Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Rhinorhino on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Excessive SIP Traffic Blacklisting

Status
Not open for further replies.

dsm600rr

IS-IT--Management
Joined
Nov 17, 2015
Messages
1,448
Location
US
I have been messing around with all different numbers for NoUser source numbers:

B_RATE_HIGH_LIMIT=5
B_RATE_HIGH_THRESH=50000

However nothing I change seems to change the fact that the IP Address are only temporarily blocked the 600 seconds.

Blacklist_ppb5ah.jpg



ACSS
 
I had the same issue.
No way to change the time to unblock.

I managed to get into the system and install fail2ban, and geoIP black listing rules on the linux firewall. <- Not supported.

 
@Travis Harper,
Can you tell something about installing fail2ban?
How did you do that, and how is it used?
 
I would not recommend doing this, especially if your not familiar with Linux.
As root I added the CentOS 7 base depositors.
Installed fail2ban and geoiptables.
Avaya puts the firewall config in a non standard location..I can’t recall where I found it.
My system is purely a lab system. I strange things because my goal is to find out the art of the possible.
 
My ASBCE will be here today. Time to play with that.

ACSS
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top