Event Guard

[glennbtn]

Hi All

Does anyone know how Event Guard is meant to work?

I have it installed and can see ip's in the logs which it says it's blocked (multiple of the same ip) I can see these multiple have been added to ip tables but I can also see the ip address still hitting the cli trying to register. Something clearly amiss somewhere

 

[whut]

Event guard is blocking the attempts from being successful. It can't stop someone from trying. For more blocking you could have a firewall in front of the server.

 

[DigitalDaz]

Event guard is blocking the attempts from being successful. It can't stop someone from trying. For more blocking you could have a firewall in front of the server.

But if event guard is in play, they shouldn't be seen in the freeswitch cli.

Try restarting the event guard service, the iptables chains get created when the service starts.

 

[whut]

Good point. Definately restart the service. I have experienced event guard service running (and restarted) but doing no blocking. Most of the time it is working as intended.