[Freeswitch-users] What kind of attack is this?

Nathan Neulinger nneul at mst.edu
Mon Oct 14 21:13:32 MSD 2013


What happens to traffic levels if it does get in? i.e. would it be a more effective countermeasure to let it in, but 
have it not be able to actually do anything? (honeypot/dummy accounts)

-- Nathan

On 10/14/2013 11:59 AM, Steven Ayre wrote:
> Remember unless it gets blocked upstream the packet will still hit your firewall/server. Not FreeSWITCH sure, but it'll
> still consume some resources to receive, identify and block it. The scanner does not care that you're not responding,
> it'll continue to send anyway.
>
>
> On 14 October 2013 15:57, Mimiko <vbvbrj at gmail.com <mailto:vbvbrj at gmail.com>> wrote:
>
>     On 14.10.2013 17:54, Ken Rice wrote:
>      > This is sipvicious, its a brute force scanner... See
>      > http://wiki.freeswitch.org/wiki/Fail2ban  on how to setup Fail2ban with
>      > FreeSWITCH to defeat this attack
>
>     Ken thank you. I am planning to set up Fail2ban. But for now need to
>     drop any packet from offending IP.
>
>     --
>     Mimiko desu.
>
>     _________________________________________________________________________
>     Professional FreeSWITCH Consulting Services:
>     consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>     http://www.freeswitchsolutions.com
>
>     
>     
>
>     Official FreeSWITCH Sites
>     http://www.freeswitch.org
>     http://wiki.freeswitch.org
>     http://www.cluecon.com
>
>     FreeSWITCH-users mailing list
>     FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>     http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>     UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>     http://www.freeswitch.org
>
>

-- 
------------------------------------------------------------
Nathan Neulinger                       nneul at mst.edu
Missouri S&T Information Technology    (573) 612-1412
System Administrator - Architect



Join us at ClueCon 2013 Aug 6-8, 2013
More information about the FreeSWITCH-users mailing list