I have run into this same problem with win2003. You may need to check to see if windows 7 has IPSEC service. If so, you can set up a blocked list in ipsec that you can add ip addresses to and windows won't let them into your machine. Click on Start menu choose Administrative Tools choose Services Find IPSEC Services - double click to open properties - make sure it is set to Automatic and started. You can create the block list by issuing the following commands from a command window: netsh ipsec static add filteraction name=Block action=block netsh ipsec static add filter filterlist=BlockList srcaddr=192.168.192.100 dstaddr=me netsh ipsec static add policy name=Block assign=yes activatedefaultrule=no netsh ipsec static add rule name=BlockList policy=Block filterlist=BlockList filteraction=Block netsh ipsec static delete filter filterlist=BlockList srcaddr=192.168.192.100 dstaddr=Me create a directory called blockip now in notepad create blockip.bat with the following line in it: netsh ipsec static add filter filterlist=BlockList srcaddr=%1 dstaddr=me Now , in notepad, createunblockip.bat with the following line in it: netsh ipsec static delete filter filterlist=BlockList srcaddr=%1 dstaddr=me to block ip address 123.123.123.123 type blockip 123.123.123.123 at a command prompt. to unblock ip address 123.123.123.123 type unblockip 123.123.123.123 at a command prompt. You can use xml_curl to keep track of hit frequency and do the blocking for you. hope that helps.... jack On 6/13/2012 7:27 PM, ocset wrote:
Hi
I have deployed Freeswiitch on windows 7 and since there is no fail2ban on windows, I was wondering what the real risk is with opening it up to the internet. If I was to ensure that all users and passwords were extremely difficult to guess (passwords like "2$53E_d7?^2!3s$"), what are the risks that I am exposing myself to? Is there a type of DoS for voip where hackers can just flood my system with requests simply to be malicious?
There are VB windows scripts available that emulate what fail2ban does on Linux but I was just wondering whether I really need to implement this level of security if I can control the password complexity in Freeswitch.
Thanks O
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org