<div dir="ltr">esqueci de mencionar...<br>configurei o fail2ban com esse link...<br>aqui esta funcionando certinho<br clear="all"><div dir="ltr"><br>--<br><br>Renato dos Santos<br><a href="http://shazaum.wordpress.com" target="_blank">shazaum.wordpress.com</a></div>
<br>
<br><br><div class="gmail_quote">2010/10/13 Shazaum <span dir="ltr"><<a href="mailto:shazaum@gmail.com">shazaum@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div dir="ltr"><a href="http://www.voip-info.org/wiki/view/Fail2Ban+%28with+iptables%29+And+Asterisk" target="_blank">http://www.voip-info.org/wiki/view/Fail2Ban+%28with+iptables%29+And+Asterisk</a><br clear="all"><div dir="ltr">
<br>--<br>
<br>Renato dos Santos<br><a href="http://shazaum.wordpress.com" target="_blank">shazaum.wordpress.com</a></div><br>
<br><br><div class="gmail_quote"><div class="im">2010/10/7 <a href="mailto:monica@addphone.net" target="_blank">monica@addphone.net</a> <span dir="ltr"><<a href="mailto:monica@addphone.net" target="_blank">monica@addphone.net</a>></span><br>
</div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div bgcolor="#ffffff" text="#3333ff">
ola, a todos alguem pode me ajudar na configuraçao de um iptables de
fail2ban para meu servidor astrisk<div><div></div><div class="h5"><br>
<br>
coloquei estas regras<br>
<br>
iptables -D INPUT -p tcp -m multiport --dport 10000:20000 -j ACCEPT<br>
iptables -D INPUT -p udp -m multiport --dport 10000:20000 -j ACCEPT<br>
iptables -D INPUT -p tcp -m multiport --dport 5060:5061 -j ACCEPT<br>
iptables -I INPUT -p tcp -m multiport --dport 80 -j ACCEPT<br>
iptables -I INPUT -p udp -m multiport --dport 80 -j ACCEPT<br>
iptables -I INPUT -p tcp --dport 22 -j ACCEPT<br>
<br>
service iptables save<br>
service iptables restart<br>
<br>
<br>
mas ficou sme audios e algun ramais nao puderam mais registrar <br>
<br>
<br>
e tabem o fail2ban nao bloqueo os ips dos ramais que ficam tentando
registrar com senha errada.<br>
<br>
<br>
<br>
coloquei assim<br>
<br>
/etc/fail2ban/filter.d/asterisk.conf<br>
<br>
failregex = NOTICE.* .*: Registration from '.*' failed for '<HOST
>' - Wrong password<br>
NOTICE.* .*: Registration from '.*' failed for '<HOST>' - No
matching peer found<br>
NOTICE.* .*: Registration from '.*' failed for '<HOST>' -
Username/auth name mismatch<br>
NOTICE.* .*: Registration from '.*' failed for '<HOST>' - Device
does not match ACL<br>
NOTICE.* <HOST /> failed to authenticate as '.*'$<br>
NOTICE.* .*: No registration for peer '.*' \(from <HOST>\)<br>
NOTICE.* .*: Host <HOST /> failed MD5 authentication for '.*' (.*)<br>
NOTICE.* .*: Failed to authenticate user .*@<HOST />.*<br>
<br>
ignoreregex =<br>
<br>
<code>/etc/fail2ban/jail.conf</code>
<div><code></code><code>[asterisk-iptables]</code></div>
<div><code></code></div>
<div><code></code><code>enabled
= true</code></div>
<div><code></code><code>filter
= asterisk</code></div>
<div><code></code><code>action
= iptables-allports[name=ASTERISK, protocol=all]</code></div>
