Thanks Cliff, but I haven't had this problem for almost 2 weeks now (since I updated FS (again) to the latest GIT, even though FS version seems to have nothing to do with it). I wanted to remove DMZ but I can't get around the NO SOUND problem when connecting from outside the local network (I opened another thread for that but no solution so far from my end).<div>
Thanks,</div><div>John<br><br><div class="gmail_quote">On Mon, Feb 14, 2011 at 10:27 AM, Cliff Wells <span dir="ltr"><<a href="mailto:cliff@develix.com">cliff@develix.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On Sat, 2011-01-29 at 15:39 -0800, Joao Leme wrote:<br>
> I just downloaded and compiled the latest Git and a little after<br>
> starting freeswitch I'm getting non stop the following:<br>
><br>
><br>
> [WARNING] sofia_reg.c:1247 SIP auth challenge (REGISTER) on sofia<br>
> profile ‘internal’ for [140@76.XXX.XX.XXX] from ip 212.224.71.236<br>
<br>
</div><div class="im">> it's non-stop and doesn't let me do nothing else. After the first time<br>
> I went on to vars and changed the 1234 password....restarted and same<br>
> thing happened, I also try denying the ip on acl.conf (not sure if has<br>
> something to do with it but gave it a try):<br>
<br>
</div>It seems obvious, but since no one else mentioned it, I will: have you<br>
tried contacting the owner of attacking machine? Chances are it's a<br>
compromised machine and the owner is unaware of the situation. I<br>
experienced the same thing about a week ago, did a WHOIS lookup on the<br>
IP, contacted the owner who was quite grateful to be alerted of the<br>
issue, and had it resolved pretty quickly.<br>
<br>
As an aside, if the script that's attacking you is the same one that was<br>
attacking me, it won't stop once you setup the iptables rule. In my<br>
case it continued to send over 1Mbit/s of registration attempts even<br>
when it could no longer connect (as measured by pfSense).<br>
<br>
Regards,<br>
<font color="#888888">Cliff<br>
</font><div><div></div><div class="h5"><br>
<br>
<br>
_______________________________________________<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</div></div></blockquote></div><br></div>