Protect asterisk again hackers (fail2ban)

If your asterisk box has a public interface or you receive Ip call from the outside world,

you will have to make sure that an unautorized user does reach your pbx and tries to make calls.

To do so, of course, you should start making sure that your sip.conf or iax.conf file has strong password and policies.

You can also use fail2ban. This process will parse any log file, detect IP addresses that failed to connect to a specific services (asterisk, ssh, ftp etc…). After a certain number of failure, fail2ban will automaticly add that adresss in your firewall and block the user for the next ‘x’ minutes.

Here is how you can configure fail2ban to protect your asterisk box.

http://www.voip-info.org/wiki/view/Fail2Ban+(with+iptables)+And+Asterisk

March 10, 2009 | Filed Under Tricks 

Comments

Leave a Reply