fail2ban

  1. B

    Best Practices for Fail2Ban and Event Guard Configuration in FusionPBX?

    For the last few weeks, I’ve been experiencing intermittent call issues on one of my smaller FusionPBX servers. After investigating, I discovered that my Fail2Ban setup had been disabled. This allowed repeated scans of my server from different IPs. At some point during the scanning, my GUI would...
  2. A

    Fail2Ban + Dynamic IP 4g + Softphone Groundwire

    Hi there, In a scenario with FusionPBX 5.3, where there are users with Groundwire softphone, but they are being blocked by Fail2Ban when they are off the network, and using dynamic 4G IPs. Maybe a proxy would solve the problem? If so, how could I do this? Or adjust Fail2Ban so as not to block...
  3. F

    SOLVED Fail2ban not banning abuseive IP

    Hi This weekend I've updated our server to Debian 11 (Bulleye) so I think it has something to do with this but it ofc can be a coincidence. We're getting spammed with calls (see screenshot bellow) but it's not getting blocked by fail2ban. fail2ban-client status FusionPBX version: 5.0.1...
  4. F

    SOLVED Can't block IP bruteforcing my PBX

    Hello! Someone is trying to find a correct extension number to (attempt to) register to my PBX. Like this: 1 INVITE 3500@<mypbx-ext-Ip-num> 90048323395006@<mypbx-Ip-gateway> 37.49.229.183:19101 <mypbx-int-ip-num>:5060 CALL SETUP I tried to have Fail2Ban block it...
  5. InTeleSync

    FusionPBX Fail2Ban GUI

    This may be the dumb question of the century, but here goes.... Testing out FusionPBX, and notice that a fresh install comes with Fail2Ban. Nice. Is there not some sort of GUI module for managing that firewall in FusionPBX? I know all about this...
  6. H

    SOLVED fail2ban - freeswitch.conf not catching "SIP auth challenge"

    Hi all, Unless I'm misunderstanding something, the default freeswitch.conf file (fail2ban/filter.d/freeswitch.conf) does not appear to be capturing "SIP auth challenge" log entries, only "SIP auth failure". The differences can be seen here in bold: default freeswitch.conf, via fail2ban's...