eherr wrote:
Not sure if this has been answered but I cannot find a solution. I am running Asterisk 1.4.26.3
Very VERY old. If you need to continue in 1.4, you should really up to the last 1.4.44 Many MANY changes and broken changes between 1.4.26 and 1.4.44 John Novack
I am seeing the following lines in my log files: A: [2013-03-05 13:54:27] NOTICE[6928] chan_sip.c: Failed to authenticate user <sip:192.210.138.12>;tag=DmVIjOlfYiiL B: [2013-03-05 12:20:00] NOTICE[6928] chan_sip.c: Failed to authenticate user 101<sip:[email protected]>;tag=eec630f1 C: [2013-03-03 05:15:02] NOTICE[31158] chan_sip.c: Registration from '"101381"<sip:[email protected]>' failed for '85.25.23.129' - No matching peer found Now Two Part Question: Part 1: I understand that line C is from some soft phone like Xlite, IP phone, or program trying to register extension 101381 to my server and the user exten does not exist. I don't understand the method for A or B. I don't understand what generates that error message. Can someone explain? Part 2: Fail2ban blocks line C as per the regex in filters/asterisk.conf. What I don't understand is why doesn't lines A or B have a built in regex line? This goes back to not knowing the method that generates the error message in part 1. Also, can I update the regex in asterisk.conf, From: NOTICE.* .*: Failed to authenticate user .*@<HOST>.* <mailto:.*@%3cHOST%3e.*> To: NOTICE.* .*: Failed to authenticate user .* It should ban both A and B, along with the original Regex line that I modified. Question is, would this present a problem under normal circumstances? I know when the line comes up with my.asterisk.server.ip it will get ignored because I am in the ignoreip list but I want to make sure it will be OK to adjust. Thanks community! -E -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
-- Dog is my Co-pilot
-- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
