[VoiceOps] Growing attack pains

[Stefan Sayer]

o J. Oquendo on 01/10/2011 05:53 PM:
> I'm in the market for something to place in front of an SBC (modules
> would be nice, e.g., Asterisk module, Avaya module, etc.) The device
> will need to do the following:
> 
> Block on N ... Block N amount bad attempts indefinitely and alert
> Block on Prefix ... If PREFIX is anywhere in SIPURI/ANI/CID, block
> (country specific would be nice)
> 
> We are having a hard time keeping up with the attack vectors here. We
> recently saw a compromise from Egypt where the password was 15
> characters mixed numbers, letters and symbols. So obviously longer
> passwords aren't even an issue anymore.
> 

Palladion from IPTEGO can detect attacks and SPIT on a variety of 
configurable triggers (even scriptable) and also control firewalls and 
IPS like e.g. radware defensepro.

if you want to build your own, you may find some hints at
http://asipto.com/u/i

Stefan