返回列表 發帖

大家留意返asterisk個log...

[Aug 28 07:42:43] NOTICE[2894] chan_sip.c: Registration from '"1394"<sip:1394@MY_SEVER_IP>' failed for '200.94.75.207:5065' - No matching peer found
[Aug 28 07:42:43] NOTICE[2894] chan_sip.c: Registration from '"1395"<sip:1395@MY_SEVER_IP>' failed for '200.94.75.207:5065' - No matching peer found
[Aug 28 07:42:43] NOTICE[2894] chan_sip.c: Registration from '"1397"<sip:1397@MY_SEVER_IP>' failed for '200.94.75.207:5065' - No matching peer found
[Aug 28 07:42:43] NOTICE[2894] chan_sip.c: Registration from '"1400"<sip:1400@MY_SEVER_IP>' failed for '200.94.75.207:5065' - No matching peer found
[Aug 28 07:42:43] NOTICE[2894] chan_sip.c: Registration from '"1401"<sip:1401@MY_SEVER_IP>' failed for '200.94.75.207:5065' - No matching peer found
[Aug 28 07:42:43] NOTICE[2894] chan_sip.c: Registration from '"1403"<sip:1403@MY_SEVER_IP>' failed for '200.94.75.207:5065' - No matching peer found
[Aug 28 07:42:43] NOTICE[2894] chan_sip.c: Registration from '"1404"<sip:1404@MY_SEVER_IP>' failed for '200.94.75.207:5065' - No matching peer found
[Aug 28 07:42:43] NOTICE[2894] chan_sip.c: Registration from '"1407"<sip:1407@MY_SEVER_IP>' failed for '200.94.75.207:5065' - No matching peer found
[Aug 28 07:42:43] NOTICE[2894] chan_sip.c: Registration from '"1409"<sip:1409@MY_SEVER_IP>' failed for '200.94.75.207:5065' - No matching peer found

有機會比人DoS...
自己要加返個cron job行返定時 check
Perl Check Script

Web Site Refer: http://www.teamforrest.com/blog/ ... g-peer-found-block/

但佢果個要改...因為佢match個ip時, 無擺埋個port number...
if ($line =~ m/\' failed for \'(.*?)\'
有兩次, 改做
if ($line =~ m/\' failed for \'(.+?)(:[\d]+){0,1}\'

我個SERVER就真係比人撞爆...

[root@lamsoft-pbx asterisk]# perl asterisk_check_fail_logon.pl
Reading input file...
200.94.75.207:5063 blocked. 447360 attempts.
200.94.75.207:5073 blocked. 6748 attempts.
200.94.75.207:5068 blocked. 18838 attempts.
200.94.75.207:5070 blocked. 1668 attempts.
200.94.75.207:5065 blocked. 7099 attempts.
200.94.75.207:5064 blocked. 9685 attempts.

I have mobile voip device so i cannot use white list...

TOP

返回列表