Re: [asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-03 Thread Steve Edwards
On Sat, 2 Oct 2010, Kyle Kienapfel wrote: You're not going to be able to put a dns hostname in the iptables, but you could have a script that runs at times and gets the ip address for your dynamic hostname and allows that. Almost. You can put a host name in iptables, but it is resolved

Re: [asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-03 Thread bruce bruce
Thanks for the input guys. So, the IP is resolved only when IPTABLES is loaded or reloaded. Therefore, the best approach would be to ping the hostname every let's say 3 seconds and see if the IP is still the same and if it is then move on, otherwise update the iptables with the new IP address.

[asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-02 Thread bruce bruce
Hi Everyone I think PAP2T supports DynDNS and other Dynamic DNS providers. I have a box that needs to be secured at all times. Currently it's not connected to the internet. If it were connected, I would have iptables block any and all traffic from outside but I want a single device - Linksys

Re: [asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-02 Thread jon pounder
On 10/02/2010 02:56 PM, bruce bruce wrote: Hi Everyone I think PAP2T supports DynDNS and other Dynamic DNS providers. I have a box that needs to be secured at all times. Currently it's not connected to the internet. If it were connected, I would have iptables block any and all traffic

Re: [asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-02 Thread bruce bruce
Hi, Can you please explain the DynDNS part. How would I put that in my Asterisk server as an identified party? Usually it comes to me with IP address (dynamic). Or do add something like this in sip_nat.conf: externip=mybox.dyndns.org localnet=192.168.0.0/255.255.255.0 ??? Thansk again, On

Re: [asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-02 Thread jon pounder
On 10/02/2010 03:31 PM, bruce bruce wrote: Hi, Can you please explain the DynDNS part. How would I put that in my Asterisk server as an identified party? Usually it comes to me with IP address (dynamic). Or do add something like this in sip_nat.conf: externip=mybox.dyndns.org

Re: [asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-02 Thread bruce bruce
I was confusing the asterisk server side of sip_nat with the PAP2T. So, PAP2T can only register to DynDNS and that's all. What sort of a script would I be looking for? something to query DynDNS for the new IP of the device to add to firewall? This might however bring down time if inquiry is not

Re: [asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-02 Thread bruce bruce
Can't I in my ip tables just accept the pap2t.dyndns.org if that is bind to the PAP2T? do you think the devices comes in with it's external IP rather than the dyndns domain? Thanks On Sat, Oct 2, 2010 at 3:43 PM, bruce bruce bruceb...@gmail.com wrote: I was confusing the asterisk server side

Re: [asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-02 Thread Roger Burton West
On Sat, Oct 02, 2010 at 04:09:33PM -0400, bruce bruce wrote: Can't I in my ip tables just accept the pap2t.dyndns.org if that is bind to the PAP2T? do you think the devices comes in with it's external IP rather than the dyndns domain? Yes. An IP datagram carries only the source and destination IP

Re: [asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-02 Thread sean darcy
On 10/02/2010 04:09 PM, bruce bruce wrote: Can't I in my ip tables just accept the pap2t.dyndns.org http://pap2t.dyndns.org if that is bind to the PAP2T? do you think the devices comes in with it's external IP rather than the dyndns domain? Thanks On Sat, Oct 2, 2010 at 3:43 PM, bruce bruce

Re: [asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-02 Thread bruce bruce
Yeah, you are missing all :-) Sorry, read the thread again. On Sat, Oct 2, 2010 at 5:05 PM, sean darcy seandar...@gmail.com wrote: On 10/02/2010 04:09 PM, bruce bruce wrote: Can't I in my ip tables just accept the pap2t.dyndns.org http://pap2t.dyndns.org if that is bind to the PAP2T? do

Re: [asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-02 Thread bruce bruce
Thanks Roger. I will be trying this box to see what I can do. Otherwise, I'd probably have to find a list of all of the Rogers (The ISP providing internet to these boxes) IPs to at least limit the attacks to Rogers ISP. hmmm Or maybe secure is using DNS like this:

Re: [asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-02 Thread Kyle Kienapfel
On Sat, Oct 2, 2010 at 4:37 PM, bruce bruce bruceb...@gmail.com wrote: Thanks Roger. I will be trying this box to see what I can do. Otherwise, I'd probably have to find a list of all of the Rogers (The ISP providing internet to these boxes) IPs to at least limit the attacks to Rogers ISP.

Re: [asterisk-users] Security - Using Linksys PAP2T from outside with a dynamic IP is there anyway to block all other traffic but those of the PAP2T?

2010-10-02 Thread Carlos Chavez
On Sat, 2 Oct 2010 14:56:11 -0400, bruce bruce wrote Hi Everyone I think PAP2T supports DynDNS and other Dynamic DNS providers. I have a box that needs to be secured at all times. Currently it's not connected to the internet. If it were connected, I would have iptables block any and all