[Freeswitch-users] Banning IP address that attempt registration via IP

[David Villasmil]

Fail2ban should work perfectly for that. What problems did you run into?
Lots and lots of people use fail2ban.

On Mon, 27 Jul 2020 at 05:51, Sergey Safarov <s.safarov at gmail.com> wrote:

> You can use Kamailio proxy as the frontend of FreeSwitch.
> And then block registration and INVITE messages with IP address in "From",
> "To" and "RURI" headers.
>
> Sergey
>
> On Mon, Jul 27, 2020 at 7:17 AM Don Hawkins <hawkins at hawkinsegroup.com>
> wrote:
>
>> Hey everyone!
>>
>> So I have quite a few "security" features installed on the server,
>> including custom IP banning methods using IP Tables, (fail2ban caused too
>> many issues).
>>
>> All endpoints on our system register via a domain, I'm looking for
>> suggestions on how to block IP addresses that attempt to register with the
>> IP address only.
>>
>> In other words, every time the warning below is received I'd like to ban
>> that particular IP or at least add it to a list somewhere.
>>
>> WARNING: "You must define a domain called 'XXX.XXX.XX.XXX' in your
>> directory and add a user with the id"
>>
>> I'm thinking of a custom script that scans the logs (which logs?)
>>
>> Any advice is appreciated.
>>
>> Thanks!
>>
>> _________________________________________________________________________
>>
>> The FreeSWITCH project is sponsored by SignalWire https://signalwire.com
>> Enhance your FreeSWITCH install with disruptive priced SMS and PSTN
>> services.
>> Build your next product on our scalable cloud platform.
>>
>> Join our online community to chat in real time
>> https://signalwire.community
>>
>> Professional FreeSWITCH Services
>> sales at freeswitch.com
>> https://freeswitch.com
>>
>> Official FreeSWITCH Sites
>> https://freeswitch.com/oss
>> https://freeswitch.org/confluence
>> https://cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> https://freeswitch.com
>
> _________________________________________________________________________
>
> The FreeSWITCH project is sponsored by SignalWire https://signalwire.com
> Enhance your FreeSWITCH install with disruptive priced SMS and PSTN
> services.
> Build your next product on our scalable cloud platform.
>
> Join our online community to chat in real time
> https://signalwire.community
>
> Professional FreeSWITCH Services
> sales at freeswitch.com
> https://freeswitch.com
>
> Official FreeSWITCH Sites
> https://freeswitch.com/oss
> https://freeswitch.org/confluence
> https://cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> https://freeswitch.com

-- 
Regards,

David Villasmil
email: david.villasmil.work at gmail.com
phone: +34669448337
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20200727/26aaf921/attachment.html>