David,

Yes, either option would work, if it is just a few IP's then the text  
entry "block all traffic by host/CIDR" in the Firewall tab will work,  
if the list is long you might want to use the /mnt/kd/blocked-hosts  
(one IP/CIDR per line), and check that option.

Personally, I block all inbound UDP 5060 except for known peers.  If  
the remote IP's are dynamic I allow their subnet.

Lonnie


On Sep 23, 2009, at 3:06 PM, David Kerr wrote:

> This afternoon a certain user "v...@66.96.222.197" with caller ID  
> name/number "voip" <voip> has been attempting to place calls through  
> my Astlinux PBX. Lucky for me I placed some security checks in my  
> default inbound context to prohibits this kind of behavior. But is  
> there a way, using the arno firewall, I can block this IP address  
> from getting anywhere near my dialplan?  I see a "block all traffic  
> by host/CIDR" entry at the bottom of the firewall page. Is this  
> where I would do this?  What is the checkbox for /mnt/kd/blocked- 
> hosts for.
>
> Thanks
> David
> --------

------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to