto:jack@asteriskhoneypot.com">jack@asteriskhoneypot.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Hi All,<br>
<br>
I'm not the first to try to start a VOIP blacklist but currently working
on a project for the next 12 hours, hopefully I can get it up soon.
What I intend to do is to work with a few reliable Harvester to gather
the logs. A simple script to parse it then extract the list of attackers
IP, compile them and send them out to the list.<br>
<br>
If
any of you are kind enough to zip and send me a
/var/log/asterisk/messages that contain hacker's scan & attack, it
will be helpful to my research. Do email me at <a href="mailto:jack@asteriskhoneypot.com" target="_blank">jack@asteriskhoneypot.com</a>
. Let me know if you are keen to be a harvester as well.Thanks.<br>
<br>
Regards,<br>
Jackster
<br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br></div>