Uploaded image for project: 'FreePBX'
  1. FreePBX
  2. FREEPBX-11575

fail2ban not trigerring on pjsip "No matching endpoint found"

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Not an issue
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Fail2Ban
    • Labels:
      None
    • ToDo:
    • Asterisk Version:
      13.7.0
    • Distro Version:
      10.13.66-7
    • Distro:
      FreePBX Distro

      Description

      Greetings,

      fail2ban-0.8.14-1.shmz65.1.127.noarch

      Fail2ban won't ban IPs for pjsip's "No matching endpoint found" notice, allowing remote extensions enumeration.

      Example line from asterisk log:
      [2016-02-12 15:42:21] NOTICE[16234] res_pjsip/pjsip_distributor.c: Request from '"701" <sip:701@12.34.56.78>' failed for '98.76.54.32:5099' (callid: 50d816612e1e4dffbee225b0eaad4dd5) - No matching endpoint found

        Gliffy Diagrams

          Attachments

            Issue Links

            is duplicated by

            Bug - A problem which impairs or prevents the functions of the product. FREEPBX-17401 A Fail2Ban rule will not not trigger on often used method for scanning.

            • Minor - Minor loss of function, or other problem where easy workaround is present.
            • Closed

              Activity

                People

                • Assignee:
                  Unassigned
                  Reporter:
                  roydepp roydepp
                • Votes:
                  1 Vote for this issue
                  Watchers:
                  5 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    NextupJiraPlusStatus

                    Error rendering 'slack.nextup.jira:nextup-jira-plus-status'. Please contact your Jira administrators.