Actually, it does have dos protection. However, it is not based on limiting connections rather on limiting bandwidth and priority.
BTW... what is the reason why something like ALG can not work with sipx? On Sun, Oct 31, 2010 at 4:35 PM, Tony Graziano <[email protected]> wrote: > If your fortigate does not have a dos protection mechanism (it does not need > sip alg enabled to do this, as DOS protection is a firewall function), you > should investigate upgrading the device to get that module or replacing it. > Basic DOS protection in fortigate should be self sensing/aware, and able to > handle the relentless connections to port "whatever" by itself, assuming it > is available on the device, enabled and configured (via your fortigate > firewall policy). > Absent that, replacing it with something that offers this might be a wise > choice if you need to support remote users or replacing sipxbridge with a > SBC that can do the same function. > > On Sun, Oct 31, 2010 at 3:08 PM, Roman Gelfand <[email protected]> wrote: >> >> My firewall could do this, but it would require me to use ALG. I >> thought we are not to use ALG. >> >> On Fri, Oct 29, 2010 at 2:51 PM, Tony Graziano >> <[email protected]> wrote: >> > See my blog: >> > >> > http://blog.myitdepartment.net >> > >> > Article about rate limiting connections. If your firewall can do this >> > too, >> > you'll be fine. >> > ============================ >> > Tony Graziano, Manager >> > Telephone: 434.984.8430 >> > Fax: 434.984.8431 >> > >> > Email: [email protected] >> > >> > LAN/Telephony/Security and Control Systems Helpdesk: >> > Telephone: 434.984.8426 >> > Fax: 434.984.8427 >> > >> > Helpdesk Contract Customers: >> > http://www.myitdepartment.net/gethelp/ >> > >> > ----- Original Message ----- >> > From: [email protected] >> > <[email protected]> >> > To: Discussion list for users of sipXecs software >> > <[email protected]> >> > Sent: Fri Oct 29 14:47:45 2010 >> > Subject: Re: [sipx-users] Performance Degradation >> > >> > sipxproxy is using 143% cpu. >> > >> > It looks like I am in trouble. Looking at the log I see extension 107 >> > or 123 that doesn't exist in the domail. The user agent is claims is >> > friendly scanner. >> > >> > On Fri, Oct 29, 2010 at 2:33 PM, Tony Graziano >> > <[email protected]> wrote: >> >> Check your logs (sipxproxy and registrar) to see ify there are >> >> registration >> >> or invite attempts from the outside. >> >> >> >> top -U sipxchange >> >> >> >> Does anything show high cpu? >> >> >> >> ============================ >> >> Tony Graziano, Manager >> >> Telephone: 434.984.8430 >> >> Fax: 434.984.8431 >> >> >> >> Email: [email protected] >> >> >> >> LAN/Telephony/Security and Control Systems Helpdesk: >> >> Telephone: 434.984.8426 >> >> Fax: 434.984.8427 >> >> >> >> Helpdesk Contract Customers: >> >> http://www.myitdepartment.net/gethelp/ >> >> >> >> ----- Original Message ----- >> >> From: [email protected] >> >> <[email protected]> >> >> To: Discussion list for users of sipXecs software >> >> <[email protected]> >> >> Sent: Fri Oct 29 14:30:29 2010 >> >> Subject: [sipx-users] Performance Degradation >> >> >> >> All of a sudden, the sipx server slowed down significantly to the >> >> point that registration are timing out 408. If I am lucky and >> >> register the phone, it takes a minute to place a call. There is realy >> >> no load on the system. SWhat could be the cause? >> >> >> >> Thanks in advance >> >> _______________________________________________ >> >> sipx-users mailing list >> >> [email protected] >> >> List Archive: http://list.sipfoundry.org/archive/sipx-users/ >> >> _______________________________________________ >> >> sipx-users mailing list >> >> [email protected] >> >> List Archive: http://list.sipfoundry.org/archive/sipx-users/ >> >> >> > _______________________________________________ >> > sipx-users mailing list >> > [email protected] >> > List Archive: http://list.sipfoundry.org/archive/sipx-users/ >> > _______________________________________________ >> > sipx-users mailing list >> > [email protected] >> > List Archive: http://list.sipfoundry.org/archive/sipx-users/ >> > >> _______________________________________________ >> sipx-users mailing list >> [email protected] >> List Archive: http://list.sipfoundry.org/archive/sipx-users/ > > > > -- > ====================== > Tony Graziano, Manager > Telephone: 434.984.8430 > sip: [email protected] > Fax: 434.326.5325 > > Email: [email protected] > > LAN/Telephony/Security and Control Systems Helpdesk: > Telephone: 434.984.8426 > sip: [email protected] > > Helpdesk Contract Customers: > http://support.myitdepartment.net > > > _______________________________________________ > sipx-users mailing list > [email protected] > List Archive: http://list.sipfoundry.org/archive/sipx-users/ > _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users/
