Hi Jungle,

Now I understand what issue you have. At lest I can recommend to put "string" rules on top of your rules.

Not sure what is wrong, but if you can provide full rules + iptables -L -n -v I can take a look.

With kind regards,


Jurijs

On Wed, Aug 3, 2016 at 6:41 PM, jungle Boogie <jungleboogie0@gmail.com> wrote:
On 3 August 2016 at 01:12, Mirko Brankovic <mirkobrankovic@gmail.com> wrote:
> Hi,
> I guess you can set this to true on your profile:
> https://wiki.freeswitch.org/wiki/Sofia.conf.xml#log-auth-failures
>
> and than fail2ban can pick it up from the log.
>

yes, that work's if the registration attempts are actually being
picked up by freeswitch. I only see a register request and no reply
from my side whatsoever.

The IP address has been added to my iptables but the entries are still
occurring.  As seen in the original email, I have iptables to block
based on the useragent but I still see the scans.



> Mirko




--
-------
inum: 883510009027723
sip: jungleboogie@sip2sip.info

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org