US IP addresses

Started by dlots, November 24, 2015, 08:21:05 AM

Previous topic - Next topic

dlots

Yeah, that's why I am thinking of going for the huge IP range

Otanx

You might want to take a look at fail2ban. Bassically it scans log files for failed attempts, and can preform an action (like block IP) based on those failed attempts. I don't know if it will work with asterisk with a normal install, but it could probably be made to work.

Link - http://www.fail2ban.org/wiki/index.php/Main_Page

-Otanx

dlots


wintermute000

Fail2ban is one of the first things I install on any internet facing server. It works well as long as it supports the logfile in question otherwise enjoy learning regex

Reggle

Quote from: routerdork on November 24, 2015, 02:15:42 PM
This looks to be a bit automated if taking the tedious path.
https://www.countryipblocks.net/country_selection.php

Haha I didn't pay enough attention to the earlier link. Ooops.
I downloaded the Belgium ACL. It was very large for that small patch of land I call my country, so I did a quick check on ripe.net . Turns out most of the first 10 prefixes aren't Belgian: some are from France, others the Netherlands, one from Akamai. Doesn't seem a very trustworthy site.

deanwebb

Well, there you go... another reason to not block by IP address.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.