dont forgot to put your "trusted IPs" into "ignoreip" list while configuring fail2ban its very important when a customer (may be 100+ extns) are behind NAT and only present single public IP RgdsHash
Date: Thu, 4 Sep 2014 08:42:11 -0700 From: motty.c...@gmail.com To: asterisk-users@lists.digium.com Subject: Re: [asterisk-users] Asterisk secure fine tune - stop attack Hi A J, believe me, I wish i do as you suggested, however I have a few extensions outside the office with dynamic IPs, so that is not a possibility. Thanks for your suggestions, I will try fail2ban. I don't know how complicated is to implement that on production server. Thanks, -Motty On Thu, Sep 4, 2014 at 8:19 AM, A J Stiles <asterisk_l...@earthshod.co.uk> wrote: On Thursday 04 Sep 2014, motty cruz wrote: > Hi All, > I see this kind of attack on our Asterisk Server, do you know how to block > that IP? Instead of blocking unwanted IPs, you should be permitting only wanted IPs. -- AJS Note: Originating address only accepts e-mail from list! If replying off- list, change address to asterisk1list at earthshod dot co dot uk . -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
-- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
