On 23/07/11 04:48, Bruce B wrote:
Quote,/"How do the users register to begin with, if their REGISTER requests won't be processed unless their IP is already known to be a registrant? :-)"/ Well, unfortunately I don't have the luxury of knowing their IP and the closest I know is their IP range.
Then I don't understand what the point would be. You'll have to leave Asterisk responding to all Register requests (and to be fair all the attacks I've seen have been done by sending Register requests anyway).
I use OSSEC on my Asterisk systems to handle iptables rule generation on the fly. You could write your own rule(s) for that to block source IP addresses sending you Invites when they aren't Registered.
cheers, Paul. -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
