On Sat, Jan 18, 2014 at 3:59 PM, Steve Edwards asterisk@sedwards.comwrote:
On Sat, 18 Jan 2014, Jerry Geis wrote:
I see MANY of these in my log files:
[Jan 15 03:06:12] NOTICE[14129] chan_sip.c: Registration from '202
sip:202@X:5060' failed for '37.8.12.147:26832' - Wrong password
fail2ban is so easy to set up, there is no reason not to set it up.
The geography problems are not so bad unless you have phones all over
the world or people travelling with softphones to countries that you
want to block.
It does not block incoming calls only people who want to mimic your
Changing from 5060 is very effective.
Sure, someone with the knowledge could try all the ports IF they know you are
even running SIP, but it certainly will stop most of these idiots .
That along with fail2ban, not using numbers for device user names all will help.
Using IAX where possible also
On 19/1/14 2:57 pm, Ron Wheeler wrote:
fail2ban is so easy to set up, there is no reason not to set it up.
One of the dangers with fail2ban - at least in its default configuration
- is that a legitimate SIP phone with an incorrect password can quite
easily send dozens of registration
It is far worse when you have multiple phones behind the same public address
(i.e. NAT).If any one of the phones has a bad password and the IP gets
blocked by fail2ban, then all phones at that site would be blocked.
-Original Message-
From: asterisk-users-boun...@lists.digium.com
Geoip works well to block all countries except your own
Regards
Andrew Colin-mobile
Vsave(PTY)Ltd
Original message
From: Eric Wieling ewiel...@nyigc.com
Date:19/01/2014 8:40 PM (GMT+02:00)
To: Asterisk Users Mailing List - Non-Commercial Discussion
We don't do residential service and require the few off-net customers to have a
static IP. This makes using whitelists practical.That won't work for most
people though.
-Original Message-
From: asterisk-users-boun...@lists.digium.com
If it's a reinvite problem, check the domain in the request URI. Might be
something it shouldn't be, eg something to do with the VPN.
On 11 September 2013 05:28, isr...@gmail.com wrote:
Some providers send a reinvite after 15 min and if asterisk doesn't
respond will disconnect the call
Hi,
We have a Kamailio and Asterisk cluster, both machines being on a real
103.x IP address and also on a 172.x OpenVPN address.
The problem is that when Kamailo receives a call from the VPN and forwards
it to the Asterisk server on it's 103.x address, Asterisk never sees the
call.
If Kamailio
