[Freeswitch-users] CDR for fail2ban

[Avi Marcus]

Ah. Well, with xml_cdr or json_cdr posting to a script, you can store the
relevant information in a way for fail2ban to use. However, I think that
would be a pretty hard pattern to come up to know there's fraud occurring
on an account.

There's a service/product from http://www.humbuglabs.org/ that analyzes
CDRs and uses some metric to determine if something is fraudulent, that
might be helpful for you. I haven't used it.

-Avi



On Sun, Sep 30, 2012 at 3:46 AM, Balamurugan Mahendran <b2m at a-cti.com>wrote:

> Thanks for the link, Also I wanted to look for outbound numbers and
> duration to perform some action.
>
> Like blocking trail users if they try to use international minutes like
> more 30 mins or so.
>
> Thanks,
> Bala
>
>
> On Sat, Sep 29, 2012 at 10:05 PM, Avi Marcus <avi at avimarcus.net> wrote:
>
>> Yes, there is an unmerged mod_fail2ban you can use, which I just doc'ed
>> for you.
>> Please update the wiki with more information as you test it.
>>
>> Once this has been tested in production, it would be great to merge it
>> into stable...
>>
>> http://wiki.freeswitch.org/wiki/Mod_fail2ban
>>
>> -Avi Marcus
>> BestFone
>>
>> On Sat, Sep 29, 2012 at 1:28 PM, Balamurugan Mahendran <b2m at a-cti.com>wrote:
>>
>>> Is it possible to create separate cdr log file to setup fail2ban.
>>>
>>> Thanks,
>>> Bala
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> 
>>> 
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://wiki.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20120930/6bd471e0/attachment-0001.html