<div><div><div>You mentioned the IP, 208.122.57.58, where did you get that from?</div><div><br></div><div>Following are the default for Asterisk 1.8 (It would be great to have others input on this to strengthen this part of the filter):</div>
<div><br></div><div>failregex = Registration from '.*' failed for '<HOST>(:[0-9]{1,5})?' - Wrong password</div><div> Registration from '.*' failed for '<HOST>(:[0-9]{1,5})?' - No matching peer found</div>
<div> Registration from '.*' failed for '<HOST>(:[0-9]{1,5})?' - Device does not match ACL</div><div> Registration from '.*' failed for '<HOST>(:[0-9]{1,5})?' - Username/auth name mismatch</div>
<div> Registration from '.*' failed for '<HOST>(:[0-9]{1,5})?' - Peer is not supposed to register</div><div> NOTICE.* <HOST> failed to authenticate as '.*'$</div>
<div>
NOTICE.* .*: No registration for peer '.*' (from <HOST>)</div><div> NOTICE.* .*: Host <HOST> failed MD5 authentication for '.*' (.*)</div><div> VERBOSE.* logger.c: -- .*IP/<HOST>-.* Playing 'ss-noservice' (language '.*')</div>
<div><br></div><div><br></div><div>Regards,</div></div>
<br><div class="gmail_quote">On Wed, Dec 28, 2011 at 11:50 PM, Michelle Dupuis <span dir="ltr"><<a href="mailto:mdupuis@ocg.ca" target="_blank">mdupuis@ocg.ca</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I just realized there is no IP (host) in the message line, so no way for fail2ban to catch it.<br>
<br>
Other suggestions? Or will I have to code something into my dialplan....<br><br></blockquote></div></div>