[Freeswitch-users] load average is hight (Very urgent please)

[Muhammad Shahzad]

>From the warning message you mentioned you are getting on FS CLI, you need
to block the IP address mentioned in the message.

Thank you.


On Mon, May 14, 2012 at 12:56 PM, ghallab <tarik.bts.gi at gmail.com> wrote:

>  Thank you for your quick replay.
> Could you tell me please how do you come to this conclusion?
> and if this is a brute-force, it can make my system slow all the time?
>
> On 05/14/2012 09:21 AM, Muhammad Shahzad wrote:
>
> Seems like you system is under SIP brute-force attack. Somebody is trying
> to break into your freeswitch box. Just find that user's ip and block it in
> IPTables.
>
> If problem persists and hacker comes from another IP then you probably
> need to configure Fail2Ban service.
>
> Thank you.
>
>
> On Mon, May 14, 2012 at 11:51 AM, ghallab <tarik.bts.gi at gmail.com> wrote:
>
>>  Hi all,
>>
>>  This days am experiencing a problem with Freeswitch: it seems that it
>> needs more hardware resources and voicemail don't work any more and it make
>> a long delay to process call transfer. should I compile the last version to
>> revolve the problem or try to increase hardware resources? I notice that I
>> have anther instance of FS running fine in the same conditions.
>>
>> I tried to collect the maximum information that I can:
>> OS version: CentOS release 5.4
>> the cpu info is:
>> http://pastebin.freeswitch.org/19039
>> the mem info is:
>> http://pastebin.freeswitch.org/19040
>>
>> the out  put of the command top is
>> http://pastebin.freeswitch.org/19038
>>
>> the number of calls when I made the test was:
>> 5 total.
>>
>> the out put of gcore and gdb:
>> http://pastebin.freeswitch.org/19041
>>
>> number of sofia's profiles:
>> 5 sofia profiles and 1 alias
>> number of calls that I want:
>> 30  simultaneous calls
>>
>> I want also to notice that I get all the time some warning messages like
>>
>> 2012-05-11 14:36:10.716722 [WARNING] sofia_reg.c:1442 SIP auth challenge
>> (REGISTER) on sofia profile 'internal' for [7351 at domain] from ip @ip
>>
>>
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>
>
> --
> Muhammad Shahzad
> -----------------------------------
> CISCO Rich Media Communication Specialist (CRMCS)
> CISCO Certified Network Associate (CCNA)
> Cell: +92 334 422 40 88
> MSN: shari_786pk at hotmail.com
> Email: shaheryarkh at googlemail.com
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:consulting at freeswitch.orghttp://www.freeswitchsolutions.com
>
> FreeSWITCH-powered IP PBX: The CudaTel Communication Server
>
> Official FreeSWITCH Siteshttp://www.freeswitch.orghttp://wiki.freeswitch.orghttp://www.cluecon.com
>
> FreeSWITCH-users mailing listFreeSWITCH-users at lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>


-- 
Muhammad Shahzad
-----------------------------------
CISCO Rich Media Communication Specialist (CRMCS)
CISCO Certified Network Associate (CCNA)
Cell: +92 334 422 40 88
MSN: shari_786pk at hotmail.com
Email: shaheryarkh at googlemail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20120514/0b7effd3/attachment.html