fusionpbx-install.sh/freebsd/resources/fail2ban/jail.local

[freeswitch]
enabled  = true
port     = 5060:5091
protocol = all
filter   = freeswitch
logpath  = /var/log/freeswitch/freeswitch.log
#logpath  = /usr/local/freeswitch/log/freeswitch.log
maxretry = 5
findtime = 600
banaction = pf
bantime  = 3600
#          sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed

[freeswitch-ip]
enabled  = false
port     = 5060:5091
protocol = all
filter   = freeswitch-ip
logpath  = /var/log/freeswitch/freeswitch.log
#logpath  = /usr/local/freeswitch/log/freeswitch.log
maxretry = 1
findtime = 30
banaction = pf
bantime  = 86400

[sip-auth-challenge-ip]
enabled  = false
port     = 5060:5091
protocol = all
filter   = sip-auth-challenge-ip
logpath  = /var/log/freeswitch/freeswitch.log
#logpath  = /usr/local/freeswitch/log/freeswitch.log
maxretry = 1
findtime = 30
banaction = pf
bantime  = 86400

[sip-auth-challenge]
enabled  = true
port     = 5060:5091
protocol = all
filter   = sip-auth-challenge
logpath  = /var/log/freeswitch/freeswitch.log
#logpath  = /usr/local/freeswitch/log/freeswitch.log
maxretry = 50
findtime = 30
banaction = pf
bantime  = 7200

[freeswitch-404]
enabled  = false
port     = 5060:5091
protocol = all
filter   = freeswitch-404
logpath  = /var/log/freeswitch/freeswitch.log
#logpath  = /usr/local/freeswitch/log/freeswitch.log
maxretry = 3
findtime = 300
banaction = pf
bantime  = 86400

[fusionpbx]
enabled  = true
port     = 80,443
protocol = tcp
filter   = fusionpbx
logpath  = /var/log/auth.log
#          sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed
maxretry = 10
findtime = 600
banaction = pf
bantime  = 3600

[nginx-404]
enabled  = true
port     = 80,443
protocol = tcp
filter   = nginx-404
logpath  = /var/log/nginx/access*.log
findtime = 60
maxretry = 120
banaction = pf
bantime  = 3600

[nginx-dos]
# Based on apache-badbots but a simple IP check (any IP requesting more than
# 300 pages in 60 seconds, or 5p/s average, is suspicious)
# Block for two full days.
enabled  = false
port     = 80,443
protocol = tcp
filter   = nginx-dos
logpath  = /var/log/nginx/access*.log
findtime = 60
maxretry = 300
banaction = pf
bantime  = 86400
Update jail.local 2018-07-12 03:51:08 +02:00			`[freeswitch]`
Add some files 2017-03-25 19:39:05 +01:00			`enabled = true`
Update jail.local 2018-07-12 03:51:08 +02:00			`port = 5060:5091`
Add some files 2017-03-25 19:39:05 +01:00			`protocol = all`
			`filter = freeswitch`
Update jail.local 2018-08-11 23:21:14 +02:00			`logpath = /var/log/freeswitch/freeswitch.log`
			`#logpath = /usr/local/freeswitch/log/freeswitch.log`
Add some files 2017-03-25 19:39:05 +01:00			`maxretry = 5`
			`findtime = 600`
Update jail.local 2017-04-03 06:44:45 +02:00			`banaction = pf`
Update jail.local 2018-07-12 03:51:08 +02:00			`bantime = 3600`
Add some files 2017-03-25 19:39:05 +01:00			`# sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed`

