Thanks Bob The reason for opening the port would be to allow a user running a "Viop phone" app on their smartphone to register with Freeswitch, so that calls can be transferred to them when they are away from the office. Regards O On 14/06/12 10:41, Bob Coleman wrote:
If you are only connecting to specified SIP providers, then you could specify those endpoints at the firewall level, which would help.
Regards
Bob
Date: Thu, 14 Jun 2012 10:27:50 +0800 From: ocset@the800group.com To: freeswitch-users@lists.freeswitch.org Subject: [Freeswitch-users] Brute-force attack
Hi
I have deployed Freeswiitch on windows 7 and since there is no fail2ban on windows, I was wondering what the real risk is with opening it up to the internet. If I was to ensure that all users and passwords were extremely difficult to guess (passwords like "2$53E_d7?^2!3s$"), what are the risks that I am exposing myself to? Is there a type of DoS for voip where hackers can just flood my system with requests simply to be malicious?
There are VB windows scripts available that emulate what fail2ban does on Linux but I was just wondering whether I really need to implement this level of security if I can control the password complexity in Freeswitch.
Thanks O
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org