From 3dfecba51484aa3068c436afde9c412967766c25 Mon Sep 17 00:00:00 2001 From: agree <37550360+greenbea@users.noreply.github.com> Date: Sun, 28 Aug 2022 02:01:32 -0400 Subject: [PATCH] fail2ban add INVITE to auth challange filter --- debian/resources/fail2ban/sip-auth-challenge.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/debian/resources/fail2ban/sip-auth-challenge.conf b/debian/resources/fail2ban/sip-auth-challenge.conf index fcd4414..3f3708d 100644 --- a/debian/resources/fail2ban/sip-auth-challenge.conf +++ b/debian/resources/fail2ban/sip-auth-challenge.conf @@ -12,7 +12,7 @@ # (?:::f{4,6}:)?(?P[\w\-.^_]+) # Values: TEXT # -failregex = \[WARNING\] sofia_reg.c:\d+ SIP auth challenge \(REGISTER\) on sofia profile \'.*\' for \[.*\] from ip +failregex = \[WARNING\] sofia_reg.c:\d+ SIP auth challenge \((?:REGISTER|INVITE)\) on sofia profile \'.*\' for \[.*\] from ip # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored.