[asterisk-users] fail2ban and pjsip in asterisk 12 and 13

[Rainer Piper]

Hi Patrick,

github done ;-)

what is HTH ???



Am 15.09.2014 um 13:21 schrieb Patrick Laimbock:
> Hi Rainer,
>
> On 15-09-14 09:07, Rainer Piper wrote:
>> Hi,
>>
>> Info !!! not a question !!!
>>
>> the pjsip logger is different:
>>
>> [Sep 15 07:33:27] NOTICE[65267] res_pjsip/pjsip_distributor.c: Request
>> from '"1001" <sip:1001 at 81.20.137.222>' failed for '85.25.197.23:5071'
>> (callid: 1bfa1fcfee1e20dbe9bbbcac5d7bdffc) - No matching endpoint found
>>
>> and here the RegEx for fail2ban to catch this log:
>>
>> |NOTICE.* .*: Request from '.*' failed for '<HOST>(:[0-9]{1,5})?' (.*) -
>> No matching endpoint found
>
> Thanks for sharing. If you use github it would be nice if you could 
> submit a pull request so that it becomes part of the Asterisk rules in 
> the next Fail2ban version (0.9.1).
>
> https://github.com/fail2ban/fail2ban/pulls
>
> HTH,
> Patrick
>


-- 
*Rainer Piper*
Integration engineer
Koeslinstr. 56
53123 BONN
GERMANY
Phone: +49 228 97167161
P2P: sip:rainer at sip.soho-piper.de:5072 (pjsip-test)
XMPP: rainer at xmpp.soho-piper.de
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20140915/d9ed703e/attachment.html>