| 00:18.02 | *** join/#asterisk opal (~wowaname@volatile/founder/wowaname) |
| 01:05.48 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 02:06.44 | *** join/#asterisk fstd_ (~fstd@unaffiliated/fisted) |
| 02:41.14 | *** join/#asterisk guerby (~guerby@april/board/guerby) |
| 02:41.46 | igcewieling | Not I. realtime dialplan is a path pain and suffering. |
| 02:43.01 | igcewieling | I store my endpoint settings in a database, then I use #exec in pjsip.conf to load the endpoint config. |
| 02:44.12 | igcewieling | My exec'd script connects to the database and generates the text output for pjsip.conf |
| 03:23.38 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 04:09.25 | *** join/#asterisk FH_thecat (~FH_thecat@75.11.25.212.ftth.as8758.net) |
| 04:35.07 | *** join/#asterisk dongs (~dongs@bcas.tv) |
| 04:35.25 | dongs | how do I block random people trying to outdial stuff |
| 04:35.27 | dongs | my logs are full of shit like chan_sip.c:15303 handle_request_invite: Call from '' to extension '0048422069023' rejected because extension not found. |
| 04:35.39 | dongs | literally spamming every second trying different nubmers etc |
| 04:36.03 | dongs | i mean they will obviously all fail beacuse I have ACLs for only local stuff to allow dialout |
| 04:36.08 | dongs | but its just crap in logs i dont want to see |
| 04:38.39 | [TK]D-Fender | You're allowing unauthed calls in the first place. |
| 04:38.56 | [TK]D-Fender | "allowguest=no" under [general] to reject them |
| 04:40.17 | dongs | well there's still spam , now its auth spam |
| 04:40.48 | dongs | NOTICE[23414]: chan_sip.c:15228 handle_request_invite: Failed to authenticate user <sip:cequipel@dongs>;tag=1209840591 |
| 04:41.00 | [TK]D-Fender | Then go firewall them out |
| 04:41.07 | drmessano | iptables, block anything you don't need to accept |
| 04:41.26 | dongs | do people just deal with this on public-facing SIP servers? |
| 04:41.33 | drmessano | Yes |
| 04:41.47 | drmessano | iptables rules and the like |
| 04:42.13 | [TK]D-Fender | There are scripts to soft/hard bad based on iptables hits. Additionally you can use fail2ban |
| 04:44.16 | dongs | meh to much work |
| 04:50.04 | dongs | ive been adding stuff to route add -host reject <ip>, any better way? |
| 04:50.10 | dongs | but i should prolly just not care |
| 04:50.20 | [TK]D-Fender | We've just mentioned a few |
| 04:50.37 | [TK]D-Fender | And you jsut said "too much work". |
| 04:50.40 | dongs | do you think a normal person would know how to "block IP with iptables" |
| 04:50.41 | [TK]D-Fender | You don't seem to care. |
| 04:50.44 | [TK]D-Fender | so carry on with that then |
| 04:50.47 | [TK]D-Fender | You're already there |
| 04:51.01 | [TK]D-Fender | How long did yougoogle for? |
| 04:51.09 | [TK]D-Fender | 2-3 seconds? |
| 04:51.12 | [TK]D-Fender | At all? |
| 04:51.40 | [TK]D-Fender | https://www.google.ca/search?source=hp&ei=yE7LXqjFFcic_QaY6rDwBQ&q=asterisk+iptables+rate+limit+script&oq=asterisk+iptables+rate+limit+script&gs_lcp=CgZwc3ktYWIQAzIFCCEQoAE6BQgAEIMBOgIIADoECAAQCjoGCAAQFhAeOggIIRAWEB0QHjoHCCEQChCgAToECCEQFVDlFFiOTGCrTWgBcAB4AIABigGIAfEbkgEFMjEuMTWYAQCgAQGqAQdnd3Mtd2l6&sclient=psy-ab&ved=0ahUKEwioyYLXm87pAhVITt8KHRg1DF4Q4dUDCAg&uact=5 |
