Hello,
please could someone help me. Iam using asterisk 1.8 with fai2ban 0.8.14
with this configuration:
failregex = NOTICE.* .*: Registration from '.*' failed for
'<HOST>(:[0-9]{1,5})?' - ACL error \(permit/deny\)
NOTICE.* .*: Registration from '.*' failed for
'<HOST>(:[0-9]{1,5})?' - Wrong password
NOTICE.* .*: Registration from '.*' failed for
'<HOST>(:[0-9]{1,5})?' - No matching peer found
NOTICE.* .*: Registration from '.*' failed for
'<HOST>(:[0-9]{1,5})?' - Username/auth name mismatch
NOTICE.* .*: Registration from '.*' failed for
'<HOST>(:[0-9]{1,5})?' - Device does not match ACL
NOTICE.* .*: Registration from '.*' failed for
'<HOST>(:[0-9]{1,5})?' - Peer is not supposed to register
NOTICE.* <HOST> failed to authenticate as '.*'$
NOTICE.* .*: No registration for peer '.*' \(from <HOST>\)
NOTICE.* .*: Host <HOST> failed MD5 authentication for '.*' (.*)
NOTICE.* .*: Failed to authenticate user .*@<HOST>.*
Notice.* .*: Failed to authenticate device '.*' [^@]+@<HOST>\S*$
but the problem now that i receive this message:
chan_sip.c:22772 handle_request_invite: Failed to authenticate device "66"
<sip:[email protected]>;tag=66ccd6c732bc3d73
and i don't have a rule to block the ips that send like this message, could
someone give me the rule to add in order to ban these ips?
Best Regards
Mettichi Bassem
JETCOMM TELECOMS
------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
