Hi,

I configured fail2ban several times a while ago, but not with freeswitch...

If you see that rules are missing, just add them and you can use SSH rules as template. I believe it should make a trick.

And I see from you rules, that you are allowing all traffic and this is really bad idea...

You should drop everything and allow only needed traffic.

With kind regards,

Jurijs

On Thu, Sep 8, 2016 at 12:15 AM, Don Hawkins <hawkins@hawkinsegroup.com> wrote:

Thanks for the reply!

Fail2Ban is running:

root@sip:/etc/fail2ban# fail2ban-client start

ERROR  Server already running

I added everything in /etc/fail2ban/jail.conf

[ssh]

enabled  = true

port     = 22

filter   = sshd

logpath  = /var/log/auth.log

maxretry = 6

[freeswitch]

enabled  = true

port     = 5060,5061,5080,5081

filter   = freeswitch

logpath  = /var/log/freeswitch/freeswitch.log

maxretry = 10

I also created /etc/fail2ban/filter.d/freeswitch.conf as shown on https://github.com/fail2ban/fail2ban/blob/master/config/filter.d/freeswitch.conf

root@sip:/etc/fail2ban/filter.d# iptables -S

-P INPUT ACCEPT

-P FORWARD ACCEPT

-P OUTPUT ACCEPT

-N fail2ban-ssh

-A INPUT -p tcp -m multiport --dports 22 -j fail2ban-ssh

As you can see when running iptables -S it shoes the "fail2ban-ssh" rule but nothing about FreeSwitch.

Any help is appreciated.

On Wed, Sep 7, 2016 at 11:01 AM, jungle Boogie <jungleboogie0@gmail.com> wrote:

On 7 September 2016 at 08:33, Don Hawkins <hawkins@hawkinsegroup.com> wrote:
> It keeps saying it's not there, but I did add it, is there something I'm
> missing?

How did you add it? Is fail2ban running? Have you restarted your
computer after setting up fail2ban? If you do iptables -S, do you see
the rules?


--
-------
inum: 883510009027723
sip: jungleboogie@sip2sip.info

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

--

Sincerely,
Don Hawkins
CEO
Hawkins Enterprise Group LLC
http://hawkinsegroup.com
Zello PTT: push2don

P: 469-214-5044

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org