I'm only using FS with TLS, and do not need port 5060 and 5080 - I guess. I can see a lot of "bots" are trying to connect all the time - without luck. Should I disable port 5060 and 5080 so the load do to bots trying to make calls would disappear? And how do I make this best, via firewall or via FS (and how to I do it in FS, if that's the best way)?
I'd use iptables to drop those unwanted packets. PS: FS external profile uses 5061 by default, do you changed that? On Fri, Oct 30, 2015 at 7:44 AM, Michael Nielsen <mic.niel84@gmail.com> wrote:
I'm only using FS with TLS, and do not need port 5060 and 5080 - I guess.
I can see a lot of "bots" are trying to connect all the time - without luck.
Should I disable port 5060 and 5080 so the load do to bots trying to make calls would disappear?
And how do I make this best, via firewall or via FS (and how to I do it in FS, if that's the best way)?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Ítalo Rossi italo@freeswitch.org
I though 5061 was internal TLS, 5081 external TLS. 5060 was internal and 5080 external. That's how my FS is setup. On Fri, Oct 30, 2015 at 1:03 PM, Ítalo Rossi <italo@freeswitch.org> wrote:
I'd use iptables to drop those unwanted packets.
PS: FS external profile uses 5061 by default, do you changed that?
On Fri, Oct 30, 2015 at 7:44 AM, Michael Nielsen <mic.niel84@gmail.com> wrote:
I'm only using FS with TLS, and do not need port 5060 and 5080 - I guess.
I can see a lot of "bots" are trying to connect all the time - without luck.
Should I disable port 5060 and 5080 so the load do to bots trying to make calls would disappear?
And how do I make this best, via firewall or via FS (and how to I do it in FS, if that's the best way)?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Ítalo Rossi italo@freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hello, maybe wiki knows ? :) https://freeswitch.org/confluence/display/FREESWITCH/Sofia+Configuration+Fil... <param name="tls-only" value="false"/> On Fri, Oct 30, 2015 at 11:44 AM, Michael Nielsen <mic.niel84@gmail.com> wrote:
I'm only using FS with TLS, and do not need port 5060 and 5080 - I guess.
I can see a lot of "bots" are trying to connect all the time - without luck.
Should I disable port 5060 and 5080 so the load do to bots trying to make calls would disappear?
And how do I make this best, via firewall or via FS (and how to I do it in FS, if that's the best way)?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Best regards, Volodymyr
I did try that but 5060 is still open and I can register without TLS. On Friday, October 30, 2015, Volodymyr Fedorov <lexxua@gmail.com> wrote:
Hello, maybe wiki knows ? :)
https://freeswitch.org/confluence/display/FREESWITCH/Sofia+Configuration+Fil...
<param name="tls-only" value="false"/>
On Fri, Oct 30, 2015 at 11:44 AM, Michael Nielsen <mic.niel84@gmail.com <javascript:_e(%7B%7D,'cvml','mic.niel84@gmail.com');>> wrote:
I'm only using FS with TLS, and do not need port 5060 and 5080 - I guess.
I can see a lot of "bots" are trying to connect all the time - without luck.
Should I disable port 5060 and 5080 so the load do to bots trying to make calls would disappear?
And how do I make this best, via firewall or via FS (and how to I do it in FS, if that's the best way)?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <javascript:_e(%7B%7D,'cvml','consulting@freeswitch.org');> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users@lists.freeswitch.org');> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Best regards, Volodymyr
My Sofia says the following: internal-ipv6 profile sip:mod_sofia@[::1]:5060 RUNNING (0) My internal - without ipv6 - is closed On Fri, Oct 30, 2015 at 3:52 PM, Michael Nielsen <mic.niel84@gmail.com> wrote:
I did try that but 5060 is still open and I can register without TLS.
On Friday, October 30, 2015, Volodymyr Fedorov <lexxua@gmail.com> wrote:
Hello, maybe wiki knows ? :)
https://freeswitch.org/confluence/display/FREESWITCH/Sofia+Configuration+Fil...
<param name="tls-only" value="false"/>
On Fri, Oct 30, 2015 at 11:44 AM, Michael Nielsen <mic.niel84@gmail.com> wrote:
I'm only using FS with TLS, and do not need port 5060 and 5080 - I guess.
I can see a lot of "bots" are trying to connect all the time - without luck.
Should I disable port 5060 and 5080 so the load do to bots trying to make calls would disappear?
And how do I make this best, via firewall or via FS (and how to I do it in FS, if that's the best way)?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Best regards, Volodymyr
If you don't want to load the other profiles, remove those other profiles from your config On Friday, October 30, 2015, Michael Nielsen <mic.niel84@gmail.com> wrote:
I did try that but 5060 is still open and I can register without TLS.
On Friday, October 30, 2015, Volodymyr Fedorov <lexxua@gmail.com <javascript:_e(%7B%7D,'cvml','lexxua@gmail.com');>> wrote:
Hello, maybe wiki knows ? :)
https://freeswitch.org/confluence/display/FREESWITCH/Sofia+Configuration+Fil...
<param name="tls-only" value="false"/>
On Fri, Oct 30, 2015 at 11:44 AM, Michael Nielsen <mic.niel84@gmail.com> wrote:
I'm only using FS with TLS, and do not need port 5060 and 5080 - I guess.
I can see a lot of "bots" are trying to connect all the time - without luck.
Should I disable port 5060 and 5080 so the load do to bots trying to make calls would disappear?
And how do I make this best, via firewall or via FS (and how to I do it in FS, if that's the best way)?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Best regards, Volodymyr
participants (4)
-
Michael Jerris
-
Michael Nielsen
-
Volodymyr Fedorov
-
Ítalo Rossi