[Freeswitch-users] What kind of attack is this?

[Jeff Leung]

It's working as intended 

Mimiko <vbvbrj at gmail.com> wrote:

On 14.10.2013 18:05, Ken Rice wrote:
> You can drop any packet with friendly-scanner in
> it with iptables as a way to defeat the attack also

I use this command:

iptables -I INPUT -j DROP -p udp –dport 5060 -m string –string 
“friendly-scanner” –algo bm

and my iptables looks like this:

Chain INPUT (policy DROP 27 packets, 8596 bytes)
  pkts bytes target     prot opt in     out     source 
destination
  2482  905K DROP       udp  --  *      *       0.0.0.0/0 
0.0.0.0/0           udp dpt:5060 STRING match "friendly-scanner" ALGO 
name bm TO 65535
     0     0 DROP       all  --  *      *       50.7.251.123 
0.0.0.0/0
     0     0 DROP       all  --  *      *       199.241.187.214 
0.0.0.0/0
     0     0 DROP       all  --  *      *       85.25.199.142 
0.0.0.0/0
     0     0 DROP       all  --  *      *       50.30.37.10 
0.0.0.0/0
     0     0 DROP       all  --  *      *       62.75.212.215 
0.0.0.0/0

But this does not help.

-- 
Mimiko desu.

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.org
http://www.freeswitchsolutions.com




Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org