[asterisk-bugs] [JIRA] (ASTERISK-25567) Log IP Addresses for automatic firewalling (e.g. fail2ban)

[Michael L. Young (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-25567?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=228331#comment-228331 ] 

Michael L. Young commented on ASTERISK-25567:
---------------------------------------------

Have you enabled the security log?  Check out logger.conf if you have not done so already.

Fail2ban also has a wiki page describing how to setup the security events log to work with fail2ban.

> Log IP Addresses for automatic firewalling (e.g. fail2ban)
> ----------------------------------------------------------
>
>                 Key: ASTERISK-25567
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25567
>             Project: Asterisk
>          Issue Type: Improvement
>      Security Level: None
>          Components: Channels/chan_sip/Registration
>    Affects Versions: 13.6.0
>         Environment: Linux
>            Reporter: Troy Bowman
>            Severity: Minor
>
> Please consider adding IP addresses to registration failures to allow programs like fail2ban to firewall abusers after a certain number of attempts.
> I will attach a patch which illustrates the idea when I've been granted the permission to do so.



--
This message was sent by Atlassian JIRA
(v6.2#6252)