[asterisk-users] Weird IPs in Fail2ban list

[asterisk jobs]

I was using 1.8.8.1 and now upgraded it to 1.8.9.1. Here is a problem I
have with Asterisk logging if someone can point me to the right direction.

With allowguest=no, Asterisk 1.8.9.1 doesn't create anything in the full
log so my fail2ban can't ban the unregistered call attempt on my server.
How can this be fixed so that there is an entry in the log file for the
failed attempt so the IP gets banned?

Best,

On Fri, Feb 10, 2012 at 10:53 PM, Paul Belanger <pabelanger at digium.com>wrote:

> On 12-01-26 11:49 PM, asterisk jobs wrote:
>
>> Hello everyone,
>>
>> I have noticed getting wired IPs blocked by Fail2ban. Has anyone else seen
>> this or can explain this?
>>
>> Chain fail2ban-ASTERISK (1 references)
>> num  target     prot opt source               destination
>> 1    DROP       all  --  0.23.20.189          0.0.0.0/0
>>
>> I also get things like, 0.0.5.2, etc....Fail2ban seems to be working when
>> I
>> am testing. Are these numbers taken from the SIP packet or the TCP/IP
>> protocol source because they surely are not valid addresses.
>>
>>  What version of asterisk 1.8 are you using?  I suspect this is a bug we
> recently fixed in 1.8.8.0+
>
> --
> Paul Belanger
> Digium, Inc. | Software Developer
> twitter: pabelanger | IRC: pabelanger (Freenode)
> Check us out at: http://digium.com & http://asterisk.org
>
>
> --
> ______________________________**______________________________**_________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>              http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>  http://lists.digium.com/**mailman/listinfo/asterisk-**users<http://lists.digium.com/mailman/listinfo/asterisk-users>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20120211/dc262403/attachment.htm>