Massive sip attack?

[PitzKey (Itzik)]

Use APIBAN to limit known bad actors from reaching your servers. It is super easy to set up.

Integrating apiban.org with FreePBX

The last few Open Source Lounge sessions have seen conversation around apiban.org, with last night’s session getting a detailed presentation by Fred Posner on how it all works. The apiban.org project is a SIP blacklist compiled from honeypots with a simple API that allows you to dynamically update iptables rules with known current attackers. Generally I’m not a fan of blacklists on principle, but there are obviously situations where whitelisting won’t work. If one is working with this constraint…