[Freeswitch-users] we are under attack

[Bernhard Suttner]

Hi,
 
wouldn’t it be a good task for freeswitch, to detect registerspoofing and call a “hook” (maybe a script) which than could close the firewall?Or that freeswitch will just ignore any request from the given IP for a acertain time. 
 
I tried to find a good application/script to prevent registerspoofing but the only  thing was the fail2ban script. Couldn’t freeswitch justspeak directly with the firewall and drop these requests J ?
 
Best regards,
Bernhard
 

Von:freeswitch-users-bounces at lists.freeswitch.org[mailto:freeswitch-users-bounces at lists.freeswitch.org] Im Auftrag von KristianKielhofner
Gesendet: Dienstag, 10. August 2010 02:05
An: freeswitch-users at lists.freeswitch.org
Betreff: Re: [Freeswitch-users] we are under attack
 

Oh yeah, that was it :). I leave default to accept and add my owndrop everything at the end.


-- 
Kristian Kielhofner 
http://blog.krisk.org
 




From: freeswitch-users-bounces at lists.freeswitch.org<freeswitch-users-bounces at lists.freeswitch.org>
To: FreeSWITCH Users Help <freeswitch-users at lists.freeswitch.org>
Sent: Mon Aug 09 19:55:53 2010
Subject: Re: [Freeswitch-users] we are under attack 
with your permission ill probably copy the script to the FSwiki, and attribute it with links to the other locations.

( that way we dont rely on a 3rd party site to stay up )

 

as for the issue with STOP...

.. i removes all rules :)

and if you have the default set to drop all incoming, then.. well your stuffed..

 

STOP should just back out the rules that the script added,not remove everything 

 

J

 

 

 

On Tue, Aug 10, 2010 at 12:23 AM, Kristian Kielhofner <kris at kriskinc.com> wrote:
 The current version of the script and a littlebackground can be found here:

http://blog.krisk.org/2008/07/sip-dosddos-mitigation.html

 I have no problem linking the FS wiki to either of these but the
eTel wiki will probably get taken down eventually.

 As far as the issue with the stop command...  I remember us talking
about it but I don't remember the specific problem.  Care to refresh
my memory?

 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20100810/5dff23b7/attachment.html