IP going automaticlly to an sip-auth-ip chain
- Thread starter Roiboi
- Start date
- Status
ip address as a domain is a big security risk and overall is not allowed. Create a domain name and try again. newcustomer.roiboi.com where roiboi.com is the URL of the server with active ssl certificates installed, and newcustomer is the domain name of the customer (or your test domain).
You could create a Customers ACL with default of deny and add the cidr notation ip address of the customer to this ACL. Make sure to reload ACLs on sip status page after making any acl changes. But do not use IP address based url and domains. Always use a fully qualified domain name.
You will also want to delete the customer's ip addresses (or your ip addresses in test case) from the event guard page. Also check ip tables and remove any incorrect entries that have been blocked there if removing from event guard application did not remove the ip tables entries. You could expect to still have ip tables entries if fail2ban is adding the entries to ip tables.
I would also check the fail2ban jail configuration for the findtime, bantime, maxretries in the sip-auth-ip chain jail. This jail will be disabled in a newer installation in favour of event guard controlling the banning for that jail.
You could create a Customers ACL with default of deny and add the cidr notation ip address of the customer to this ACL. Make sure to reload ACLs on sip status page after making any acl changes. But do not use IP address based url and domains. Always use a fully qualified domain name.
You will also want to delete the customer's ip addresses (or your ip addresses in test case) from the event guard page. Also check ip tables and remove any incorrect entries that have been blocked there if removing from event guard application did not remove the ip tables entries. You could expect to still have ip tables entries if fail2ban is adding the entries to ip tables.
I would also check the fail2ban jail configuration for the findtime, bantime, maxretries in the sip-auth-ip chain jail. This jail will be disabled in a newer installation in favour of event guard controlling the banning for that jail.
- Status