Posted: Tue Mar 17, 2009 5:13 pm Post subject: [asterisk-biz] PBX Hacker IP List (Good News)
Hi All,
Thank you for your great input. I have made contact with Project
Honey Pot http://www.projecthoneypot.org/ and they are willing and
able to help. I have been talking through some scenarios and would
like to solicit participants to be included in the correspondence. We
have some ideas around the centralized blacklist and data collection
method, they agree it should be automated as possible and they have
vast experience in this arena. I believe the local PBX log parsing
model is a good approach and seems to work well for me personally.
Every nix based PBX has syslogd which can selectively parse logs and
submit relevant messages to remote collection servers. Probably
updating PBX to rsyslog would be more useful. Anyway, Project Honey
Pot is confident they can perform as the central blacklisting
repository for the community. I have already sent them some real
hacker attempt log messages and we are talking through some logistics.
Who would like to be included in the discussions? Feel free to
respond on or off list. I can forward our current correspondence to
bring you up to speed. Who I'm looking for participation from are
users that do have some time to contribute to this effort. We will
also need a couple of developers to be in the loop as I'm sure
augmented code will have to make its way into Asterisk core.
A note to JT, should this come together into a useful tool in time for
Astricon, then certainly I would gladly speak on the subject. I'm
planning on Speaking about Asterisk and OpenVZ Virtualization as a
primary presentation.
Thanks.
JR
--
JR Richardson
Engineering for the Masses
_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--
Posted: Tue Mar 17, 2009 5:32 pm Post subject: [asterisk-biz] PBX Hacker IP List (Good News)
Count me in
I'm already a Project Honey Pot contributor and I really like their
services.
On Tue, 17 Mar 2009, JR Richardson wrote:
Quote:
Date: Tue, 17 Mar 2009 13:10:07 -0500
From: JR Richardson <jmr.richardson@gmail.com>
Reply-To: Commercial and Business-Oriented Asterisk Discussion
<asterisk-biz@lists.digium.com>
To: asterisk-biz@lists.digium.com
Subject: Re: [asterisk-biz] PBX Hacker IP List (Good News)
Hi All,
Thank you for your great input. I have made contact with Project
Honey Pot http://www.projecthoneypot.org/ and they are willing and
able to help. I have been talking through some scenarios and would
like to solicit participants to be included in the correspondence. We
have some ideas around the centralized blacklist and data collection
method, they agree it should be automated as possible and they have
vast experience in this arena. I believe the local PBX log parsing
model is a good approach and seems to work well for me personally.
Every nix based PBX has syslogd which can selectively parse logs and
submit relevant messages to remote collection servers. Probably
updating PBX to rsyslog would be more useful. Anyway, Project Honey
Pot is confident they can perform as the central blacklisting
repository for the community. I have already sent them some real
hacker attempt log messages and we are talking through some logistics.
Who would like to be included in the discussions? Feel free to
respond on or off list. I can forward our current correspondence to
bring you up to speed. Who I'm looking for participation from are
users that do have some time to contribute to this effort. We will
also need a couple of developers to be in the loop as I'm sure
augmented code will have to make its way into Asterisk core.
A note to JT, should this come together into a useful tool in time for
Astricon, then certainly I would gladly speak on the subject. I'm
planning on Speaking about Asterisk and OpenVZ Virtualization as a
primary presentation.
Thanks.
JR
_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--
Posted: Tue Mar 17, 2009 5:57 pm Post subject: [asterisk-biz] PBX Hacker IP List (Good News)
On Tue, Mar 17, 2009 at 7:10 PM, JR Richardson <jmr.richardson@gmail.com> wrote:
Quote:
Thank you for your great input. I have made contact with Project
Honey Pot http://www.projecthoneypot.org/ and they are willing and
able to help. I have been talking through some scenarios and would
I'm following this discussion with interest, please consider visiting
our weekly Voip Users Conference (Friday 12 Noon EDT) with updates and
announcements whenever you have news!
/r
_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum