<div dir="ltr"><div><div><div>Hi Jungle,<br><br></div>Now I understand what issue you have. At lest I can recommend to put "string" rules on top of your rules.<br><br></div>Not sure what is wrong, but if you can provide full rules + iptables -L -n -v I can take a look.<br><br></div>With kind regards,<br><div><div><br></div></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">Jurijs<br></div></div></div>
<br><div class="gmail_quote">On Wed, Aug 3, 2016 at 6:41 PM, jungle Boogie <span dir="ltr"><<a href="mailto:jungleboogie0@gmail.com" target="_blank">jungleboogie0@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 3 August 2016 at 01:12, Mirko Brankovic <<a href="mailto:mirkobrankovic@gmail.com">mirkobrankovic@gmail.com</a>> wrote:<br>
> Hi,<br>
> I guess you can set this to true on your profile:<br>
> <a href="https://wiki.freeswitch.org/wiki/Sofia.conf.xml#log-auth-failures" rel="noreferrer" target="_blank">https://wiki.freeswitch.org/wiki/Sofia.conf.xml#log-auth-failures</a><br>
><br>
> and than fail2ban can pick it up from the log.<br>
><br>
<br>
</span>yes, that work's if the registration attempts are actually being<br>
picked up by freeswitch. I only see a register request and no reply<br>
from my side whatsoever.<br>
<br>
The IP address has been added to my iptables but the entries are still<br>
occurring. As seen in the original email, I have iptables to block<br>
based on the useragent but I still see the scans.<br>
<br>
<br>
<br>
> Mirko<br>
<span class="HOEnZb"><font color="#888888"><br>
<br>
<br>
<br>
--<br>
-------<br>
inum: 883510009027723<br>
sip: <a href="mailto:jungleboogie@sip2sip.info">jungleboogie@sip2sip.info</a><br>
</font></span><div class="HOEnZb"><div class="h5"><br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
</div></div></blockquote></div><br></div>