Hi, wouldn’t it be a good task for freeswitch, to detect registerspoofing and call a “hook” (maybe a script) which than could close the firewall?Or that freeswitch will just ignore any request from the given IP for a acertain time. I tried to find a good application/script to prevent registerspoofing but the only thing was the fail2ban script. Couldn’t freeswitch justspeak directly with the firewall and drop these requests J ? Best regards, Bernhard Von:freeswitch-users-bounces@lists.freeswitch.org[mailto:freeswitch-users-bounces@lists.freeswitch.org] Im Auftrag von KristianKielhofner Gesendet: Dienstag, 10. August 2010 02:05 An: freeswitch-users@lists.freeswitch.org Betreff: Re: [Freeswitch-users] we are under attack Oh yeah, that was it :). I leave default to accept and add my owndrop everything at the end. -- Kristian Kielhofner http://blog.krisk.org From: freeswitch-users-bounces@lists.freeswitch.org<freeswitch-users-bounces@lists.freeswitch.org> To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Sent: Mon Aug 09 19:55:53 2010 Subject: Re: [Freeswitch-users] we are under attack with your permission ill probably copy the script to the FSwiki, and attribute it with links to the other locations. ( that way we dont rely on a 3rd party site to stay up ) as for the issue with STOP... .. i removes all rules :) and if you have the default set to drop all incoming, then.. well your stuffed.. STOP should just back out the rules that the script added,not remove everything J On Tue, Aug 10, 2010 at 12:23 AM, Kristian Kielhofner <kris@kriskinc.com> wrote: The current version of the script and a littlebackground can be found here: http://blog.krisk.org/2008/07/sip-dosddos-mitigation.html I have no problem linking the FS wiki to either of these but the eTel wiki will probably get taken down eventually. As far as the issue with the stop command... I remember us talking about it but I don't remember the specific problem. Care to refresh my memory?