Security Question

[Keyfin]

I've been bombarded by hacker attempts that fail2ban isn't stopping. So, I've blocked their attempts using "iptables -I INPUT -s [ip address of attacker] -j DROP" command. I also logged security and notices so i can capture the ip addresses of those that don't register remote ip in the asterisk cli output. So far the intrusion attempts have been diminished by 95%, i'm just wondering if this is really an effective way to block hackers or if some other method works better. Thanks!

[williamconley]

Dynamic Good Guys. But it's presently only up to Vicibox 6.0.4 so installation will require some tweaks (there's a post on the board with changes).

However: You don't actually require full installation ... you can just use the lockdown instructions available and add "Allowed IPs" directly in yast firewall's "Custom" section to allow good IPs and Ranges.

DGG is free on Viciwiki.com

Also: This is a support request, not a general discussion. Moving to the support board.

Good job posting your specs, BTW

[Keyfin]

Fantastic! Thanks so much!