Please don't top post.

On Thu, 4 Sep 2014, motty cruz wrote:

Hi A J, believe me, I wish i do as you suggested, however I have a few extensions outside the office with dynamic IPs, so that is not a possibility.

Do your few extensions travel to China, Russia, Iran, Iraq, North Korea, etc? (Sorry if I stepped on anybody's toes.)

If you configure iptables to drop all and then only allow the few IP address ranges you really need, 90% of the problem is solved. Then use fail2ban to manage the remaining anklebitters.

--
Thanks in advance,
-------------------------------------------------------------------------
Steve Edwards       sedwa...@sedwards.com      Voice: +1-760-468-3867 PST
Newline                                              Fax: +1-760-731-3000
-- 
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to