On Sat, Dec 25, 2010 at 7:41 PM, dave george <[email protected]>wrote:
> Yes we have that set in logger.conf. > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Nick Ustinov > Sent: Saturday, December 25, 2010 6:25 PM > To: Asterisk Users Mailing List - Non-Commercial Discussion > Subject: Re: [asterisk-users] sip attack.. fail2ban not stopping attack > > Make sure you have > > dateformat=%F %T > > in logger.conf > > > > On Sun, Dec 26, 2010 at 1:04 AM, Dave George <[email protected]> > wrote: > > My server is being attached all day and fail2ban is not stopping the > > attack. I updated stamstamp to match fail2ban requirements. > > > > [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830 > > handle_request_register: Registration from '"7002" ' > > failed for '38.108.40.94' - No matching peer found > > [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830 > > handle_request_register: Registration from '"7002" ' > > failed for '38.108.40.94' - No matching peer found > > [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830 > > handle_request_register: Registration from '"7002" ' > > failed for '38.108.40.94' - No matching peer found > > [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830 > > handle_request_register: Registration from '"7002" ' > > failed for '38.108.40.94' - No matching peer found > > [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830 > > handle_request_register: Registration from '"7002" ' > > failed for '38.108.40.94' - No matching peer found > > [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830 > > handle_request_register: Registration from '"7002" ' > > failed for '38.108.40.94' - No matching peer found > > [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830 > > handle_request_register: Registration from '"7002" ' > > failed for '38.108.40.94' - No matching peer found > > [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830 > > handle_request_register: Registration from '"7002" ' > > failed for '38.108.40.94' - No matching peer found > > [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830 > > handle_request_register: Registration from '"7002" ' > > failed for '38.108.40.94' - No matching peer found > > [2010-12-25 18:54:34] NOTICE[15415]: chan_sip.c:21830 > > handle_request_register: Registration from '"7002" > > Dave > > > > > If all else fails, check your /var/log/fail2ban log file. Any error messages there? A typo in the file name of the log file to check; a jail that is set up but not turned on; double check your set up. Use iptables -L -n to check that fail2ban is properly setting up a chain to block ip's. Is the fail2ban service even running? murf
-- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
