[Freeswitch-users] Security issue

Anthony Minessale anthony.minessale at gmail.com
Sat Aug 15 18:12:55 MSD 2015


The public context is unauthentecared that is why its called public.  Only
public facing extensions should be defined there.

The example configs are only a suggestion on how to run your server.  The
best approach is to learn how the sofia profiles and contexts work to
configure it to your needs.

On Saturday, August 15, 2015, Sergey Safarov <s.safarov at gmail.com> wrote:

> 1) Output network_ip of received INVITE with appropriate comment like
> "Block for one day ip x.x.x.x"
> 2) Add fail2ban rule to search strings like "Block for one day ip x.x.x.x"
> and block ip
>
> On Sat, Aug 15, 2015 at 12:18 PM, Nikolay Zaytsev <nzaytsevc at gmail.com
> <javascript:_e(%7B%7D,'cvml','nzaytsevc at gmail.com');>> wrote:
>
>> Hi,all)
>> I have the freeswitch on public ip with set up fail2ban.
>> However, there is an external invites which proceed to dialplan's context
>> public.
>> How can I defend my freeswitch from such attaks?
>> The log of such attack is in the attachment.
>> Bets Regards,
>> Nikolay Zaytsev
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> <javascript:_e(%7B%7D,'cvml','consulting at freeswitch.org');>
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> <javascript:_e(%7B%7D,'cvml','FreeSWITCH-users at lists.freeswitch.org');>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
>

-- 
Anthony Minessale II       ♬ @anthmfs  ♬ @FreeSWITCH  ♬

☞ http://freeswitch.org/http://cluecon.com/http://twitter.com/FreeSWITCH
☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+
<http://freeswitch.org/g+>*

ClueCon Weekly Development Call
☎ sip:888 at conference.freeswitch.org  ☎ +19193869900

https://www.youtube.com/watch?v=9XXgW34t40s
https://www.youtube.com/watch?v=NLaDpGQuZDA
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150815/6cc9b0a4/attachment.html 


Join us at ClueCon 2016 Aug 8-12, 2016
More information about the FreeSWITCH-users mailing list