Hi,

wouldn’t it be a good task for freeswitch, to detect register spoofing and call a “hook” (maybe a script) which than could close the firewall? Or that freeswitch will just ignore any request from the given IP for a a certain time.

I tried to find a good application/script to prevent register spoofing but the only  thing was the fail2ban script. Couldn’t freeswitch just speak directly with the firewall and drop these requests J ?

Best regards,

Bernhard

Von: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] Im Auftrag von Kristian Kielhofner
Gesendet: Dienstag, 10. August 2010 02:05
An: freeswitch-users@lists.freeswitch.org
Betreff: Re: [Freeswitch-users] we are under attack

Oh yeah, that was it :). I leave default to accept and add my own drop everything at the end.


--
Kristian Kielhofner
http://blog.krisk.org

---

From: freeswitch-users-bounces@lists.freeswitch.org <freeswitch-users-bounces@lists.freeswitch.org>
To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>
Sent: Mon Aug 09 19:55:53 2010
Subject: Re: [Freeswitch-users] we are under attack

with your permission ill probably copy the script to the FS wiki, and attribute it with links to the other locations.

( that way we dont rely on a 3rd party site to stay up )

as for the issue with STOP...

.. i removes all rules :)

and if you have the default set to drop all incoming, then .. well your stuffed..

STOP should just back out the rules that the script added, not remove everything 

J

On Tue, Aug 10, 2010 at 12:23 AM, Kristian Kielhofner <kris@kriskinc.com> wrote:

 The current version of the script and a little background can be found here:

http://blog.krisk.org/2008/07/sip-dosddos-mitigation.html

 I have no problem linking the FS wiki to either of these but the
eTel wiki will probably get taken down eventually.

 As far as the issue with the stop command...  I remember us talking
about it but I don't remember the specific problem.  Care to refresh
my memory?