<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hi Patrick,<br>
<br>
github done ;-)<br>
<br>
what is HTH ???<br>
<br>
<br>
<br>
Am 15.09.2014 um 13:21 schrieb Patrick Laimbock:<br>
</div>
<blockquote cite="mid:5416CBBC.9000908@laimbock.com" type="cite">Hi
Rainer,
<br>
<br>
On 15-09-14 09:07, Rainer Piper wrote:
<br>
<blockquote type="cite">Hi,
<br>
<br>
Info !!! not a question !!!
<br>
<br>
the pjsip logger is different:
<br>
<br>
[Sep 15 07:33:27] NOTICE[65267] res_pjsip/pjsip_distributor.c:
Request
<br>
from '"1001" <a class="moz-txt-link-rfc2396E" href="sip:1001@81.20.137.222"><sip:1001@81.20.137.222></a>' failed for
'85.25.197.23:5071'
<br>
(callid: 1bfa1fcfee1e20dbe9bbbcac5d7bdffc) - No matching
endpoint found
<br>
<br>
and here the RegEx for fail2ban to catch this log:
<br>
<br>
|NOTICE.* .*: Request from '.*' failed for
'<HOST>(:[0-9]{1,5})?' (.*) -
<br>
No matching endpoint found
<br>
</blockquote>
<br>
Thanks for sharing. If you use github it would be nice if you
could submit a pull request so that it becomes part of the
Asterisk rules in the next Fail2ban version (0.9.1).
<br>
<br>
<a class="moz-txt-link-freetext" href="https://github.com/fail2ban/fail2ban/pulls">https://github.com/fail2ban/fail2ban/pulls</a>
<br>
<br>
HTH,
<br>
Patrick
<br>
<br>
</blockquote>
<br>
<br>
<div class="moz-signature">-- <br>
<b>Rainer Piper</b>
<br>
Integration engineer
<br>
Koeslinstr. 56
<br>
53123 BONN <br>
GERMANY
<br>
Phone: +49 228 97167161
<br>
P2P: <a class="moz-txt-link-freetext" href="sip:rainer@sip.soho-piper.de:5072">sip:rainer@sip.soho-piper.de:5072</a> (pjsip-test)
<br>
XMPP: <a class="moz-txt-link-abbreviated" href="mailto:rainer@xmpp.soho-piper.de">rainer@xmpp.soho-piper.de</a></div>
</body>
</html>