On Wed, Mar 14, 2012 at 1:36 PM, Randall <rand...@songshu.org> wrote:
> all works as expected only there is 1 extension that is trying to register > with a wrong password causing fail2ban to block the IP address, normally > that is ok behaviour but i have several extensions on that IP address. > > First of all, white list the IP in fail2ban and you won't accidentally ban the whole office. This can be done by following this guide: http://www.fail2ban.org/wiki/index.php/Whitelist Second, this is kind of outside the box thinking, so it may not work at all, but try setting the NAT on that peer to no, and then tcpdump the incoming registration attempts and see if you can see the internal private IP address of the packet. If there's a SIP helper on the far end, this may not help. Possibly, remove the secret= line from that peer in sip.conf and see if it successfully registers. Again, with the right nat= setting, you may be able to tcpdump the communication with that peer and get the private IP address so that you can then attempt narrow it down. This is not a long term solution, obviously, as it would create a gaping security hole, but it's worth a shot. -- Thanks, --Warren Selby, dCAP http://www.SelbyTech.com <http://www.selbytech.com>
-- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
