Depends on your config. If the attack is vicious enough, the best defense it to block it upstream, if possible.<div><br></div><div>I always put my servers behind firewalls, but that's me. </div><div><br></div><div>My firewall is helpful in that is limits the connections per second from any ip address. This is not something that can be helpful if the attack is distributed though.</div>
<div><br></div><div>There are some good scripts out there to help identify a potential attack and help alert your firewall, etc.</div><div><br></div><div><br><br><div class="gmail_quote">On Tue, Oct 5, 2010 at 2:55 PM, Mario <span dir="ltr"><<a href="mailto:mario_fs@mgtech.com">mario_fs@mgtech.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">After working 4 hours I found that FS was hosed due to someone from<br>
208.109.87.234 sending tons of traffic to FS. I blocked the IP address.<br>
Not only did it overload the connection but stopped FS from working,<br>
meaning no phones. This had not happened with the SPA9000. I listed on<br>
on a FS conference call discussing this issue. Is there someplace that<br>
has a list of things to do to prevent/reduce this? I did have ports,<br>
etc. blocked in the firewall. Thanks. Mario<br>
<br>
_______________________________________________<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</blockquote></div><br><br clear="all"><br>-- <br>======================<br>Tony Graziano, Manager<br>Telephone: 434.984.8430<br>sip: <a href="mailto:tgraziano@voice.myitdepartment.net">tgraziano@voice.myitdepartment.net</a><br>
Fax: 434.984.8431<br><br>Email: <a href="mailto:tgraziano@myitdepartment.net">tgraziano@myitdepartment.net</a><br><br>LAN/Telephony/Security and Control Systems Helpdesk:<br>Telephone: 434.984.8426<br>sip: <a href="mailto:helpdesk@voice.myitdepartment.net">helpdesk@voice.myitdepartment.net</a><br>
Fax: 434.984.8427<br><br>Helpdesk Contract Customers:<br><a href="http://www.myitdepartment.net/gethelp/">http://www.myitdepartment.net/gethelp/</a><br><br>Why do mathematicians always confuse Halloween and Christmas?<br>
Because 31 Oct = 25 Dec.<br><br>
</div>