What happens to traffic levels if it does get in? i.e. would it be a more effective countermeasure to let it in, but have it not be able to actually do anything? (honeypot/dummy accounts) -- Nathan On 10/14/2013 11:59 AM, Steven Ayre wrote:
Remember unless it gets blocked upstream the packet will still hit your firewall/server. Not FreeSWITCH sure, but it'll still consume some resources to receive, identify and block it. The scanner does not care that you're not responding, it'll continue to send anyway.
On 14 October 2013 15:57, Mimiko <vbvbrj@gmail.com <mailto:vbvbrj@gmail.com>> wrote:
On 14.10.2013 17:54, Ken Rice wrote: > This is sipvicious, its a brute force scanner... See > http://wiki.freeswitch.org/wiki/Fail2ban on how to setup Fail2ban with > FreeSWITCH to defeat this attack
Ken thank you. I am planning to set up Fail2ban. But for now need to drop any packet from offending IP.
-- Mimiko desu.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- ------------------------------------------------------------ Nathan Neulinger nneul@mst.edu Missouri S&T Information Technology (573) 612-1412 System Administrator - Architect