similar to: SIP registration DoS but no logs in messages

Hi, I've recently had a fairly prolonged SIP registration attack, 18 hours in this case and often with 200 attempts per second, and suspect I've had a number of these in the past. The main symptom I noticed previously was, because Asterisk was responding to each registration request it received, it was very quickly using up my 448 kbps upload limit for my home ADSL connection: any

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello everyone, Is this being worked on? I rather need this thing... Although my system is Debian Lenny, not RH: kulfon 10.0.0.228 /etc/default % dpkg -l | grep libvirt ii libvirt-bin 0.4.6-10+lenny1 the programs for the libvirt library ii libvirt0 0.4.6-10+lenny1 library for

My R version is 2.7.1 (on Debian) and some packages are asking for > 2.10. I've done all things from http://cran.r-project.org/bin/linux/debian/ but to no success. Apt-get upgrade is doing nothing. server:/etc/R# apt-cache policy r-base-core r-base-core: Installed: 2.7.1-1+lenny1 Candidate: 2.7.1-1+lenny1 Version table: *** 2.7.1-1+lenny1 0 500 http://mirrors.nl.kernel.org

Hi! Asterisk in Debian/Lenny claims to be bristuffed, not? At least the the Debian patch tracking system shows the bristuff-patches: [1] http://bit.ly/bRRHe7 We have a QuadBRI-Card and recently needed support from Junghanns.net but they refused telling us there is no bristuff installed because of the show version output: *CLI> show version Asterisk 1.4.21.2~dfsg-3+lenny1 built by pbuilder @

Greetings all, I have been seeing a lot of [Jan 2 16:36:31] NOTICE[7519]: chan_sip.c:23149 handle_request_invite: Sending fake auth rejection for device 100<sip:100 at 108.161.145.18>;tag=2e921697 in my logs lately. Is there a way to automatically ban IP address from attackers within asterisk ? Thank you

Hi, Our Cisco 7940 phones on a single network sometimes seem to drop calls as soon as they are picked up. After a second INVITE the phone sends '500 Internal Error'. One phone thinks its still in a call (though there is no audio) while the other phone is not in a call. The drop happens immediately after connecting and I think it is due to a second INVITE. Turning reinvite off seems

Hi everyone. We have a problem here... Hope somebody can give us some hints. We have a HP ProLiant DL180 G6 Server with a Debian/Lenny sytem. Asterisk 1.4.21.2 (1.4.21.2~dfsg-3+lenny1) with zaptel (1.4.11) and libpri (1.4.3) is installed. There is a QuadBRI-Card installed: # lspci -vv -s 06:04.0 06:04.0 ISDN controller: Cologne Chip Designs GmbH ISDN network Controller [HFC-4S] (rev 01)

System: Debian 5.0.4 Lenny Kernel: custom 2.6.31.1 built from kernel.org source Dovecot: 1.0.15-2.3+lenny1 Available: 1.2.9-1~bpo50+1 Mailbox format: mbox Storage location: /home/$user/mail/ on ext2 fs Delivery: Postfix 2.5.5 local to /var/mail/$user As you can see Debian has a backport package of Dovecot 1.2.9 available to Lenny users, and it appears it is a big jump forward in terms of

Hello and happy new year :) I have to set up a samba server as a PDC with a openldap backend. My openldap server is fully functionnal and it is not secured yet (so no problems with tls). I must use debian etch or lenny. My server's IP is 192.168.9.10/24. I have set up a dns server (bind9) for my domain named "mik". It's a local domain for testing only. There is a piece of

... using it as a tool and understanding what it does... So one part of it's toolset identifys valid SIP accounts - and I was under the impression that alwaysauthreject=yes was supposed to stop this... However, it sends a request for a highly probably non-existent account, then sends requests for probably existing accounts and I guess compares the results - account not found vs. bad

Hi, Got some great news a few days ago from Sandro Gauci (@SandroGauci) and we'll be talking about this with him this Friday at 1PM. SIPVicious, the free security tools for SIP scanning, now include a new tool: svcrash. It is aimed at helping system administrators stop bandwidth consuming scans making use of svwar and svcrack. Here is the announcement on SIPViscious blog:

Hi List, i'm running the current debian lenny dovecot-version (dpkg says it's 1.0.15-2.3+lenny1) and i'm trying to get the antispam-plugin ('1.2+20090702-1~bpo50+3') to work. Unfortunately dovecot always says "antispam plugin not configured" moving spam into the spam-folder. My config: protocol imap { mail_plugins = antispam } plugin { antispam_signature =

I just tried upgrading from 1.1.rc6 to v1.2.11, and am getting the following error: dovecot: auth(default): Fatal: Unknown database driver 'mysql'. If I change the respective line in dovecot-sql.conf from driver = mysql to driver = pgsql the error message changes accordingly: dovecot: auth(default): Fatal: Unknown database driver 'pgsql'. I quit using 1.1.rc6 because it started

Hi. I would like to thank Johannes, Piet and others for the lenny-cran AMD64 ports. I have a question about r-recommended from lenny-cran which I just installed: hotelling:~$ apt-cache policy r-recommended r-recommended: Installed: 2.9.0-1~lennycran.0 Candidate: 2.9.0-1~lennycran.0 Version table: 2.9.0-1 0 600 http://debian.lcs.mit.edu unstable/main Packages ***

This really has me stumped and desperate. I upgraded Debian from 5 to 6 (squeeze) and now Dovecot LDA fails. I have checked permissions and the usual. Postfix SMTP, Dovecot POP3 and Dovecot IMAP work. Having to upgrade MySQL from 5.0 to 5.1 made me question that. Logging is of little help. I have turned on logging for LDA to a separate file. When I try to run the deliver command it returns

There seems to be another outage of the Vienna CRAN server [1] though from what I can from afar not related to DNS outage [2]. Could anyone confirm and possibly alert the local team in Vienna? Dirk [1] https://twitter.com/d_olivaw/status/1147161883797086214 [2] The DNS resolves on a few sites but eg simple pings stall -- http://dirk.eddelbuettel.com | @eddelbuettel | edd at debian.org

Hi, I'm getting some strange behaviour on Asterisk 1.4 running on Debian Stable (Lenny). I suspect it's something to do with my setup, rather than a bug, but I'm struggling to see it, and would appreciate any input. Setup: PC with two ethernet cards: eth0 goes to local network, including two SIP phones (Aastra 9112i, wired, and Nokia E75, over WIFI); eth1 goes to router and

Hello Campers! I am working on Site5, trying to get a working Camping application running. Unfortunately, my sole option in terms of deployment is FastCGI. I have no access to sudo so I cannot create ScriptAliases. I''ve taken the Camping Short Short Example and uploaded it, along with a dispatch.fcgi and an .htaccess file. My question is - given the state of Camping development right

I''m having trouble with TextMate and assigning the RSpec language to *_spec.rb files within rails projects. Here is what is happening: I''m in a file that has the language "Ruby on Rails" selected. I do a ctrl-shift-down to switch to the corresponding _spec.rb file. The _spec.rb file has the language "Ruby on Rails" selected. I change the language to

Hi, I can confirm, missing dependency on pyton-xml for 'xm new...' command. lin:/etc/xen# xm new lenny1 Unexpected error: <type 'exceptions.ImportError'> Please report to xen-devel at lists.xensource.com Traceback (most recent call last): File "/usr/lib/xen-3.2-1/bin/xm", line 7, in <module> main.main(sys.argv) File