2015-01-09 3:53 GMT-06:00 Stefan Gofferje <[email protected]>:
>
> Do you really want to detect "ChallengeSent"? That should occur also on
> legitimate login processes...
>

Hi , strange thing is that I still have not this asterisk in
production and I see many attempts Connection.

Now keep in mind that when a connection of authentication is
successful the message changes and is not exactly what you mention:

## SecurityEvent="SuccessfulAuth",EventTV="1420832883-140932",####

I think this type of connection attempts messages with my asterisk
that fail2ban  not detected.

I'm no expert, but the log not lie ;)

regardss
-- 
rickygm

http://gnuforever.homelinux.com

-- 
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to