On Mar 5, 2012, at 8:34 AM, David Kerr wrote:
> On Mon, Mar 5, 2012 at 9:02 AM, Lonnie Abelbeck <li...@lonnie.abelbeck.com> 
> wrote:
> 
> Good point Michael.
> 
> Do you think this would be a problem matching the log by the Adaptive Ban 
> plugin ?  The ADAPTIVE_BAN_WHITELIST_INTERNAL=1 should mitigate normal users 
> with fat fingers.
> 
> If this is too general of a log to add to the Adaptive Ban plugin, please 
> comment.
> 
> In Asterisk 1.4, the number of logs with the source IP address was few.
> 
> Lonnie
> 
> Does the whitelisting work on IP address?  If so then this may not be the 
> best solution... you may have legitimate extensions at a branch office and 
> their IP address may appear external (unless you VPN the offices together?) 
> or remote users connecting over internet.
> 
> David 

You can also define other IP (CIDR's) in ADAPTIVE_BAN_WHITELIST for that case.  
But it does require extra configuration.

I like your suggestion to use 'default' in the log match.  No one uses a 
[default] context, do they?

Lonnie
------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to