Thank you, everyone, for your suggestions. Both Fail2Ban.org and IPDeny.com are good solutions.<div><br></div><div>Mike van Lammeren<br><br><div class="gmail_quote">On Sat, Jul 31, 2010 at 9:42 AM, Patrick Lists <span dir="ltr"><<a href="mailto:freeswitch-list@puzzled.xs4all.nl">freeswitch-list@puzzled.xs4all.nl</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div class="im">On 07/31/2010 01:54 PM, Hristo Benev wrote:<br>
><br>
> I also see a lot of attempts to connect to 5060, but it looks like a botnet since I never have more than 1 form 1 IP - Here fail2ban is helpless since attempts per IP limit is never reached.<br>
<br>
</div>Unless you set the number of failed attempts to 1.<br>
<br>
If it fits your application you can also use something like<br>
<a href="http://www.ipdeny.com/" target="_blank">http://www.ipdeny.com/</a> to block port 5060 for certain countries.<br>
<div><div></div><div class="h5"><br>
Regards,<br>
Patrick<br>
<br>
_______________________________________________<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</div></div></blockquote></div><br></div>