dbxe
/
fusionpbx-install.sh
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Make ban action more reflective of the attack type

This commit is contained in:
DigiDaz 2016-05-28 23:52:29 +01:00
parent 249b9d74a6
commit 71fae793bb
1 changed files with 42 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

50
debian/resources/fail2ban/jail.local vendored
View File

@ -1,33 +1,67 @@
[freeswitch] [freeswitch-udp]
enabled = true enabled = true
port = 5060,5061,5080,5081 port = 5060,5061,5080,5081
protocol = all protocol = all
filter = freeswitch filter = freeswitch
logpath = /var/log/freeswitch/freeswitch.log logpath = /var/log/freeswitch/freeswitch.log
action = iptables-allports[name=freeswitch, protocol=all] action = iptables-multiport[name=freeswitch-udp, port="5060,5061,5080,5081", protocol=udp]
maxretry = 5 maxretry = 5
findtime = 600 findtime = 600
bantime = 600 bantime = 600
# sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed # sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed
[freeswitch-ip] [freeswitch-tcp]
enabled = true enabled = true
port = 5060,5061,5080,5081
protocol = all
filter = freeswitch
logpath = /var/log/freeswitch/freeswitch.log
action = iptables-multiport[name=freeswitch-tcp, port="5060,5061,5080,5081", protocol=tcp]
maxretry = 5
findtime = 600
bantime = 600
# sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed
[freeswitch-ip-tcp]
enabled = true
port = 5060,5061,5080,5081 port = 5060,5061,5080,5081
protocol = all protocol = all
filter = freeswitch-ip filter = freeswitch-ip
logpath = /var/log/freeswitch/freeswitch.log logpath = /var/log/freeswitch/freeswitch.log
action = iptables-allports[name=freeswitch-ip, protocol=all] action = iptables-multiport[name=freeswitch-ip-tcp, port="5060,5061,5080,5081", protocol=tcp]
maxretry = 1 maxretry = 1
findtime = 30 findtime = 30
bantime = 86400 bantime = 86400
[freeswitch-dos] [freeswitch-ip-udp]
enabled = true
port = 5060,5061,5080,5081
protocol = all
filter = freeswitch-ip
logpath = /var/log/freeswitch/freeswitch.log
action = iptables-multiport[name=freeswitch-ip-udp, port="5060,5061,5080,5081", protocol=udp]
maxretry = 1
findtime = 30
bantime = 86400
[freeswitch-dos-udp]
enabled = true enabled = true
port = 5060,5061,5080,5081 port = 5060,5061,5080,5081
protocol = all protocol = all
filter = freeswitch-dos filter = freeswitch-dos
logpath = /var/log/freeswitch/freeswitch.log logpath = /var/log/freeswitch/freeswitch.log
action = iptables-allports[name=freeswitch-dos, protocol=all] action = iptables-multiport[name=freeswitch-dos-udp, port="5060,5061,5080,5081", protocol=udp]
maxretry = 50
findtime = 30
bantime = 6000
[freeswitch-dos-tcp]
enabled = true
port = 5060,5061,5080,5081
protocol = all
filter = freeswitch-dos
logpath = /var/log/freeswitch/freeswitch.log
action = iptables-multiport[name=freeswitch-dos-tcp, port="5060,5061,5080,5081", protocol=tcp]
maxretry = 50 maxretry = 50
findtime = 30 findtime = 30
bantime = 6000 bantime = 6000
@ -42,7 +76,7 @@ action = iptables-multiport[name=fusionpbx, port="http,https", protocol=tcp]
# sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed # sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed
maxretry = 10 maxretry = 10
findtime = 600 findtime = 600
bantime = 600 bantime = 600
[nginx-404] [nginx-404]
enabled = true enabled = true