| 04:51.46 | [TK]D-Fender | I found things instantly |
| 04:53.00 | dongs | nice |
| 04:53.02 | dongs | thanks sir |
| 04:54.20 | dongs | my asterisk build is from 2009, but Im too lazy to update it. so I'll just keep using until it dies |
| 04:55.37 | [TK]D-Fender | Then reconsider asking |
| 04:55.41 | [TK]D-Fender | as you said you don't care |
| 04:55.44 | [TK]D-Fender | then you ask again |
| 04:55.47 | [TK]D-Fender | then you stop caring |
| 04:55.51 | dongs | no man, i got it solved tho |
| 04:55.54 | dongs | thanks! |
| 04:56.13 | dongs | teh allowguest was a nice protip, that got rid of call attempts, and iptables thing will take care of failed logins. |
| 05:01.29 | *** join/#asterisk cryptic (~cryptic@142.196.139.17) |
| 05:07.25 | drmessano | 00:50:41 <dongs> do you think a normal person would know how to "block IP with iptables" <-- if they are running a Linux box with Asterisk on it, sure. Seems like a pretty strange hill to die on about "what normal people would know" in such a niche space. |
| 05:07.55 | drmessano | So yeah, most would either allow the needed IPs or block the rest of the world. |
| 05:09.23 | drmessano | https://www.bing.com/search?q=iptables+asterisk <-- Lots of great info there |
| 05:18.07 | *** join/#asterisk life_of_e (~life_of_e@108-95-189-245.lightspeed.irvnca.sbcglobal.net) |
| 05:20.27 | *** join/#asterisk gerhard7 (~gerhard7@ip5657ee30.direct-adsl.nl) |
| 05:26.06 | *** join/#asterisk dakudos (~dakudos@c-73-229-175-50.hsd1.co.comcast.net) |
| 05:39.45 | *** join/#asterisk tomaluca95 (~quassel@kde/developer/tomaluca) |
| 05:56.24 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 06:35.05 | *** join/#asterisk miralin (~Thunderbi@195.209.246.194) |
| 06:42.36 | *** join/#asterisk sa02irc (~mbax@155-079-043-212.ip-addr.inexio.net) |
| 06:46.05 | *** join/#asterisk miralin (~Thunderbi@195.209.246.194) |
| 06:47.20 | *** join/#asterisk samwierema (~samwierem@195.240.143.134) |
| 07:07.12 | *** join/#asterisk samwierema (~samwierem@195.240.143.134) |
| 07:11.03 | dongs | drmessano: one of the IPs is my mobile phone which is completely random. |
| 07:23.34 | *** join/#asterisk samwierema (~samwierem@195.240.143.134) |
| 07:24.00 | *** join/#asterisk miralin (~Thunderbi@195.209.246.194) |
| 07:51.27 | *** join/#asterisk samwierema (~samwierem@195.240.143.134) |
| 07:56.14 | *** join/#asterisk pchero_work (~pchero@2a02:a210:2241:6480:b1cd:db87:eb86:5d37) |
| 07:57.31 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 08:00.52 | *** join/#asterisk samwierema (~samwierem@195.240.143.134) |
| 08:05.24 | *** join/#asterisk lankanmon (~LKNnet@CPEb4fbe4e331bd-CM64777d632380.cpe.net.cable.rogers.com) |
| 08:27.19 | *** join/#asterisk defsdoor (~Andrew@cpc120600-sutt6-2-0-cust232.19-1.cable.virginm.net) |
| 08:50.21 | *** join/#asterisk sekil (~sekil@nat-73.net011.net) |
| 16:56.34 | *** join/#asterisk infobot (ibot@c-174-52-60-165.hsd1.ut.comcast.net) |
