When you use kamailio then close sip interface port via iptables rules like "block all except kamailio IP where destination port 5060"
fail2ban is not required in your case.
Failed registration and failed INVITE authorization can be logged at kamailio configuration.
Are you using apply-proxy-acl?If not see if that helps, otherwise perhaps file a Jira to request it.Regards,Steve_________________________________________________________________________On 29 November 2016 at 08:37, Roman Dissauer <roman@dissauer.net> wrote:Hi Alex,
I already get the original source IP into FS but I need to log unsuccessful auth attempts with original IP to block them with fail2ban.
The default log message „SIP auth challenge…“ does only log the Proxy IP
Roman
> Am 29.11.2016 um 09:28 schrieb Alex Balashov <abalashov@evaristesys.com>:
>
> Hi Roman,
>
> It sounds like you should just attach the original source IP as a custom SIP header on the Kamailio side:
>
> append_hf("X-Orig-SRC-IP: $si\r\n");
>
> You can then recover that in FreeSWITCH with ${sip_h_X-Orig-SRC-IP}.
>
> -- Alex
>
> --
> Alex Balashov | Principal | Evariste Systems LLC
>
> Tel: +1-706-510-6800 (direct) / +1-800-250-5920 (toll-free)
> Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting@freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users@lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org