Cisco 827 su Alice si pianta

[fmarzolo]

Salve a tutti. Complimenti, mi piace molto questo forum.

Sono neofita di Cisco, ho ereditato un 827, l'ho aggiornato a IOS 12.4, ha 24 mega di RAM e posto la mia configurazione perchè ho il dubbio che degli attacchi dall'esterno mi stiano bloccando. Ogni 2-3 giorni debbo riavviare il router perchè non si naviga più.
uso nat per Emule (10.253.240.2 su porte 1756-1757)
e per HW siemens gigaset SIP ( 10.253.240.1 su porte 5061-3478-8000)

oltre a questo SIP va male con un sacco di eco sui cellulari, ma credo che sia un altro problema.

Qualcuno è in grado di dirmi se sono aperto a qualche attacco DOS?
ringrazio per l'aiuto

version 12.4
no parser cache
no service single-slot-reload-enable
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router
!
logging rate-limit console 10 except errors
enable password ******
!
ip subnet-zero
no ip dhcp conflict logging
ip dhcp excluded-address 10.253.240.254
!
ip dhcp pool spillo.net
network 10.253.240.0 255.255.255.0
default-router 10.253.240.254
dns-server 151.99.125.2 151.99.125.3
!
ip inspect name FW cuseeme
ip inspect name FW ftp
ip inspect name FW h323
ip inspect name FW netshow
ip inspect name FW rcmd
ip inspect name FW realaudio
ip inspect name FW rtsp
ip inspect name FW sqlnet
ip inspect name FW streamworks
ip inspect name FW tftp
ip inspect name FW tcp
ip inspect name FW udp
ip inspect name FW vdolive
ip inspect name FW http
ip inspect name FW sip

ip ssh time-out 120
ip ssh authentication-retries 3
no ip dhcp-client network-discovery
!
!
!
!
interface Ethernet0
ip address 10.253.240.254 255.255.255.0
ip nat inside
!
interface ATM0
no ip address
ip nat outside
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
bundle-enable
dsl operating-mode auto
!
interface Dialer0
ip address negotiated
ip access-group 104 in
ip nat outside
ip inspect FW out
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname aliceadsl
ppp chap password 7 1218091E110E0D003927
!
ip nat translation timeout 420
ip nat translation tcp-timeout 250
ip nat translation pptp-timeout 420
ip nat translation udp-timeout 120
ip nat translation syn-timeout 10
ip nat translation dns-timeout 120
ip nat translation icmp-timeout 120
ip nat inside source list 102 interface Dialer0 overload
ip nat inside source static tcp 10.253.240.1 8000 interface Dialer0 8000
ip nat inside source static tcp 10.253.240.1 3478 interface Dialer0 3478
ip nat inside source static tcp 10.253.240.1 5061 interface Dialer0 5061
ip nat inside source static udp 10.253.240.2 1756 interface Dialer0 1756
ip nat inside source static tcp 10.253.240.2 1755 interface Dialer0 1755
ip nat inside source static tcp 10.253.240.1 5222 interface Dialer0 5222
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
ip http server
!
access-list 102 permit ip 10.253.240.0 0.0.0.255 any
access-list 104 permit tcp any any eq 1756
access-list 104 permit tcp any any eq 1755
access-list 104 permit tcp any any eq 5222
access-list 104 permit tcp any any eq 5061
access-list 104 permit tcp any any eq 3478
access-list 104 permit tcp any any eq 8000
access-list 104 deny ip any any
dialer-list 1 protocol ip permit
!
line con 0
stopbits 1
line vty 0 4
password *********
login
transport input telnet
!
scheduler max-task-time 5000
end

[Wizard]

Più che attacchi dos mi sa che si satura la ram (emule?!)
Controlla quanta memoria hai libera...e, già che ci sei anche la CPU