[Spce-user] iptables with fail2ban
    fry 
    spce at friibii.ch
       
    Mon Feb 23 16:01:13 EST 2015
    
    
  
hi all,
i got a lot of register-tries on kamailio, so i descided to use fail2ban
to block the ip's.
fail2ban 'blocked' 3 ip's because of UA matching. but i still get
registers from this ip - so i'm asking myself why iptables is not blocking?
does anybody had this as well?
thanks
fry
***
=> /var/log/fail2ban.log
2015-02-23 21:40:20,980 fail2ban.actions: WARNING [kamailio-iptables]
Ban 212.129.41.61
2015-02-23 21:43:55,698 fail2ban.actions: WARNING [kamailio-iptables]
Ban 62.210.251.50
2015-02-23 21:51:41,135 fail2ban.actions: WARNING [kamailio-iptables]
Ban 46.105.33.166
=> iptables -L
Chain INPUT (policy DROP)
target     prot opt source               destination
fail2ban-KAMAILIO  all  --  anywhere             anywhere
fail2ban-ssh  tcp  --  anywhere             anywhere            
multiport dports ssh
mediaproxy  all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
[...]
Chain fail2ban-KAMAILIO (1 references)
target     prot opt source               destination
DROP       all  --  46.105.33.166        anywhere
DROP       all  --  62.210.251.50        anywhere
DROP       all  --  212-129-41-61.rev.poneytelecom.eu  anywhere
RETURN     all  --  anywhere             anywhere
    
    
More information about the Spce-user
mailing list