Hello,<br><br>In the case above, challenge is included in the regexp (challenge|failure)<br><br>011-02-07 12:23:28.490029 [WARNING] sofia_reg.c:1247 SIP auth challenge<br>(REGISTER) on sofia profile 'internal' for [1002 at 10.10.16.161] from ip<br>10.10.16.161<br><br>If, as is suggested in the issue report, what is being sought is to prevent flooding, i guess there's a maxretry param somewhere?<br><br>Thanks!<br><br>David<br>(davidcsi)<br><div class="gmail_quote"><div dir="ltr">On Tue, Sep 13, 2016 at 2:00 AM David Witham <<a href="mailto:david.witham@netsip.com.au">david.witham@netsip.com.au</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">We don't include the challenge in the regex, just the failure, so we only ban on multiple failures. The challenge is normal registration behaviour. For genuine customers the challenges won't fail and they won't get banned.</div><div class="gmail_extra"></div><div class="gmail_extra"><br><div class="gmail_quote">On 13 September 2016 at 02:33, jungle Boogie <span dir="ltr"><<a href="mailto:jungleboogie0@gmail.com" target="_blank">jungleboogie0@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>On 12 September 2016 at 09:09, Don Hawkins <<a href="mailto:hawkins@hawkinsegroup.com" target="_blank">hawkins@hawkinsegroup.com</a>> wrote:<br>
> I'm actually starting to notice a problem with fail2ban, maybe someone can<br>
> help me.<br>
<br>
</span>Not really a problem as fail2ban is working as expected--just not in a<br>
very friendly way. ;)<br>
<br>
I've seen this happen and usually I delete the line from fail2ban, but<br>
I don't know how folks manage it for customers.<br>
<br>
A few weeks back, I came across this issue on fail2ban's github page:<br>
<a href="https://github.com/fail2ban/fail2ban/issues/1500" rel="noreferrer" target="_blank">https://github.com/fail2ban/fail2ban/issues/1500</a><br>
<br>
That pretty much explains your problem.<br>
<div><div><br>
<br>
--<br>
-------<br>
inum: 883510009027723<br>
sip: <a href="mailto:jungleboogie@sip2sip.info" target="_blank">jungleboogie@sip2sip.info</a><br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div></div><div class="gmail_extra">-- <br><div data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div style="color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;margin-top:0px;margin-bottom:0px"><font face="Arial,sans-serif" size="4" color="#0088CF"><span style="font-size:13.5pt">David Witham</span></font></div><div style="color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px"><font face="Calibri"><font face="Tahoma" size="2"><span style="font-size:10pt"><div style="margin:0px"><font size="1"><span style="font-size:13px"><font face="Tahoma,Arial,Helvetica" size="2" color="#CCCCCC"><span style="font-size:10pt">Senior Voice/Systems Engineer</span></font><font face="Tahoma,Arial,Helvetica" size="2" color="#CCCCCC"><span style="font-size:10pt"><br></span></font></span></font></div><div style="margin:0px"><font face="Calibri,sans-serif" size="2"><span style="font-size:15px"><br></span></font></div><div style="margin:0px"><font face="Tahoma,Arial,Helvetica" size="3"><font face="Helvetica,sans-serif" size="2"><span style="font-size:10pt">Netsip pty ltd – An Over the Wire Company</span></font><font face="Helvetica,sans-serif" size="2"><span style="font-size:10pt"><br>Level 1, 24 Little Edward St, Spring Hill QLD 4000</span></font></font></div><div style="margin:0px"><font face="Tahoma,Arial,Helvetica" size="3"><font face="Helvetica,sans-serif" size="2"><span style="font-size:10pt"><br></span></font></font></div><div style="margin:0px"><font face="Tahoma,Arial,Helvetica" size="3"><font face="Helvetica,sans-serif" size="2" color="#0088CF"><span style="font-size:10pt">t </span></font><font face="Helvetica,sans-serif" size="2"><span style="font-size:10pt">+61 1300 638 747</span></font></font></div><font face="Helvetica,sans-serif" color="#0088CF">e <a href="mailto:david.witham@netsip.com.au" target="_blank">david.witham@netsip.com.au</a> </font><a href="https://macowa.netsip.com.au/owa/redir.aspx?C=95eec4d12cf0400796940d56513ed0f7&URL=http%3a%2f%2fwww.netsip.com.au" target="_blank"><font face="Helvetica,sans-serif">www.netsip.com.au</font></a><a href="https://macowa.netsip.com.au/owa/redir.aspx?C=95eec4d12cf0400796940d56513ed0f7&URL=http%3a%2f%2fwww.netsip.com.au" target="_blank"><font face="Helvetica,sans-serif"> </font></a><font face="Helvetica,sans-serif"><br></font></span></font></font></div></div></div></div></div>
</div>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a></blockquote></div>