* Thufir Hawat <hawat.thu...@gmail.com> [01-11-17 08:20]:
> In asterisk, I'm seeing:
> 
> 
> <--- Transmitting (NAT) to 67.212.84.21:5010 --->
> SIP/2.0 200 OK
> Via: SIP/2.0/UDP
> 67.212.84.21:5010;branch=0;received=67.212.84.21;rport=5010
> From: sip:p...@noname.com;tag=uloc-5875e606-bf5-0e907-52564b36-b246a5a3
> To: sip:s...@xx.x.xxx.xx:5060;tag=as3045973b
> Call-ID: cb004ab7-4a099401-d5dbe23@67.212.84.21
> CSeq: 1 OPTIONS
> Server: Asterisk PBX 13.1.0~dfsg-1.1ubuntu4
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
> PUBLISH, MESSAGE
> Supported: replaces, timer
> Contact: <sip:xx.x.xxx.xx:5060>
> Accept: application/sdp
> Content-Length: 0
> 
> 
> How can I just put a blacklist on that domain?  Not that I plan on 
> manually doing much of that, but seems like a good start.  That's an 
> interesting domain, noname.com but I don't mind blocking it.  Perhaps that 
> ip address while I'm at, not sure.

ip route add blackhole 67.212.84.21
or
iptables -A INPUT -s 67.212.84.21  -j DROP

if a *manual* operation and *seldom* done, don't try to jump thru hoops
:).
-- 
(paka)Patrick Shanahan       Plainfield, Indiana, USA          @ptilopteri
http://en.opensuse.org    openSUSE Community Member    facebook/ptilopteri
Photos: http://wahoo.no-ip.org/gallery2      Registered Linux User #207535      
              
Photos: http://wahoo.no-ip.org/piwigo            @ http://linuxcounter.net

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to