Thank you, everyone, for your suggestions. Both Fail2Ban.org and IPDeny.com are good solutions. Mike van Lammeren On Sat, Jul 31, 2010 at 9:42 AM, Patrick Lists < freeswitch-list@puzzled.xs4all.nl> wrote:
On 07/31/2010 01:54 PM, Hristo Benev wrote:
I also see a lot of attempts to connect to 5060, but it looks like a
botnet since I never have more than 1 form 1 IP - Here fail2ban is helpless since attempts per IP limit is never reached.
Unless you set the number of failed attempts to 1.
If it fits your application you can also use something like http://www.ipdeny.com/ to block port 5060 for certain countries.
Regards, Patrick
_______________________________________________ FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org