o J. Oquendo on 01/10/2011 05:53 PM:
I'm in the market for something to place in front of an SBC (modules would be nice, e.g., Asterisk module, Avaya module, etc.) The device will need to do the following:
Block on N ... Block N amount bad attempts indefinitely and alert Block on Prefix ... If PREFIX is anywhere in SIPURI/ANI/CID, block (country specific would be nice)
We are having a hard time keeping up with the attack vectors here. We recently saw a compromise from Egypt where the password was 15 characters mixed numbers, letters and symbols. So obviously longer passwords aren't even an issue anymore.
Palladion from IPTEGO can detect attacks and SPIT on a variety of configurable triggers (even scriptable) and also control firewalls and IPS like e.g. radware defensepro. if you want to build your own, you may find some hints at http://asipto.com/u/i Stefan