github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

MRG: Merge branch 'asterisk-common-jail'

pull/397/head
Daniel Black 2013-10-14 22:29:56 +11:00
parent 8421007f32 6ef33981e3
commit 123ad1cc9c
2 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog
View File

@ -71,6 +71,9 @@ ver. 0.8.11 (2013/XX/XXX) - loves-unittests
François Boulogne and Frédéric François Boulogne and Frédéric
* filter.d/lighttpd - auth regexs for lighttpd-1.4.31 * filter.d/lighttpd - auth regexs for lighttpd-1.4.31
Daniel Black Daniel Black
* jail.conf now has asterisk jail - no need for asterisk-tcp and
asterisk-udp. Users should replace existing jails with asterisk to
reduce duplicate parsing of the asterisk log file.
* filter.d/suhosin - regex anchor at start * filter.d/suhosin - regex anchor at start
* filter.d/{asterisk,assp,dovecot,proftpd}.conf -- regex hardening * filter.d/{asterisk,assp,dovecot,proftpd}.conf -- regex hardening
and extra failure examples in sample logs and extra failure examples in sample logs

13
config/jail.conf
View File

@ -342,8 +342,17 @@ action = iptables-multiport[name=Named, port="domain,953", protocol=tcp]
logpath = /var/log/named/security.log logpath = /var/log/named/security.log
ignoreip = 168.192.0.1 ignoreip = 168.192.0.1
# Multiple jails, 1 per protocol, are necessary ATM: [asterisk]
# see https://github.com/fail2ban/fail2ban/issues/37
enabled = false
filter = asterisk
action = iptables-multiport[name=asterisk-tcp, port="5060,5061", protocol=tcp]
iptables-multiport[name=asterisk-udp, port="5060,5061", protocol=udp]
sendmail-whois[name=Asterisk, dest=you@example.com, sender=fail2ban@example.com]
logpath = /var/log/asterisk/messages
maxretry = 10
# Historical support (before https://github.com/fail2ban/fail2ban/issues/37 was fixed )
[asterisk-tcp] [asterisk-tcp]
enabled = false enabled = false