Uploaded image for project: 'FreePBX'
  1. FreePBX
  2. FREEPBX-10826

fail2ban is banning itself (IP of the server it's running on)

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: No Feedback
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Fail2Ban
    • Labels:
      None

      Description

      Fail2ban is banning the servers' it's running on IP address.
      PBX Version: 10.13.66-6

      /var/log/asterisk/full:

      [2015-11-23 11:49:16] NOTICE[18736] chan_sip.c: Registration from '"test5" <sip:test5@XXX.XXX.XXX.106>' failed for '85.25.74.109:5238' - Wrong password
      [2015-11-23 11:49:17] NOTICE[18736][C-00000000] chan_sip.c: Failed to authenticate device "test5" <sip:test5@XXX.XXX.XXX.106>;tag=456908b89054
      [2015-11-23 11:53:19] NOTICE[18718] res_pjsip/pjsip_distributor.c: Request from '"100" <sip:100@107.6.50.106>' failed for '195.154.181.19:5071' (callid: 55db856376ce784a99569fdbc18e092d) - No matching endpoint found

      /var/log/asterisk/fail2ban
      [2015-11-23 11:49:16] NOTICE[18736] chan_sip.c: Registration from '"test5" <sip:test5@XXX.XXX.XXX.106>' failed for '85.25.74.109:5238' - Wrong password

      /var/log/fail2ban
      2015-11-23 11:49:17,893 fail2ban.actions[18631]: WARNING [asterisk-iptables] Ban XXX.XXX.XXX.106
      2015-11-23 11:49:17,922 fail2ban.actions[18631]: WARNING [asterisk-iptables] Ban 85.25.74.109
      Chain fail2ban-SIP (2 references)
      REJECT all – 85.25.74.109 0.0.0.0/0 reject-with icmp-port-unreachable
      REJECT all – XXX.XXX.XXX.106 0.0.0.0/0 reject-with icmp-port-unreachable
      Why would it ban .106 (itself) ???

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                xrobau Rob Thomas
                Reporter:
                Hawkeye Hawkeye
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:

                  NextupJiraPlusStatus

                  Error rendering 'slack.nextup.jira:nextup-jira-plus-status'. Please contact your Jira administrators.