Update jail.local 2018-07-12 03:51:08 +02:00			`[freeswitch-ip]`
Update jail.local 2017-06-07 07:16:25 +02:00			`enabled = false`
Update jail.local 2018-07-12 03:51:08 +02:00			`port = 5060:5091`
Update jail.local 2017-06-07 07:16:25 +02:00			`protocol = all`
			`filter = freeswitch-ip`
Update jail.local 2018-08-11 23:21:14 +02:00			`logpath = /var/log/freeswitch/freeswitch.log`
			`#logpath = /usr/local/freeswitch/log/freeswitch.log`
Update jail.local 2017-06-07 07:16:25 +02:00			`maxretry = 1`
			`findtime = 30`
			`banaction = pf`
			`bantime = 86400`
Add some files 2017-03-25 19:39:05 +01:00
Update jail.local 2018-07-12 03:51:08 +02:00			`[sip-auth-challenge-ip]`
Update jail.local 2017-06-07 07:16:25 +02:00			`enabled = false`
Update jail.local 2018-07-12 03:51:08 +02:00			`port = 5060:5091`
Update jail.local 2017-06-07 07:16:25 +02:00			`protocol = all`
Update jail.local 2018-07-12 03:51:08 +02:00			`filter = sip-auth-challenge-ip`
Update jail.local 2018-08-11 23:21:14 +02:00			`logpath = /var/log/freeswitch/freeswitch.log`
			`#logpath = /usr/local/freeswitch/log/freeswitch.log`
Update jail.local 2017-06-07 07:16:25 +02:00			`maxretry = 1`
			`findtime = 30`
			`banaction = pf`
			`bantime = 86400`
Add some files 2017-03-25 19:39:05 +01:00
Update jail.local 2018-07-12 03:51:08 +02:00			`[sip-auth-challenge]`
Add some files 2017-03-25 19:39:05 +01:00			`enabled = true`
Update jail.local 2018-07-12 03:51:08 +02:00			`port = 5060:5091`
Add some files 2017-03-25 19:39:05 +01:00			`protocol = all`
Update jail.local 2018-07-12 03:51:08 +02:00			`filter = sip-auth-challenge`
Update jail.local 2018-08-11 23:21:14 +02:00			`logpath = /var/log/freeswitch/freeswitch.log`
			`#logpath = /usr/local/freeswitch/log/freeswitch.log`
Add some files 2017-03-25 19:39:05 +01:00			`maxretry = 50`
			`findtime = 30`
Update jail.local 2017-04-03 06:44:45 +02:00			`banaction = pf`
Update jail.local 2018-07-12 03:51:08 +02:00			`bantime = 7200`
Add some files 2017-03-25 19:39:05 +01:00
			`[freeswitch-404]`
Update jail.local 2020-02-20 00:44:27 +01:00			`enabled = false`
Update jail.local 2018-07-12 03:51:08 +02:00			`port = 5060:5091`
Add some files 2017-03-25 19:39:05 +01:00			`protocol = all`
			`filter = freeswitch-404`
Update jail.local 2018-08-11 23:21:14 +02:00			`logpath = /var/log/freeswitch/freeswitch.log`
			`#logpath = /usr/local/freeswitch/log/freeswitch.log`
Add some files 2017-03-25 19:39:05 +01:00			`maxretry = 3`
			`findtime = 300`
Update jail.local 2017-04-03 06:44:45 +02:00			`banaction = pf`
Add some files 2017-03-25 19:39:05 +01:00			`bantime = 86400`

			`[fusionpbx]`
			`enabled = true`
			`port = 80,443`
			`protocol = tcp`
			`filter = fusionpbx`
			`logpath = /var/log/auth.log`
			`# sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed`
			`maxretry = 10`
			`findtime = 600`
Update jail.local 2017-04-03 06:44:45 +02:00			`banaction = pf`
Update jail.local 2018-07-12 03:51:08 +02:00			`bantime = 3600`
Add some files 2017-03-25 19:39:05 +01:00
			`[nginx-404]`
			`enabled = true`
			`port = 80,443`
			`protocol = tcp`
			`filter = nginx-404`
			`logpath = /var/log/nginx/access*.log`
			`findtime = 60`
			`maxretry = 120`
Update jail.local 2018-07-12 03:51:08 +02:00			`banaction = pf`
			`bantime = 3600`
Add some files 2017-03-25 19:39:05 +01:00
			`[nginx-dos]`
			`# Based on apache-badbots but a simple IP check (any IP requesting more than`
Update jail.local 2018-10-11 20:29:54 +02:00			`# 300 pages in 60 seconds, or 5p/s average, is suspicious)`
Add some files 2017-03-25 19:39:05 +01:00			`# Block for two full days.`
Changed Fail2ban settings, updated Readme (#191) * Made fail2ban settings more consistent across OSes, disabled HTTP ratelimit permaban on Debian as auto-refresh behaviour in FusionPBX can trigger it. * Increase nginx-404 ban back to 1 hour 2018-10-11 20:22:35 +02:00			`enabled = false`
Add some files 2017-03-25 19:39:05 +01:00			`port = 80,443`
			`protocol = tcp`
			`filter = nginx-dos`
			`logpath = /var/log/nginx/access*.log`
			`findtime = 60`
Update jail.local 2018-10-11 20:29:54 +02:00			`maxretry = 300`
Update jail.local 2017-04-03 06:44:45 +02:00			`banaction = pf`
Changed Fail2ban settings, updated Readme (#191) * Made fail2ban settings more consistent across OSes, disabled HTTP ratelimit permaban on Debian as auto-refresh behaviour in FusionPBX can trigger it. * Increase nginx-404 ban back to 1 hour 2018-10-11 20:22:35 +02:00			`bantime = 86400`