[Freeswitch-users] Attack using 5843 and music account?

[xuyan yang]

Got it. But if no failure log. fail2ban will not work. So how can we protect
fs from this kind of attack besides manually setup firewall rules 1 by 1 on
discovery?

On Tue, Jan 4, 2011 at 12:54 AM, Brian West <brian at freeswitch.org> wrote:

> Chances are he never received the challenge.. thus never logs an auth
> failure.
>
> /b
>
> On Jan 3, 2011, at 9:26 AM, xuyan yang wrote:
>
> 2011-01-03 15:19:32.360152 [WARNING] sofia_reg.c:1161 SIP auth failure
> (REGISTER) on sofia profile 'internal' for [music at 192.168.0.3] from ip
> 192.168.0.6
>
> So, how can this hacker successfully registered music account and avoid to
> be baned? it is strange.
>
> Thanks
>
>
>
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20110104/e00a26bc/attachment.html