[Freeswitch-users] attack, still no ip address logging

[covici at ccs.covici.com]

I have fail2ban installed and the only regexp has to do with invalid
passwords.  The message I was getting did not have an ip address so
fail2ban would not have worked at all.  I thought I remembered a
discussion on one of the conferences that logging would be improved --
is this wrong?

Brian West <brian at freeswitch.org> wrote:

> Did you even bother to look on the wiki?
> 
> http://wiki.freeswitch.org/wiki/Fail2ban
> 
> /b
> 
> On Nov 21, 2010, at 8:45 AM, covici at ccs.covici.com wrote:
> 
> > Hi.  I was attacked by that famous Friendly scanner, but in the fs logs
> > it did not give the ip address -- I had to put the siptrace on to get
> > the address and dropped all packets.  The strange thing was even after
> > dropping the ip address using shorewall, it kept going for a while -- I
> > restarted fs and that seemed to fix things, I am not sure if this was a
> > coincidence or not.
> > 
> > I would urge the devs to put the ip address in the request registration
> > or somewhere other than the bad password so fail2ban can be configured
> > to drop the ip address.
> > 
> > I don't mean to bother people, but it was a pain and I couldn't make any
> > calls for some time till I fixed things manually.
> > 
> > -- 
> > Your life is like a penny.  You're going to lose it.  The question is:
> > How do
> > you spend it?
> > 
> >         John Covici
> >         covici at ccs.covici.com
> > 
> > _______________________________________________
> > FreeSWITCH-users mailing list
> > FreeSWITCH-users at lists.freeswitch.org
> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> > http://www.freeswitch.org
> 
> 
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org

-- 
Your life is like a penny.  You're going to lose it.  The question is:
How do
you spend it?

         John Covici
         covici at ccs.covici.com