Am 05.03.2012 um 15:44 schrieb Lonnie Abelbeck:

> On Mar 5, 2012, at 8:34 AM, David Kerr wrote:
>> On Mon, Mar 5, 2012 at 9:02 AM, Lonnie Abelbeck <li...@lonnie.abelbeck.com> 
>> wrote:
>> 
>> Good point Michael.
>> 
>> Do you think this would be a problem matching the log by the Adaptive Ban 
>> plugin ?  The ADAPTIVE_BAN_WHITELIST_INTERNAL=1 should mitigate normal users 
>> with fat fingers.
>> 
>> If this is too general of a log to add to the Adaptive Ban plugin, please 
>> comment.
>> 
>> In Asterisk 1.4, the number of logs with the source IP address was few.
>> 
>> Lonnie
>> 
>> Does the whitelisting work on IP address?  If so then this may not be the 
>> best solution... you may have legitimate extensions at a branch office and 
>> their IP address may appear external (unless you VPN the offices together?) 
>> or remote users connecting over internet.
>> 
>> David 
> 
> You can also define other IP (CIDR's) in ADAPTIVE_BAN_WHITELIST for that 
> case.  But it does require extra configuration.
> 
> I like your suggestion to use 'default' in the log match.  No one uses a 
> [default] context, do they?
> 
> Lonnie

I normally define:

[general]
context=unknownsip

in sip.conf and use the default context normally for my phones.
I do the "Dialplan Noted Suspicious IP Address" stuff in the unknownsip context.

Michael

http://www.mksolutions.info




Attachment: smime.p7s
Description: S/MIME cryptographic signature

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to