From 8afacd9262e7467ab221d6e8bc199bfae0e21abf Mon Sep 17 00:00:00 2001 From: agree <37550360+greenbea@users.noreply.github.com> Date: Thu, 8 Sep 2022 11:30:29 -0400 Subject: [PATCH] fail2ban add INVITE to auth challange filter (#401) --- debian/resources/fail2ban/sip-auth-challenge.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/debian/resources/fail2ban/sip-auth-challenge.conf b/debian/resources/fail2ban/sip-auth-challenge.conf index fcd4414..3f3708d 100644 --- a/debian/resources/fail2ban/sip-auth-challenge.conf +++ b/debian/resources/fail2ban/sip-auth-challenge.conf @@ -12,7 +12,7 @@ # (?:::f{4,6}:)?(?P[\w\-.^_]+) # Values: TEXT # -failregex = \[WARNING\] sofia_reg.c:\d+ SIP auth challenge \(REGISTER\) on sofia profile \'.*\' for \[.*\] from ip +failregex = \[WARNING\] sofia_reg.c:\d+ SIP auth challenge \((?:REGISTER|INVITE)\) on sofia profile \'.*\' for \[.*\] from ip # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored.