Am 05.03.2012 um 15:44 schrieb Lonnie Abelbeck: > On Mar 5, 2012, at 8:34 AM, David Kerr wrote: >> On Mon, Mar 5, 2012 at 9:02 AM, Lonnie Abelbeck <li...@lonnie.abelbeck.com> >> wrote: >> >> Good point Michael. >> >> Do you think this would be a problem matching the log by the Adaptive Ban >> plugin ? The ADAPTIVE_BAN_WHITELIST_INTERNAL=1 should mitigate normal users >> with fat fingers. >> >> If this is too general of a log to add to the Adaptive Ban plugin, please >> comment. >> >> In Asterisk 1.4, the number of logs with the source IP address was few. >> >> Lonnie >> >> Does the whitelisting work on IP address? If so then this may not be the >> best solution... you may have legitimate extensions at a branch office and >> their IP address may appear external (unless you VPN the offices together?) >> or remote users connecting over internet. >> >> David > > You can also define other IP (CIDR's) in ADAPTIVE_BAN_WHITELIST for that > case. But it does require extra configuration. > > I like your suggestion to use 'default' in the log match. No one uses a > [default] context, do they? > > Lonnie
I normally define: [general] context=unknownsip in sip.conf and use the default context normally for my phones. I do the "Dialplan Noted Suspicious IP Address" stuff in the unknownsip context. Michael http://www.mksolutions.info
smime.p7s
Description: S/MIME cryptographic signature
------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________ Astlinux-users mailing list Astlinux-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/astlinux-users Donations to support AstLinux are graciously accepted via PayPal to pay...@krisk.org.