Update jail.local

This commit is contained in:
FusionPBX 2017-04-02 22:44:45 -06:00 committed by GitHub
parent 8b98bfb959
commit 8ef506552f
1 changed files with 10 additions and 8 deletions

View File

@ -5,9 +5,9 @@ protocol = all
filter = freeswitch filter = freeswitch
#logpath = /var/log/freeswitch/freeswitch.log #logpath = /var/log/freeswitch/freeswitch.log
logpath = /usr/local/freeswitch/log/freeswitch.log logpath = /usr/local/freeswitch/log/freeswitch.log
action = iptables-multiport[name=freeswitch-udp, port="5060,5061,5080,5081", protocol=udp]
maxretry = 5 maxretry = 5
findtime = 600 findtime = 600
banaction = pf
bantime = 600 bantime = 600
# sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed # sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed
@ -18,9 +18,9 @@ protocol = all
filter = freeswitch filter = freeswitch
#logpath = /var/log/freeswitch/freeswitch.log #logpath = /var/log/freeswitch/freeswitch.log
logpath = /usr/local/freeswitch/log/freeswitch.log logpath = /usr/local/freeswitch/log/freeswitch.log
action = iptables-multiport[name=freeswitch-tcp, port="5060,5061,5080,5081", protocol=tcp]
maxretry = 5 maxretry = 5
findtime = 600 findtime = 600
banaction = pf
bantime = 600 bantime = 600
# sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed # sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed
@ -31,9 +31,9 @@ bantime = 600
#filter = freeswitch-ip #filter = freeswitch-ip
#logpath = /var/log/freeswitch/freeswitch.log #logpath = /var/log/freeswitch/freeswitch.log
logpath = /usr/local/freeswitch/log/freeswitch.log logpath = /usr/local/freeswitch/log/freeswitch.log
#action = iptables-multiport[name=freeswitch-ip-tcp, port="5060,5061,5080,5081", protocol=tcp]
#maxretry = 1 #maxretry = 1
#findtime = 30 #findtime = 30
#banaction = pf
#bantime = 86400 #bantime = 86400
#[freeswitch-ip-udp] #[freeswitch-ip-udp]
@ -43,9 +43,9 @@ logpath = /usr/local/freeswitch/log/freeswitch.log
#filter = freeswitch-ip #filter = freeswitch-ip
#logpath = /var/log/freeswitch/freeswitch.log #logpath = /var/log/freeswitch/freeswitch.log
logpath = /usr/local/freeswitch/log/freeswitch.log logpath = /usr/local/freeswitch/log/freeswitch.log
#action = iptables-multiport[name=freeswitch-ip-udp, port="5060,5061,5080,5081", protocol=udp]
#maxretry = 1 #maxretry = 1
#findtime = 30 #findtime = 30
#banaction = pf
#bantime = 86400 #bantime = 86400
[freeswitch-dos-udp] [freeswitch-dos-udp]
@ -55,9 +55,9 @@ protocol = all
filter = freeswitch-dos filter = freeswitch-dos
#logpath = /var/log/freeswitch/freeswitch.log #logpath = /var/log/freeswitch/freeswitch.log
logpath = /usr/local/freeswitch/log/freeswitch.log logpath = /usr/local/freeswitch/log/freeswitch.log
action = iptables-multiport[name=freeswitch-dos-udp, port="5060,5061,5080,5081", protocol=udp]
maxretry = 50 maxretry = 50
findtime = 30 findtime = 30
banaction = pf
bantime = 6000 bantime = 6000
[freeswitch-dos-tcp] [freeswitch-dos-tcp]
@ -67,9 +67,9 @@ protocol = all
filter = freeswitch-dos filter = freeswitch-dos
#logpath = /var/log/freeswitch/freeswitch.log #logpath = /var/log/freeswitch/freeswitch.log
logpath = /usr/local/freeswitch/log/freeswitch.log logpath = /usr/local/freeswitch/log/freeswitch.log
action = iptables-multiport[name=freeswitch-dos-tcp, port="5060,5061,5080,5081", protocol=tcp]
maxretry = 50 maxretry = 50
findtime = 30 findtime = 30
banaction = pf
bantime = 6000 bantime = 6000
[freeswitch-404] [freeswitch-404]
@ -79,9 +79,9 @@ protocol = all
filter = freeswitch-404 filter = freeswitch-404
#logpath = /var/log/freeswitch/freeswitch.log #logpath = /var/log/freeswitch/freeswitch.log
logpath = /usr/local/freeswitch/log/freeswitch.log logpath = /usr/local/freeswitch/log/freeswitch.log
action = iptables-allports[name=freeswitch-404, protocol=all]
maxretry = 3 maxretry = 3
findtime = 300 findtime = 300
banaction = pf
bantime = 86400 bantime = 86400
[fusionpbx] [fusionpbx]
@ -90,10 +90,10 @@ port = 80,443
protocol = tcp protocol = tcp
filter = fusionpbx filter = fusionpbx
logpath = /var/log/auth.log logpath = /var/log/auth.log
action = iptables-multiport[name=fusionpbx, port="http,https", protocol=tcp]
# sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed # sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed
maxretry = 10 maxretry = 10
findtime = 600 findtime = 600
banaction = pf
bantime = 600 bantime = 600
[nginx-404] [nginx-404]
@ -102,6 +102,7 @@ port = 80,443
protocol = tcp protocol = tcp
filter = nginx-404 filter = nginx-404
logpath = /var/log/nginx/access*.log logpath = /var/log/nginx/access*.log
banaction = pf
bantime = 600 bantime = 600
findtime = 60 findtime = 60
maxretry = 120 maxretry = 120
@ -116,5 +117,6 @@ protocol = tcp
filter = nginx-dos filter = nginx-dos
logpath = /var/log/nginx/access*.log logpath = /var/log/nginx/access*.log
findtime = 60 findtime = 60
banaction = pf
bantime = 172800 bantime = 172800
maxretry = 240 maxretry = 240