Uploaded image for project: 'FreePBX'
  1. FreePBX
  2. FREEPBX-11701

fail2ban missing asterisk SIP jail definition

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Works For Me
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Fail2Ban
    • Labels:
      None
    • ToDo:
    • Asterisk Version:
      13.7.0
    • Distro Version:
      10.13.66-7
    • Distro:
      FreePBX Distro

      Description

      fail2ban-0.8.14-1.shmz65.1.128

      /etc/fail2ban/jail.local missing a jail definition for asterisk SIP filter.

      The auto-generated jail.local file should include a jail definition that use the "asterisk" filter in order to ban IPs that are matched according to the /etc/filter.d/asterisk.conf regexes.

      A jail definition similar to the following should be added to jail.local:

      
      [asterisk-iptables]
      enabled = true
      filter = asterisk
      action = iptables-allports[name=SIP, protocol=all]
           sendmail[name=SIP, dest=user@example.com, sender=notifications@example.com]
      logpath = /var/log/asterisk/fail2ban
      

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                GameGamer43 Bryan Walters
                Reporter:
                roydepp roydepp
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  NextupJiraPlusStatus

                  Error rendering 'slack.nextup.jira:nextup-jira-plus-status'. Please contact your Jira administrators.