Re: [asterisk-users] FW: Under heavy attack

2010-11-02 Thread C F
- Non-Commercial Discussion Subject: Re: [asterisk-users] FW: Under heavy attack And obviously these attackers read our emails on lists like this and adjust their sick strategies accordingly. Zeeshan A Zakaria -- www.ilovetovoip.com www.pbxforall.com (beta) On 2010-11-01 12:02 PM, Jamie

Re: [asterisk-users] FW: Under heavy attack

2010-11-02 Thread Danny Nicholas
-Original Message- From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of C F Sent: Tuesday, November 02, 2010 10:06 AM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [asterisk-users] FW: Under heavy attack

Re: [asterisk-users] FW: Under heavy attack

2010-11-02 Thread jon pounder
I'm still on old-fashion copper-wire and have yet to experience the joy of SIP Trunk-ing and the type of issues discussed in this thread. My thought to share here is that outgoing calls should be easy for thoroughly authenticated users and impossible for others... Probably more

Re: [asterisk-users] FW: Under heavy attack

2010-11-02 Thread Cary Fitch
-Original Message- From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of jon pounder Sent: Tuesday, November 02, 2010 10:24 AM To: asterisk-users@lists.digium.com Subject: Re: [asterisk-users] FW: Under heavy attack I'm still

Re: [asterisk-users] FW: Under heavy attack

2010-11-02 Thread Jai Rangi
...@usawide.net wrote: -Original Message- From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of jon pounder Sent: Tuesday, November 02, 2010 10:24 AM To: asterisk-users@lists.digium.com Subject: Re: [asterisk-users] FW: Under

Re: [asterisk-users] FW: Under heavy attack

2010-11-02 Thread C F
-Commercial Discussion Subject: Re: [asterisk-users] FW: Under heavy attack Joel, after sending my previous posts I did realize your points might have some validity - and hence I owe you an apology - and that is if you are a telco or hosted pbx provider then strict fail2ban is not that good

[asterisk-users] FW: Under heavy attack

2010-11-01 Thread Jamie A. Stapleton
Only 100? We had a single server over 300. From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Zeeshan Zakaria Sent: Saturday, October 30, 2010 9:49 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re:

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread Zeeshan Zakaria
Its going on and on and on. Nothing like this has happened before. I have several hundreds by now. Make me wish Internet was a more regulated place. Its a place where bad people have the upper hand and good people cannot do anything about it. I know incidences where spammers and attackers were

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread Zeeshan Zakaria
And obviously these attackers read our emails on lists like this and adjust their sick strategies accordingly. Zeeshan A Zakaria -- www.ilovetovoip.com www.pbxforall.com (beta) On 2010-11-01 12:02 PM, Jamie A. Stapleton jstaple...@computer-business.com wrote: Only 100? We had a single

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread Cary Fitch
, 2010 12:13 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [asterisk-users] FW: Under heavy attack And obviously these attackers read our emails on lists like this and adjust their sick strategies accordingly. Zeeshan A Zakaria -- www.ilovetovoip.com www.pbxforall.com

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread Zeeshan Zakaria
: [asterisk-users] FW: Under heavy attack And obviously these attackers read our emails on lists like this and adjust their sick strategi... -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread Jeff LaCoursiere
On Mon, 1 Nov 2010, Zeeshan Zakaria wrote: Hi Cary, Can you email me off the list to point it out? Zeeshan A Zakaria -- www.ilovetovoip.com www.pbxforall.com (beta) On 2010-11-01 1:37 PM, Cary Fitch ca...@usawide.net wrote: I was going to point out a failing of the

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread Nyamul Hassan
: asterisk-users-boun...@lists.digium.com] *On Behalf Of *Zeeshan Zakaria *Sent:* Monday, November 01, 2010 12:13 PM *To:* Asterisk Users Mailing List - Non-Commercial Discussion *Subject:* Re: [asterisk-users] FW: Under heavy attack And obviously these attackers read our emails on lists

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread jon pounder
-users-boun...@lists.digium.com mailto:asterisk-users-boun...@lists.digium.com] *On Behalf Of *Zeeshan Zakaria *Sent:* Monday, November 01, 2010 12:13 PM *To:* Asterisk Users Mailing List - Non-Commercial Discussion *Subject:* Re: [asterisk-users] FW: Under heavy attack

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread Zeeshan Zakaria
Too late, now switching to attack level: lethal :) No, I am not one of these losers, and don't ever plan to be. Zeeshan A Zakaria -- www.ilovetovoip.com www.pbxforall.com (beta) On 2010-11-01 1:49 PM, Jeff LaCoursiere j...@sunfone.com wrote: On Mon, 1 Nov 2010, Zeeshan Zakaria wrote: Hi

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread Zeeshan Zakaria
Finding and punishing the abusers is the real problem, specially when in my country (Canada) where we generally don't like punishing people (or they get away finding loop holes in the law, or thanks to their lawyers), how would we catch people in other parts of the world and punish them?

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread Stuart Sheldon
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Here's my take on the attack... Sigh... http://www.stuartsheldon.org/blog/2010/11/sip-brute-force-attacks-escalate-over-halloween-weekend/ Stu - -- Open up the window Let some air into this room I think I'm almost chokin' From the smell of

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread Cary Fitch
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Here's my take on the attack... Sigh... http://www.stuartsheldon.org/blog/2010/11/sip-brute-force-attacks-escalate-o ver-halloween-weekend/ Stu They were trolling for SIP account IDs, not really trying to register. It was a coordinated bot or

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread Steve Edwards
On Mon, 1 Nov 2010, Cary Fitch wrote: Any small system should: Use IPTABLES and block any parts of the world you don't need access to/from. Start with any Class A address that is probing your system. Make your SIP IDs 8-12 characters in length, and use at least alpha numerical

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread dotnetdub
On 1 November 2010 21:20, Steve Edwards asterisk@sedwards.com wrote: On Mon, 1 Nov 2010, Cary Fitch wrote: Any small system should: Use IPTABLES and block any parts of the world you don't need access to/from. Start with any Class A address that is probing your system. Make your

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread Cary Fitch
I know there was talk on VUC recently about some kind of realtime RBL for SIP. Has anything progressed? It would be SO easy for asterisk users to contribute to a blacklist and also do a lookup in realtime to see if an IP has been blacklisted. A little bit of joined up thinking in the

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread Joel Maslak
[mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Zeeshan Zakaria Sent: Monday, November 01, 2010 12:13 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [asterisk-users] FW: Under heavy attack And obviously these attackers read our emails on lists

Re: [asterisk-users] FW: Under heavy attack

2010-11-01 Thread jon pounder
Mailing List - Non-Commercial Discussion *Subject:* Re: [asterisk-users] FW: Under heavy attack And obviously these attackers read our emails on lists like this and adjust their sick strategies accordingly. Zeeshan A Zakaria -- www.ilovetovoip.com http://www.ilovetovoip.com