Re: [asterisk-users] Firewalling and Asterisk

2010-11-29 Thread Jeff LaCoursiere
On Sun, 28 Nov 2010, Jeremy Kister wrote: On 11/28/2010 12:03 PM, Silver Thorne wrote: So, I am wondering if anyone has a firewall/IP tables statement that keep out unauthorised users? No one seems to get in as we use really http://jeremy.kister.net/code/iptables/ if you already have an

Re: [asterisk-users] Firewalling and Asterisk

2010-11-29 Thread Jeremy Kister
On 11/29/2010 11:03 AM, Jeff LaCoursiere wrote: If I am digesting it correctly, this set of iptables rules does exactly what fail2ban would do, minus the logging, and without the overhead of a scripting language, correct? Very similar to fail2ban, but not quite the same: * this'll block

Re: [asterisk-users] Firewalling and Asterisk

2010-11-29 Thread Steve Totaro
On Sun, Nov 28, 2010 at 12:24 PM, Steve Edwards asterisk@sedwards.com wrote: On Sun, 28 Nov 2010, Silver Thorne wrote: I have noticed lately that there have been several attempts to hack our Asterisk server. So, I am wondering if anyone has a firewall/IP tables statement that keep out

[asterisk-users] Firewalling and Asterisk

2010-11-28 Thread Silver Thorne
Forgive my ignorance on this as I am still fairly new to Asterisk. I have noticed lately that there have been several attempts to hack our Asterisk server. I see multiple attempts to log in with a particular extension from the same IP address, perhaps hundreds of times per second. It causes

Re: [asterisk-users] Firewalling and Asterisk

2010-11-28 Thread Steve Edwards
On Sun, 28 Nov 2010, Silver Thorne wrote: I have noticed lately that there have been several attempts to hack our Asterisk server. So, I am wondering if anyone has a firewall/IP tables statement that keep out unauthorised users? 0) Read the list archives, this comes up weekly. 1)

Re: [asterisk-users] Firewalling and Asterisk

2010-11-28 Thread John Novack
If you do a search on the list postings for the past yea,r and even in the past 2 weeks, you will find much discussion on this topic. Fail2Ban seems fairly effective Complex user names and passwords really help ( assuming your hack attempts are with SIP ) sipvicious is most likely the hackers

Re: [asterisk-users] Firewalling and Asterisk

2010-11-28 Thread Jeremy Kister
On 11/28/2010 12:03 PM, Silver Thorne wrote: So, I am wondering if anyone has a firewall/IP tables statement that keep out unauthorised users? No one seems to get in as we use really http://jeremy.kister.net/code/iptables/ if you already have an iptables configuration, the throttle section is