Re: [asterisk-users] Force ip disconnect after register?

2010-09-14 Thread Benny Amorsen
"Bryant Zimmerman" writes: > Is there a way to force the connection to drop and reconnect after let's > say 50 attempts. Most firewalls have tools for removing specific connections from the connection table. Alternatively a switch to SIP/TCP might help, but I've never tried SIP/TCP with Asterisk

Re: [asterisk-users] Force ip disconnect after register?

2010-09-13 Thread Kevin P. Fleming
On 09/13/2010 10:22 AM, Bryant Zimmerman wrote: > Is there a way to drop a ip connection to asterisk after a number of > register attempts. > > I have been having issues with hackers doing registration scanning > against our server. We block their address at the fire wall but since > asterisk does

Re: [asterisk-users] Force ip disconnect after register?

2010-09-13 Thread Barry Miller
On Mon, Sep 13, 2010 at 11:22:33AM -0400, Bryant Zimmerman wrote: > Is there a way to drop a ip connection to asterisk after a number of > register attempts. > > I have been having issues with hackers doing registration scanning against > our server. We block their address at the fire wall but s

Re: [asterisk-users] Force ip disconnect after register?

2010-09-13 Thread Roger Burton West
On Mon, Sep 13, 2010 at 11:22:33AM -0400, Bryant Zimmerman wrote: >Is there a way to drop a ip connection to asterisk after a number of >register attempts. Consider writing a filter for fail2ban [http://www.fail2ban.org/] that works on the Asterisk logs? -- _

Re: [asterisk-users] Force ip disconnect after register?

2010-09-13 Thread Paul Belanger
On Mon, Sep 13, 2010 at 11:22 AM, Bryant Zimmerman wrote: > Is there a way to drop a ip connection to asterisk after a number of > register attempts. > Not within Asterisk. Google fail2ban -- Paul Belanger | dCAP Polybeacon | Consultant Jabber: paul.belan...@polybeacon.com | IRC: pabelanger (Fr

[asterisk-users] Force ip disconnect after register?

2010-09-13 Thread Bryant Zimmerman
Is there a way to drop a ip connection to asterisk after a number of register attempts. I have been having issues with hackers doing registration scanning against our server. We block their address at the fire wall but since asterisk does not force a drop of the connect after so many bad reg at