Update jail.local
This commit is contained in:
parent
8b98bfb959
commit
8ef506552f
|
|
@ -5,9 +5,9 @@ protocol = all
|
||||||
filter = freeswitch
|
filter = freeswitch
|
||||||
#logpath = /var/log/freeswitch/freeswitch.log
|
#logpath = /var/log/freeswitch/freeswitch.log
|
||||||
logpath = /usr/local/freeswitch/log/freeswitch.log
|
logpath = /usr/local/freeswitch/log/freeswitch.log
|
||||||
action = iptables-multiport[name=freeswitch-udp, port="5060,5061,5080,5081", protocol=udp]
|
|
||||||
maxretry = 5
|
maxretry = 5
|
||||||
findtime = 600
|
findtime = 600
|
||||||
|
banaction = pf
|
||||||
bantime = 600
|
bantime = 600
|
||||||
# sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed
|
# sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed
|
||||||
|
|
||||||
|
|
@ -18,9 +18,9 @@ protocol = all
|
||||||
filter = freeswitch
|
filter = freeswitch
|
||||||
#logpath = /var/log/freeswitch/freeswitch.log
|
#logpath = /var/log/freeswitch/freeswitch.log
|
||||||
logpath = /usr/local/freeswitch/log/freeswitch.log
|
logpath = /usr/local/freeswitch/log/freeswitch.log
|
||||||
action = iptables-multiport[name=freeswitch-tcp, port="5060,5061,5080,5081", protocol=tcp]
|
|
||||||
maxretry = 5
|
maxretry = 5
|
||||||
findtime = 600
|
findtime = 600
|
||||||
|
banaction = pf
|
||||||
bantime = 600
|
bantime = 600
|
||||||
# sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed
|
# sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed
|
||||||
|
|
||||||
|
|
@ -31,9 +31,9 @@ bantime = 600
|
||||||
#filter = freeswitch-ip
|
#filter = freeswitch-ip
|
||||||
#logpath = /var/log/freeswitch/freeswitch.log
|
#logpath = /var/log/freeswitch/freeswitch.log
|
||||||
logpath = /usr/local/freeswitch/log/freeswitch.log
|
logpath = /usr/local/freeswitch/log/freeswitch.log
|
||||||
#action = iptables-multiport[name=freeswitch-ip-tcp, port="5060,5061,5080,5081", protocol=tcp]
|
|
||||||
#maxretry = 1
|
#maxretry = 1
|
||||||
#findtime = 30
|
#findtime = 30
|
||||||
|
#banaction = pf
|
||||||
#bantime = 86400
|
#bantime = 86400
|
||||||
|
|
||||||
#[freeswitch-ip-udp]
|
#[freeswitch-ip-udp]
|
||||||
|
|
@ -43,9 +43,9 @@ logpath = /usr/local/freeswitch/log/freeswitch.log
|
||||||
#filter = freeswitch-ip
|
#filter = freeswitch-ip
|
||||||
#logpath = /var/log/freeswitch/freeswitch.log
|
#logpath = /var/log/freeswitch/freeswitch.log
|
||||||
logpath = /usr/local/freeswitch/log/freeswitch.log
|
logpath = /usr/local/freeswitch/log/freeswitch.log
|
||||||
#action = iptables-multiport[name=freeswitch-ip-udp, port="5060,5061,5080,5081", protocol=udp]
|
|
||||||
#maxretry = 1
|
#maxretry = 1
|
||||||
#findtime = 30
|
#findtime = 30
|
||||||
|
#banaction = pf
|
||||||
#bantime = 86400
|
#bantime = 86400
|
||||||
|
|
||||||
[freeswitch-dos-udp]
|
[freeswitch-dos-udp]
|
||||||
|
|
@ -55,9 +55,9 @@ protocol = all
|
||||||
filter = freeswitch-dos
|
filter = freeswitch-dos
|
||||||
#logpath = /var/log/freeswitch/freeswitch.log
|
#logpath = /var/log/freeswitch/freeswitch.log
|
||||||
