On Wed, Feb 20, 2013 at 1:53 AM, Mario Karakanovski <mario@ims.bg> wrote:

Thanks Ken,

 

It is helpful, but I still think there is some security issue. I’ve double check configuration. I’ve try to reproduce the issue trying to do direct call (TCP and UDP) or authenticate with invalid user, but everything works as expected – calls/authentication was rejected. I’ve decide to log the traffic – maybe I will be able to see where is the problem.


What "security issue"? You said that they cannot make calls with the passwords that they've guessed, correct? About the only thing left to do is set up fail2ban and just shut the door on them when they fail too many times.

-Michael