The current version of the script and a little background can be found here: http://blog.krisk.org/2008/07/sip-dosddos-mitigation.html I have no problem linking the FS wiki to either of these but the eTel wiki will probably get taken down eventually. As far as the issue with the stop command... I remember us talking about it but I don't remember the specific problem. Care to refresh my memory? On Mon, Aug 9, 2010 at 3:19 AM, jay binks <jaybinks@gmail.com> wrote:
THIS : http://etel.wiki.oreilly.com/wiki/index.php/SIP_DoS/DDoS_Mitigation also works quite well for these attacks.. they wont stop the brute force ( you will need to configure fail2ban for that ) but this will setup iptables to rate limit any sip connections, so your pc wont get that loaded. you can thank Kristian Kielhofner ( a member of the FS community ) for that neat little script :) maybe we can copy that script ( Kristian ?? ) to the Freeswitch wiki.. ( with a few modifications ).. be careful of the STOP command on that script its defective ! ( and will wipe all firewall rules, especially dangerous if you drop all by default ) Jay
-- Kristian Kielhofner http://www.astlinux.org http://blog.krisk.org http://www.star2star.com http://www.submityoursip.com http://www.voalte.com