Re: [asterisk-users] SIP Register DOS attack

2011-06-02 Thread Al lists
I'll check this option and see if it helps next time, just to clarify, there were no actual calls in place, just DOS register attack. On Wed, Jun 1, 2011 at 12:22 PM, Ira i...@extrasensory.com wrote: At 10:56 AM 6/1/2011, you wrote: Do you have: sip.conf [general] allowguest=no So

Re: [asterisk-users] SIP Register DOS attack

2011-06-02 Thread khalid touati
Also you guys may need to use: sip.conf [general] allowguest=no *alwaysauthreject = yes* On Thu, Jun 2, 2011 at 1:01 PM, Al lists asteris...@gmail.com wrote: I'll check this option and see if it helps next time, just to clarify, there were no actual calls in place, just DOS register attack.

Re: [asterisk-users] SIP Register DOS attack

2011-06-01 Thread Paul Belanger
On 11-05-31 06:24 PM, Al lists wrote: Hi List Recently i have noticed this attack on couple of servers, usually a foreign IP starts sending tons of register request without any answer to authentication, if you type sip show channels in cli you will see tons of these: 1.2.3.4 (None)

Re: [asterisk-users] SIP Register DOS attack

2011-06-01 Thread Ira
At 10:56 AM 6/1/2011, you wrote: Do you have: sip.conf [general] allowguest=no So because of this I decided to type sip show channels into my Asterisk and got this: Peer User/ANR Call ID Format Hold Last Message Expiry Peer 216.xxx.69.xxx (None) f2d8db55-0a7edd (nothing) No Rx: OPTIONS guest

[asterisk-users] SIP Register DOS attack

2011-05-31 Thread Al lists
Hi List Recently i have noticed this attack on couple of servers, usually a foreign IP starts sending tons of register request without any answer to authentication, if you type sip show channels in cli you will see tons of these: 1.2.3.4 (None) 2389603298 00101/1 0x0 (nothing)