News for hackers. Stuff that matters.

A comment on Spectrum now blocking TCP/UDP 5060 at my home. Parent comment

Re:Spectrum now blocking TCP/UDP 5060 at my home by megous on Sunday October 30, 2022 @09:40PM (#33401058)
No, I rate limit everything by default (per IP address, via a few nftables rules), until the user logs in, at which point I add the IP address to a whitelist. I also run SIP on non-default port and use SRV records to point the client to the right port. Helps with blind IP scans.

I don't really like the fail2ban approach.

[ Parent | on HN ]

There are no comments on this comment yet.