Dear friends,
I noticed the following unwanted packets on my firewall log
Description of problem:
Asterisk syn-floods 192.168.0.24
Version-Release number of selected component (if applicable):
Elastix 2.2 RC1 on x86_64 (Asterisk 1.8.5.0)
How reproducible:
Every time
Steps to Reproduce:
1. Install Elastix
2. check your firewall log to see the syn flood
Additional info:
1. The problem is the sample /etc/asterisk/res_pktccops.conf. It contains entries
which by default contact 192.168.0.24. The extra neat thing is that this
affects even upgrades, because the file does not exist in older versions of
Asterisk...
2. Also the conf file contains 2 times the same configuration!!!
I caught this in my testing environment, it would have been no fun at all in
production.
A. Proposed resolution: (taken from https://bugzilla.redhat.com/show_bug.cgi?id=658431)
When building, sed -i -e 's/^/;/' /etc/asterisk/res_pktccops.conf
B. proposed resolution: (by kinglyr)
edit the /etc/asterisk/res_pktccops.conf
and replace everything with the following: (settings taken bug thread: https://issues.asterisk.org/view.php?id=12950)
; Sample res_pktccops.conf
; created 4-9-2011 by kinglyr (GR)
;[general]
;gateinfoperiod => 60 ; default 60s
;gatetimeout = 150 ; default 150
;t1 => 250 ; default 250s
;t7 => 200 ; default 200s
;t8 => 300 ; default 300s
;keepalive => 60 ; default 60s
;[test]
;host => 192.168.0.24
;pool => 10.0.1.0 10.0.1.255
;pool => 10.0.3.0 10.0.3.255
;pool => 10.0.7.0 10.0.8.255
;pool => 10.0.10.0 10.0.11.255
[general]
gateinfoperiod => 60 ; default 60s
gatetimeout = 150 ; default 150
t1 => 250 ; default 250s
t7 => 200 ; default 200s
t8 => 300 ; default 300s
keepalive => 60 ; default 60s
[test-cmts]
host => 10.0.0.1 ;PUT HERE THE IP OF YOUR ADSL ROUTER
pool => 10.0.1.0 10.0.1.255
pool => 10.0.3.0 10.0.3.255
pool => 10.0.7.0 10.0.8.255
pool => 10.0.10.0 10.0.11.255
I noticed the following unwanted packets on my firewall log
Description of problem:
Asterisk syn-floods 192.168.0.24
Version-Release number of selected component (if applicable):
Elastix 2.2 RC1 on x86_64 (Asterisk 1.8.5.0)
How reproducible:
Every time
Steps to Reproduce:
1. Install Elastix
2. check your firewall log to see the syn flood
Additional info:
1. The problem is the sample /etc/asterisk/res_pktccops.conf. It contains entries
which by default contact 192.168.0.24. The extra neat thing is that this
affects even upgrades, because the file does not exist in older versions of
Asterisk...
2. Also the conf file contains 2 times the same configuration!!!
I caught this in my testing environment, it would have been no fun at all in
production.
A. Proposed resolution: (taken from https://bugzilla.redhat.com/show_bug.cgi?id=658431)
When building, sed -i -e 's/^/;/' /etc/asterisk/res_pktccops.conf
B. proposed resolution: (by kinglyr)
edit the /etc/asterisk/res_pktccops.conf
and replace everything with the following: (settings taken bug thread: https://issues.asterisk.org/view.php?id=12950)
; Sample res_pktccops.conf
; created 4-9-2011 by kinglyr (GR)
;[general]
;gateinfoperiod => 60 ; default 60s
;gatetimeout = 150 ; default 150
;t1 => 250 ; default 250s
;t7 => 200 ; default 200s
;t8 => 300 ; default 300s
;keepalive => 60 ; default 60s
;[test]
;host => 192.168.0.24
;pool => 10.0.1.0 10.0.1.255
;pool => 10.0.3.0 10.0.3.255
;pool => 10.0.7.0 10.0.8.255
;pool => 10.0.10.0 10.0.11.255
[general]
gateinfoperiod => 60 ; default 60s
gatetimeout = 150 ; default 150
t1 => 250 ; default 250s
t7 => 200 ; default 200s
t8 => 300 ; default 300s
keepalive => 60 ; default 60s
[test-cmts]
host => 10.0.0.1 ;PUT HERE THE IP OF YOUR ADSL ROUTER
pool => 10.0.1.0 10.0.1.255
pool => 10.0.3.0 10.0.3.255
pool => 10.0.7.0 10.0.8.255
pool => 10.0.10.0 10.0.11.255
