Asterisk log

Forums › VoIP › Asterisk log

gchiu

1211 posts

Uber Geek
+1 received by user: 259

Trusted

#101651 5-May-2012 11:55

I see this from 5:12 today

[2012-05-05 05:12:50] VERBOSE[17957] pbx.c: -- Executing [972592577956@from-sip-external:1] NoOp("SIP/58.28.152.22-00000059", "Received incoming SIP connection from unknown peer to 972592577956") in new stack

58.28.152.22 is WXC

What does the rest mean?

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#620059 5-May-2012 12:30

It's your box being attacked constantly by a script trying to hack it. You shouldn't have port 5060 open to the internet allowing this.

This issue is nothing to do with WxC - it's purely your public IP being targetted. If you are game enough to leave external ports open expect to see hundreds, if not thousands, of such attempts every week on your system.

gchiu

1211 posts

Uber Geek
+1 received by user: 259

Trusted

#620079 5-May-2012 12:49

Just wondering why WXC's IP address appears in the log.

I have 5060 open as I haven't found an ASDL modem with firewall that works without port forwarding. If I don't have port forwarding on then I can't register my trunks.

Anonymous SIP connections are currently disallowed.

And anything which is lacking my DID is also disconnected. And fail2ban is also active.

They gave up easily ... the 3 connections dropped after a minute.

rphenix

990 posts

Ultimate Geek
+1 received by user: 127

ID Verified

Lifetime subscriber

#629655 23-May-2012 21:51

Your asterisk box has iptables..... so use it

Zeon

3926 posts

Uber Geek
+1 received by user: 759

Trusted

#629666 23-May-2012 22:19

If you can use a hardware firewall if at all possible. If you need remote extensions the Yealink phones have OpenVPN in them - never used it though.

Speedtest 2019-10-14

Zeon

3926 posts

Uber Geek
+1 received by user: 759

Trusted

#629667 23-May-2012 22:19

If you can use a hardware firewall if at all possible. If you need remote extensions the Yealink phones have OpenVPN in them - never used it though.

Speedtest 2019-10-14

rphenix

990 posts

Ultimate Geek
+1 received by user: 127

ID Verified

Lifetime subscriber

#629748 24-May-2012 09:20

Zeon: If you can use a hardware firewall if at all possible. If you need remote extensions the Yealink phones have OpenVPN in them - never used it though.

While I agree, and many routers have good firewalls, the ones that dont iptables is perfectly fine. Afterall most of them are using busybox with iptables under the hood anyway!

As Zeon says remote extensions, yealink is great, just a shame the T22P's and other "smaller phones" by yealink don't support openvpn and you have to get the larger/more expensive ones.