[Freeswitch-users] attack, still no ip address logging. Fail2Ban

[Dmitry M]

Brian West wrote:
> Also if you go enable the profile debug you'll get this
> 
>             if (profile->debug) {                                                                                                                               
>                 switch_log_printf(SWITCH_CHANNEL_LOG, SWITCH_LOG_DEBUG, "Send %s for [%s@%s]\n", forbidden ? "forbidden" : "challenge", to_user, to_host);     
>             } 
> 
> for every single register also so you can use fail2ban.
> 
> /b
> 

Unfortunately some logging is missing which don't allow to use Fail2Ban
effectively.

I've added a patch http://jira.freeswitch.org/browse/FS-2943
It allows Fail2ban to monitor all authentication attempts and react
properly.

It'll be great if some of developers check it asap and apply to the main
tree.

Dmitry

> On Nov 21, 2010, at 8:45 AM, covici at ccs.covici.com wrote:
> 
>> I don't mean to bother people, but it was a pain and I couldn't make any
>> calls for some time till I fixed things manually.
> 
> 
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>