[Freeswitch-users] SBC

[Mimiko]

On 12.12.2016 04:17, Kamil Nigmatullin wrote:
> I love freeswitch, but frankly I would not recomend to set it as SBC. I
> personally faced two attacks where FS was not good at. And we lost a lot
> of money. It works perfectly as NAT between internal and extenal
> networks, actually in everything but it is weak as a firewall. Stanislav
> knows that, he helped me to resolve the problem first time when it
> happend. I cannot go into details as this is open forum. You need to put
> either kamailio or opensips in front of FS.

Hello.

I have a FS for almost 4 year opened to the Internet for 
non-authenticated call to local extensions only and authenticated calls 
to external and local. Yes I've had attacks, some did a DDOS with packet 
spoofing. But using iptables and log I am clean now. The only attack I 
see is sending incorrect SIP packet. Which I see on my second monitor 
and block the IP. Just following wiki to use iptables, fail2ban, acls 
and so on.

-- 
Mimiko desu.