Re: [Astlinux-users] Firewall / Adaptive Ban for external / internet brute force attacks

2023-04-22 Thread Lonnie Abelbeck
Hi Ionel, > Is it possible to create a rule and say only this “extension” can log in and > everything else drop? No, that would require some sort of deep inspection at the firewall level. A couple of ideas... 1) Using 'sipgrep' from the AstLinux CLI, have your brother call you and see what th

[Astlinux-users] Firewall / Adaptive Ban for external / internet brute force attacks

2023-04-22 Thread Ionel Chila via Astlinux-users
I had to open port 5060 to the internet for my brother PAP2-NA to get in. Initially I started getting a lot of brute force attacks but the “adaptive-ban” plugins took care of it. Now I am getting a different type of attacks? See logs bellow. I do have a firewall from UDMP-SE and this PBX is