<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>dont forgot to put your "trusted IPs" into "ignoreip" list while configuring fail2ban<div><br></div><div>its very important when a customer (may be 100+ extns) are behind NAT and only present single public IP</div><div><br></div><div>Rgds</div><div>Hash<br><br><div><hr id="stopSpelling">Date: Thu, 4 Sep 2014 08:42:11 -0700<br>From: motty.cruz@gmail.com<br>To: asterisk-users@lists.digium.com<br>Subject: Re: [asterisk-users] Asterisk secure fine tune - stop attack<br><br><div dir="ltr">Hi A J, <div>believe me, I wish i do as you suggested, however I have a few extensions outside the office with dynamic IPs, so that is not a possibility. Thanks for your suggestions, I will try fail2ban. I don't know how complicated is to implement that on production server. </div>
<div><br></div><div>Thanks, <br>-Motty</div></div><div class="ecxgmail_extra"><br><br><div class="ecxgmail_quote">On Thu, Sep 4, 2014 at 8:19 AM, A J Stiles <span dir="ltr"><<a href="mailto:asterisk_list@earthshod.co.uk" target="_blank">asterisk_list@earthshod.co.uk</a>></span> wrote:<br>
<blockquote class="ecxgmail_quote" style="border-left:1px #ccc solid;padding-left:1ex;"><div>On Thursday 04 Sep 2014, motty cruz wrote:<br>
> Hi All,<br>
> I see this kind of attack on our Asterisk Server, do you know how to block<br>
> that IP?<br>
<br>
</div>Instead of blocking unwanted IPs, you should be permitting only wanted IPs.<br>
<span class="ecxHOEnZb"><font color="#888888"><br>
--<br>
AJS<br>
<br>
Note: Originating address only accepts e-mail from list! If replying off-<br>
list, change address to asterisk1list at earthshod dot co dot uk .<br>
</font></span><div class="ecxHOEnZb"><div class="h5"><br>
--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
</div></div></blockquote></div><br></div>
<br>--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users</div></div> </div></body>
</html>