| 16:56.34 | *** topic/#asterisk is #asterisk The Open Source PBX and Telephony Platform (asterisk.org) -=- LTS: 13.33.0 (2020/04/30) 16.10.0 (2020/04/30) Standard: 17.4.0 (2020/04/20); DAHDI: 3.0.0 (2018/11/15); libpri 1.6.0 (2017/01/27) -=- Wiki: wiki.asterisk.org -=- Code of Conduct: bit.ly/1hH6P22 |
| 16:58.17 | *** join/#asterisk ChkDigit (~u388mw@207.195.34.73) |
| 17:02.42 | *** join/#asterisk sa02irc (~mbax@155-079-043-212.ip-addr.inexio.net) |
| 17:51.41 | *** join/#asterisk samwierema (~samwierem@195.240.143.134) |
| 18:15.40 | *** join/#asterisk samwierema (~samwierem@195.240.143.134) |
| 18:33.02 | *** join/#asterisk chandoo (~chandoo@pool-100-1-166-161.nwrknj.fios.verizon.net) |
| 18:37.14 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 19:01.42 | *** join/#asterisk CatCow97 (~mine9@c-73-96-109-206.hsd1.or.comcast.net) |
| 19:09.26 | *** join/#asterisk iq (~iq@47.185.105.195) |
| 19:32.50 | *** join/#asterisk matrix1233 (~matrix123@2a04:cec0:108e:e3:61a7:542a:b6cc:1da5) |
| 20:40.12 | *** join/#asterisk Jesterboxboy (~Thunderbi@84-115-150-8.cable.dynamic.surfer.at) |
| 20:48.45 | *** join/#asterisk matrix1233 (~matrix123@2a04:cec0:108e:e3:8446:7eee:6fd5:8121) |
| 20:55.45 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 21:01.43 | *** join/#asterisk fstd_ (~fstd@unaffiliated/fisted) |
| 21:02.16 | *** join/#asterisk overyander (~overyande@209.141.208.197) |
| 21:35.39 | *** join/#asterisk clarjon1 (~clarjon1@unaffiliated/clarjon1) |
| 21:43.45 | *** join/#asterisk AsteriskRoss (~AsteriskR@r01.nt-r1.nor.gb.voicehost.co.uk) |
| 21:55.17 | *** join/#asterisk aoeui (~aoeui@unaffiliated/aoeui) |
| 21:56.17 | *** join/#asterisk AsteriskRoss (~AsteriskR@r01.nt-r1.nor.gb.voicehost.co.uk) |
| 22:08.18 | *** join/#asterisk AsteriskRoss (~AsteriskR@r01.nt-r1.nor.gb.voicehost.co.uk) |
| 22:13.36 | *** join/#asterisk nickvsnetworking (~nickvsnet@1.152.109.81) |
| 22:16.47 | *** join/#asterisk AsteriskRoss (~AsteriskR@r01.nt-r1.nor.gb.voicehost.co.uk) |
| 22:28.13 | *** join/#asterisk AsteriskRoss (~AsteriskR@r01.nt-r1.nor.gb.voicehost.co.uk) |
| 22:39.36 | *** join/#asterisk AsteriskRoss (~AsteriskR@r01.nt-r1.nor.gb.voicehost.co.uk) |
| 22:47.44 | *** join/#asterisk AsteriskRoss (~AsteriskR@r01.nt-r1.nor.gb.voicehost.co.uk) |
| 22:55.56 | *** join/#asterisk AsteriskRoss (~AsteriskR@r01.nt-r1.nor.gb.voicehost.co.uk) |
| 23:04.08 | *** join/#asterisk AsteriskRoss (~AsteriskR@r01.nt-r1.nor.gb.voicehost.co.uk) |
| 23:19.05 | *** join/#asterisk aoeui (~aoeui@unaffiliated/aoeui) |
| 23:20.36 | *** join/#asterisk AsteriskRoss (~AsteriskR@r01.nt-r1.nor.gb.voicehost.co.uk) |
| 23:21.55 | *** join/#asterisk sa02irc (~mbax@155-079-043-212.ip-addr.inexio.net) |
| 23:22.24 | *** join/#asterisk sa02irc (~mbax@155-079-043-212.ip-addr.inexio.net) |
| 23:26.54 | *** join/#asterisk verzo (~verzo@gateway/tor-sasl/verzo) |
| 23:29.07 | *** join/#asterisk puzzola (~puzzola@unaffiliated/puzzola) |
| 23:33.54 | *** join/#asterisk matrix1233 (~matrix123@2a04:cec0:108e:e3:8446:7eee:6fd5:8121) |
| 23:36.37 | *** join/#asterisk AsteriskRoss (~AsteriskR@r01.nt-r1.nor.gb.voicehost.co.uk) |
| 23:57.46 | *** join/#asterisk AsteriskRoss (~AsteriskR@r01.nt-r1.nor.gb.voicehost.co.uk) |