[Spce-user] Registration attack

[Kevin Masse]

Block the subnet.

For example

iptables -A INPUT -s 184.106.0.0/16 -j DROP

Kevin




-----Original Message-----
From: Jeremie Chism [mailto:jchism2 at gmail.com] 
Sent: Wednesday, May 01, 2013 9:49 AM
To: Kevin Masse
Cc: <spce-user at lists.sipwise.com>
Subject: Re: [Spce-user] Registration attack

Thanks. It's coming from multiple IP's. just trying to get them all. 

Sent from my iPhone

On May 1, 2013, at 8:43 AM, "Kevin Masse" <kmasse at questblue.com> wrote:

> Jeremie, use the IPTABLES drop rule.
> 
> iptables -A INPUT -s IPADDRESS -j DROP
> 
> 
> Kevin
> 
> 
> 
> -----Original Message-----
> From: spce-user-bounces at lists.sipwise.com
> [mailto:spce-user-bounces at lists.sipwise.com] On Behalf Of Jeremie 
> Chism
> Sent: Wednesday, May 01, 2013 9:41 AM
> To: spce-user at lists.sipwise.com
> Subject: [Spce-user] Registration attack
> 
> We are receiving an attack of someone that is continuously trying to 
> register to sipwise. There are so many attempts that the security ban 
> tab is now returning an internal error. Is there a way to stop this or

> slow it down. I thought I remembered someone saying there was 
> something that could be changed like returning a 200 ok on a ban. I am

> concerned about how this will impact sipwise since it is already 
> showing signs of stress.
> 
> Sent from my iPhone
> _______________________________________________
> Spce-user mailing list
> Spce-user at lists.sipwise.com
> http://lists.sipwise.com/listinfo/spce-user