Re: [asterisk-users] fail2ban Asterisk 13.13.1

2017-03-25 Thread Ludovic Gasc
2017-03-02 16:38 GMT+01:00 Patrick Laimbock : > This commit mentions improved pjsip support: > > https://github.com/fail2ban/fail2ban/commit/f85fb45b29768f68 > 7546ba25f805977cf00b6e43 > > I confirm that we have improved asterisk pjsip support in fail2ban, however, I think we might still have some

Re: [asterisk-users] fail2ban Asterisk 13.13.1

2017-03-02 Thread Patrick Laimbock
On 02-03-17 13:52, Bryant Zimmerman wrote: John V Are you using pjsip? We are have several test servers and I just checked my /etc/fail2ban/filter.d/asterisk.conf and it is not updated for pjsip implementations. Looking at the security log files and the regex I noticed that some items are bein

Re: [asterisk-users] fail2ban Asterisk 13.13.1

2017-03-02 Thread Bryant Zimmerman
on. -Raj- From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Tech Support Sent: Wednesday, March 1, 2017 2:37 PM To: 'Asterisk Users Mailing List - Non-Commercial Discussion' Subject: Re: [asterisk-users] fail2ban Asterisk 13.13.1

Re: [asterisk-users] fail2ban Asterisk 13.13.1

2017-03-02 Thread Julie M
On Thursday 02 Mar 2017, Telium Technical Support wrote: > If this is a small site, I recommend you download the free version of > SecAst (www.telium.ca ) and replace fail2ban. > SecAst does NOT use the log file, or regexes, to match etc.instead it > talks to Asterisk throug

Re: [asterisk-users] fail2ban Asterisk 13.13.1

2017-03-01 Thread Telium Technical Support
terisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Tech Support Sent: Wednesday, March 1, 2017 2:37 PM To: 'Asterisk Users Mailing List - Non-Commercial Discussion' Subject: Re: [asterisk-users] fail2ban Asterisk 13.13.1 It's poss

Re: [asterisk-users] fail2ban Asterisk 13.13.1

2017-03-01 Thread Tech Support
ther or not the 'findtime' is the culprit. Regards; John V. From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Motty Cruz Sent: Wednesday, March 01, 2017 01:29 PM To: 'Asterisk Users Mailing List - Non-Commercial Discus

Re: [asterisk-users] fail2ban Asterisk 13.13.1

2017-03-01 Thread Антон Сацкий
Think that U should ask in Fain2ban LIST 2017-03-01 20:29 GMT+02:00 Motty Cruz : > Hello, fail2ban does not ban offending IP. > > > > NOTICE[29784] chan_sip.c: Registration from > '"user3"' > failed for 'offending-IP:53417' - Wrong password > > NOTICE[29784] chan_sip.c: Registration from > '"us

[asterisk-users] fail2ban Asterisk 13.13.1

2017-03-01 Thread Motty Cruz
Hello, fail2ban does not ban offending IP. NOTICE[29784] chan_sip.c: Registration from '"user3"' failed for 'offending-IP:53417' - Wrong password NOTICE[29784] chan_sip.c: Registration from '"user3"' failed for ‘offending-IP:53911' - Wrong password systemctl status fail2ban ● fail2ban.se

Re: [asterisk-users] fail2ban + asterisk

2011-03-07 Thread David Quinton
On Mon, 7 Mar 2011 08:50:27 -1000, Matt Darnell wrote: >On Sat, Mar 5, 2011 at 8:54 PM, Pezhman Lali wrote: >> Dear >> this note is only for fresh administrators don't think about asterisk >> security. > > >Do you know where you go to 'un-ban' an IP if they made some mistake? > >Using webmin I w

Re: [asterisk-users] fail2ban + asterisk

2011-03-07 Thread Matt Darnell
On Mon, Mar 7, 2011 at 9:15 AM, Jamie A. Stapleton wrote: > iptables -L -v > > will give you the IP address that was banned > > -Original Message- > From: asterisk-users-boun...@lists.digium.com > [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Thanks Jamie, I will look a

Re: [asterisk-users] fail2ban + asterisk

2011-03-07 Thread Jamie A. Stapleton
Discussion Subject: Re: [asterisk-users] fail2ban + asterisk On Sat, Mar 5, 2011 at 8:54 PM, Pezhman Lali wrote: > Dear > this note is only for fresh administrators don't think about asterisk > security. Do you know where you go to 'un-ban' an IP if they made some mistake?

Re: [asterisk-users] fail2ban + asterisk

2011-03-07 Thread Matt Darnell
On Sat, Mar 5, 2011 at 8:54 PM, Pezhman Lali wrote: > Dear > this note is only for fresh administrators don't think about asterisk > security. Do you know where you go to 'un-ban' an IP if they made some mistake? Using webmin I was not able to find the IP address that was was banned. Thanks, M

[asterisk-users] fail2ban + asterisk

2011-03-05 Thread Pezhman Lali
Dear this note is only for fresh administrators don't think about asterisk security. I found fail2ban very useful for anti asterisk hacking, so I want to share it with fresh admins. some hackers try your sip or iax2 ip with a lot of username/password, may be after 1 million try, one username/passwo