[Freeswitch-users] Brute-force attack

Bob Coleman bobc at devassert.com
Thu Jun 14 06:41:03 MSD 2012


If you are only connecting to specified SIP providers, then you could specify those endpoints at the firewall level, which would help.
Regards
Bob> Date: Thu, 14 Jun 2012 10:27:50 +0800
> From: ocset at the800group.com
> To: freeswitch-users at lists.freeswitch.org
> Subject: [Freeswitch-users] Brute-force attack
> 
> Hi
> 
> I have deployed Freeswiitch on windows 7 and since there is no fail2ban 
> on windows, I was wondering what the real risk is with opening it up to 
> the internet. If I was to ensure that all users and passwords were 
> extremely difficult to guess (passwords like "2$53E_d7?^2!3s$"), what 
> are the risks that I am exposing myself to? Is there a type of DoS for 
> voip where hackers can just flood my system with requests simply to be 
> malicious?
> 
> There are VB windows scripts available that emulate what fail2ban does 
> on Linux but I was just wondering whether I really need to implement 
> this level of security if I can control the password complexity in 
> Freeswitch.
> 
> Thanks
> O
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20120614/1fe43289/attachment.html 


Join us at ClueCon 2011 Aug 9-11, 2011
More information about the FreeSWITCH-users mailing list