You can use Kamailio proxy as the frontend of FreeSwitch. And then block registration and INVITE messages with IP address in "From", "To" and "RURI" headers. Sergey On Mon, Jul 27, 2020 at 7:17 AM Don Hawkins <hawkins@hawkinsegroup.com> wrote:
Hey everyone!
So I have quite a few "security" features installed on the server, including custom IP banning methods using IP Tables, (fail2ban caused too many issues).
All endpoints on our system register via a domain, I'm looking for suggestions on how to block IP addresses that attempt to register with the IP address only.
In other words, every time the warning below is received I'd like to ban that particular IP or at least add it to a list somewhere.
WARNING: "You must define a domain called 'XXX.XXX.XX.XXX' in your directory and add a user with the id"
I'm thinking of a custom script that scans the logs (which logs?)
Any advice is appreciated.
Thanks!
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com