Re: [asterisk-users] Blacklist failed attempts

2018-03-02 Thread Telium Technical Support
x Sent: Thursday, March 1, 2018 8:03 AM To: Asterisk Users Mailing List - Non-Commercial Discussion <asterisk-users@lists.digium.com> Subject: [asterisk-users] Blacklist failed attempts Hi. I would like to protect my system from failed attempts. I would like to ask if there is

Re: [asterisk-users] Blacklist failed attempts

2018-03-02 Thread Frank Vanoni
On Thu, 2018-03-01 at 15:02 +0200, Atux Atux wrote: > I have tried to implement it through fail2ban, but it doe snot seem > to work for my asterisk implementation. I'm happy with Fail2Ban protecting my Asterisk 13. Here is my configuration: in /etc/asterisk/logger.conf: messages =>

Re: [asterisk-users] Blacklist failed attempts

2018-03-01 Thread Benoit Panizzon
Hi You could do somethink like this in Perl: #!/usr/bin/perl -w use strict; use warnings; my (@failhost); my %currblocked; my %addblocked; my $action; open (MYINPUTFILE, "/var/log/asterisk/messages") or die "\n", $!, "Does log file file exist\?\n\n"; while () { my ($line) = $_;

Re: [asterisk-users] Blacklist failed attempts

2018-03-01 Thread Antony Stone
On Thursday 01 March 2018 at 14:02:37, Atux Atux wrote: > Hi. I would like to protect my system from failed attempts. I would like to > ask if there is a way to do a blacklist for certain amount of time > consecutive attempts from the same IP. fail2ban > For example if we have an IP that gets a

[asterisk-users] Blacklist failed attempts

2018-03-01 Thread Atux Atux
Hi. I would like to protect my system from failed attempts. I would like to ask if there is a way to do a blacklist for certain amount of time consecutive attempts from the same IP. For example if we have an IP that gets a wrong passwd an it had tried more than 3 times the last 5 minutes,