logpath = /usr/local/freeswitch/log/freeswitch.log
|
logpath = /usr/local/freeswitch/log/freeswitch.log
|
||||||
action = iptables-multiport[name=freeswitch-dos-udp, port="5060,5061,5080,5081", protocol=udp]
|
|
||||||
maxretry = 50
|
maxretry = 50
|
||||||
findtime = 30
|
findtime = 30
|
||||||
|
banaction = pf
|
||||||
bantime = 6000
|
bantime = 6000
|
||||||
|
|
||||||
[freeswitch-dos-tcp]
|
[freeswitch-dos-tcp]
|
||||||
|
|
@ -67,9 +67,9 @@ protocol = all
|
||||||
filter = freeswitch-dos
|
filter = freeswitch-dos
|
||||||
#logpath = /var/log/freeswitch/freeswitch.log
|
#logpath = /var/log/freeswitch/freeswitch.log
|
||||||
logpath = /usr/local/freeswitch/log/freeswitch.log
|
logpath = /usr/local/freeswitch/log/freeswitch.log
|
||||||
action = iptables-multiport[name=freeswitch-dos-tcp, port="5060,5061,5080,5081", protocol=tcp]
|
|
||||||
maxretry = 50
|
maxretry = 50
|
||||||
findtime = 30
|
findtime = 30
|
||||||
|
banaction = pf
|
||||||
bantime = 6000
|
bantime = 6000
|
||||||
|
|
||||||
[freeswitch-404]
|
[freeswitch-404]
|
||||||
|
|
@ -79,9 +79,9 @@ protocol = all
|
||||||
filter = freeswitch-404
|
filter = freeswitch-404
|
||||||
#logpath = /var/log/freeswitch/freeswitch.log
|
#logpath = /var/log/freeswitch/freeswitch.log
|
||||||
logpath = /usr/local/freeswitch/log/freeswitch.log
|
logpath = /usr/local/freeswitch/log/freeswitch.log
|
||||||
action = iptables-allports[name=freeswitch-404, protocol=all]
|
|
||||||
maxretry = 3
|
maxretry = 3
|
||||||
findtime = 300
|
findtime = 300
|
||||||
|
banaction = pf
|
||||||
bantime = 86400
|
bantime = 86400
|
||||||
|
|
||||||
[fusionpbx]
|
[fusionpbx]
|
||||||
|
|
@ -90,10 +90,10 @@ port = 80,443
|
||||||
protocol = tcp
|
protocol = tcp
|
||||||
filter = fusionpbx
|
filter = fusionpbx
|
||||||
logpath = /var/log/auth.log
|
logpath = /var/log/auth.log
|
||||||
action = iptables-multiport[name=fusionpbx, port="http,https", protocol=tcp]
|
|
||||||
# sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed
|
# sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed
|
||||||
maxretry = 10
|
maxretry = 10
|
||||||
findtime = 600
|
findtime = 600
|
||||||
|
banaction = pf
|
||||||
bantime = 600
|
bantime = 600
|
||||||
|
|
||||||
[nginx-404]
|
[nginx-404]
|
||||||
|
|
@ -102,6 +102,7 @@ port = 80,443
|
||||||
protocol = tcp
|
protocol = tcp
|
||||||
filter = nginx-404
|
filter = nginx-404
|
||||||
logpath = /var/log/nginx/access*.log
|
logpath = /var/log/nginx/access*.log
|
||||||
|
banaction = pf
|
||||||
bantime = 600
|
bantime = 600
|
||||||
findtime = 60
|
findtime = 60
|
||||||
maxretry = 120
|
maxretry = 120
|
||||||
|
|
@ -116,5 +117,6 @@ protocol = tcp
|
||||||
filter = nginx-dos
|
filter = nginx-dos
|
||||||
logpath = /var/log/nginx/access*.log
|
logpath = /var/log/nginx/access*.log
|
||||||
findtime = 60
|
findtime = 60
|
||||||
|
banaction = pf
|
||||||
bantime = 172800
|
bantime = 172800
|
||||||
maxretry = 240
|
maxretry = 240
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue