You can use those nice messages to tie in fail2ban to send those evil hackers to the bit bucket.

On Tue, Jun 23, 2015 at 2:59 PM, Sean Devoy <sdevoy@bizfocused.com> wrote:

Hi All,

 

I have been testing the latest 1.4 build from source on a new Debian 8 server.  I have it configured and working wordefully with minimal issues during the install/build. THANKS,

 

There is a difference I have detected in the console log that may be my lack of understanding of sofia logging.  On my current system:

FreeSWITCH Version 1.2.22+git~20140309T212137Z~65fed130e5~64bit (git 65fed13 2014-03-09 21:21:37Z 64bit)

 

With “console loglevel 5” I get console messages that show me the hackers trying to get in like:

[date and time]  [WARNING] sofia_reg.c:1532 SIP auth challenge (REGISTER) on sofia profile 'external' for [aahd@66.241.102.41] from ip 23.95.84.146

 

I also get those messages when my phones register.  I have detected Internet Provider circuit issues by the swarms of these messages.  I do not get these messages on my new build.  I have also set “sofia loglevel all 5”, but my phones register and no message is displayed.

 

What am I missing?

 

Thanks,

Sean

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

--

Brian West
brian@freeswitch.org

Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com

ClueCon 2015 Call for Speakers | Register TODAY! | Reddit: /r/freeswitch

T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest