vicidial.org

Hi,

How can we allow only selected IPs to register SIP phone and reject rest of them. Cause we see many wrong password alerts on the asterisk. We have tried the latest firewall on 8.0.1 with method2 from viewtopic.php?f=8&t=37716 but it crashed the system and we are now getting only 2 sockets on server, also the dialplan or any carrier changes on the server are not being applied.

We've also tried blocking the IPs using ipset add badips xxx.xxx.xxx.xxx

But the above one doesn't store the IPs and will clear the blocked IP list on server restart.

So it would be great if someone can help me on how to block the IPs permanently and allow only whitelist IPs.

Thank you.

You said what you need at the end of that, Whitelisted IPs... follow the installing Dynamic Good Guys guide... if you only want a whitelisted firewall, and do not want the remote access portal capability or the web interface to manage IPs you can follow just the first steps of the guide. Here's a link.

http://viciwiki.com/index.php/DGG

Also make sure you turn off Ping, that is most likely your main culprit for hacker attacks. If they can not ping your server, they can not use most of their hacking programs to find your server.