[Freeswitch-users] we are under attack

[jay binks]

THIS : http://etel.wiki.oreilly.com/wiki/index.php/SIP_DoS/DDoS_Mitigation
also works quite well for these attacks..

they wont stop the brute force ( you will need to configure fail2ban for
that )
but this will setup iptables to rate limit any sip connections, so your pc
wont get that loaded.

you can thank Kristian Kielhofner ( a member of the FS community ) for that
neat little script :)

maybe we can copy that script ( Kristian ?? ) to the Freeswitch wiki..
( with a few modifications )..

be careful of the STOP command on that script its defective !
( and will wipe all firewall rules, especially dangerous if you drop all by
default )

Jay


On Mon, Aug 9, 2010 at 5:03 PM, Jan Berger <jan.berger at video24.no> wrote:

>
> 1) It stucks on one CPU even I have 2 core since sofia-sip is single
> threaded ?
>
> Your FS uses a single process, and the operating systems need multiple
> processes to fully utilize multiple cores. It's major difference between
> threads and processes on this.
>
> Jan
>
>
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>



-- 
Sincerely

Jay
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20100809/642a435f/attachment.html