diff --git a/debian/resources/fail2ban/jail.local b/debian/resources/fail2ban/jail.local index 826f943..a4e821f 100755 --- a/debian/resources/fail2ban/jail.local +++ b/debian/resources/fail2ban/jail.local @@ -15,7 +15,7 @@ port = 5060:5091 protocol = all filter = freeswitch logpath = /var/log/freeswitch/freeswitch.log -action = iptables-multiport[name=freeswitch, port="5060:5090", protocol=all] +action = iptables-allports[name=freeswitch, protocol=all] maxretry = 5 findtime = 600 bantime = 3600 @@ -27,7 +27,7 @@ port = 5060:5091 protocol = all filter = freeswitch-ip logpath = /var/log/freeswitch/freeswitch.log -action = iptables-multiport[name=freeswitch-ip, port="5060:5090", protocol=all] +action = iptables-allports[name=freeswitch-ip, protocol=all] maxretry = 1 findtime = 30 bantime = 86400 @@ -38,7 +38,7 @@ port = 5060:5091 protocol = all filter = auth-challenge-ip logpath = /var/log/freeswitch/freeswitch.log -action = iptables-multiport[name=auth-challenge-ip, port="5060:5090", protocol=all] +action = iptables-allports[name=auth-challenge-ip, protocol=all] maxretry = 1 findtime = 30 bantime = 86400 @@ -49,7 +49,7 @@ port = 5060:5091 protocol = all filter = sip-auth-challenge logpath = /var/log/freeswitch/freeswitch.log -action = iptables-multiport[name=sip-auth-challenge, port="5060:5090", protocol=all] +action = iptables-allports[name=sip-auth-challenge, protocol=all] maxretry = 50 findtime = 30 bantime = 7200 @@ -60,7 +60,7 @@ port = 5060:5091 protocol = all filter = sip-auth-failure logpath = /var/log/freeswitch/freeswitch.log -action = iptables-multiport[name=sip-auth-failure, port="5060:5090", protocol=all] +action = iptables-allports[name=sip-auth-failure, protocol=all] maxretry = 3 findtime = 30 bantime = 7200 @@ -82,7 +82,7 @@ port = 80,443 protocol = tcp filter = fusionpbx logpath = /var/log/auth.log -action = iptables-multiport[name=fusionpbx, port="http,https", protocol=tcp] +action = iptables-allports[name=fusionpbx, protocol=all] # sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed maxretry = 10 findtime = 600 @@ -94,7 +94,7 @@ port = 80,443 protocol = tcp filter = fusionpbx-mac logpath = /var/log/syslog -action = iptables-multiport[name=fusionpbx-mac, port="http,https", protocol=tcp] +action = iptables-allports[name=fusionpbx-mac, protocol=all] # sendmail-whois[name=fusionpbx-mac, dest=root, sender=fail2ban@example.org] #no smtp server installed maxretry = 5 findtime = 300 @@ -106,6 +106,7 @@ port = 80,443 protocol = tcp filter = nginx-404 logpath = /var/log/nginx/access*.log +action = iptables-allports[name=nginx-404, protocol=all] bantime = 3600 findtime = 60 maxretry = 120 @@ -118,6 +119,7 @@ port = 80,443 protocol = tcp filter = nginx-dos logpath = /var/log/nginx/access*.log +action = iptables-allports[name=nginx-dos, protocol=all] findtime = 60 bantime = -1 maxretry = 240