Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Updated using 4PSA automated script


Note

Applies to VoipNow 3.X.X!

An increased number of VoIP attacks (mostly brute-force) coming from specific countries usually leads to excessive resource utilization and eventually to fraud calls, if the attack is successful. One way to avoid this is by blocking specific countries (one or several).

Step-by-step guide

 It is assumed that you are using a CentOS server with iptables already installed.

  1. Download the script.

    Shell

     wget -O blockcountry.pl https://raw.githubusercontent.com/4psa/voipnowtoolbox/master/blockcountry.pl


  2. Install the LWP::UserAgent library using the following command: 

    Shell

    yum install perl-libwww-perl


  3. Edit the blockcountry.pl script and specify the countries that you want to block. The list of countries is available here

    e.g. The code for Palestina is PS. For Turkey, it's TR.

  4. Run the blockcountry.pl script: 

    Shell

    perl blockcountry.pl


  5. To preserve the rules during reboots, run the following comand: 

    Shell

    service iptables save && chkconfig iptables on


Note

Make sure you do not mix the countries, otherwise you might get yourself blocked.

To avoid such issues, it is recommended to start with a cronjob that will remove the rules in order to avoid issues. If no issues arise, the cronjob can be removed.

Content by Label
showLabelsfalse
max5
spaces4PSAKB
showSpacefalse
sortmodified
reversetrue
typepage
cqllabel in ("server","block","access","brute-force","attacks","fraud","countries") and space = currentSpace()
labelsattacks brute-force fraud block voipnow countries server access

Except where otherwise noted, content in this space is licensed under a Creative Commons Attribution 4.0 International.