<div><code></code><code></code><code>sendmail-whois[name=ASTERISK, <a href="mailto:dest=%20%3Cscript%20language=%27JavaScript%27%20type=%27text/javascript%27%3E%20%3C%21--%20var%20prefix%20=%20%27mailto:%27;%20var%20suffix%20=%20%27%27;%20var%20attribs%20=%20%27%27;%20var%20path%20=%20%27hr%27%20+%20%27ef%27%20+%20%27=%27;%20var%20addy78177%20=%20%27youremailaddress%27%20+%20%27@%27;%20addy78177%20=%20addy78177%20+%20%27somewhere%27%20+%20%27.%27%20+%20%27com%27;%20document.write%28%20%27%3Ca%20%27%20+%20path%20+%20%27%5C%27%27%20+%20prefix%20+%20addy78177%20+%20suffix%20+%20%27%5C%27%27%20+%20attribs%20+%20%27%3E%27%20%29;%20document.write%28%20addy78177%20%29;%20document.write%28%20%27%3C%5C/a%3E%27%20%29;%20//--%3E%20%3C/script%3E%20%3Cscript%20language=%27JavaScript%27%20type=%27text/javascript%27%3E%20%3C%21--%20document.write%28%20%27%3Cspan%20style=%5C%27display:%20none;%5C%27%3E%27%20%29;%20//--%3E%20%3C/script%3EEste%20endere%C3%A7o%20de%20e-mail%20est%C3%A1%20protegido%20contra%20spambots.%20Voc%C3%AA%20deve%20habilitar%20o%20JavaScript%20para%20visualiz%C3%A1-lo.%20%3Cscript%20language=%27JavaScript%27%20type=%27text/javascript%27%3E%20%3C%21--%20document.write%28%20%27%3C/%27%20%29;%20document.write%28%20%27span%3E%27%20%29;%20//--%3E%20%3C/script%3E" target="_blank">dest=
</a><a href="mailto:youremailaddress@somewhere.com" target="_blank">youremailaddress@somewhere.com</a>
<span>Este endereço de e-mail está protegido contra
spambots. Você deve habilitar o JavaScript para visualizá-lo.
</span>,
<a href="mailto:sender=%20%3Cscript%20language=%27JavaScript%27%20type=%27text/javascript%27%3E%20%3C%21--%20var%20prefix%20=%20%27mailto:%27;%20var%20suffix%20=%20%27%27;%20var%20attribs%20=%20%27%27;%20var%20path%20=%20%27hr%27%20+%20%27ef%27%20+%20%27=%27;%20var%20addy62105%20=%20%27fail2ban%27%20+%20%27@%27;%20addy62105%20=%20addy62105%20+%20%27somewhere%27%20+%20%27.%27%20+%20%27com%27;%20document.write%28%20%27%3Ca%20%27%20+%20path%20+%20%27%5C%27%27%20+%20prefix%20+%20addy62105%20+%20suffix%20+%20%27%5C%27%27%20+%20attribs%20+%20%27%3E%27%20%29;%20document.write%28%20addy62105%20%29;%20document.write%28%20%27%3C%5C/a%3E%27%20%29;%20//--%3E%20%3C/script%3E%20%3Cscript%20language=%27JavaScript%27%20type=%27text/javascript%27%3E%20%3C%21--%20document.write%28%20%27%3Cspan%20style=%5C%27display:%20none;%5C%27%3E%27%20%29;%20//--%3E%20%3C/script%3EEste%20endere%C3%A7o%20de%20e-mail%20est%C3%A1%20protegido%20contra%20spambots.%20Voc%C3%AA%20deve%20habilitar%20o%20JavaScript%20para%20visualiz%C3%A1-lo.%20%3Cscript%20language=%27JavaScript%27%20type=%27text/javascript%27%3E%20%3C%21--%20document.write%28%20%27%3C/%27%20%29;%20document.write%28%20%27span%3E%27%20%29;%20//--%3E%20%3C/script%3E" target="_blank">sender=
</a><a href="mailto:fail2ban@somewhere.com" target="_blank">fail2ban@somewhere.com</a>
<span>Este endereço de e-mail está protegido contra
spambots. Você deve habilitar o JavaScript para visualizá-lo.
</span>]</code></div>
<div><code></code><code>logpath
= /var/log/asterisk/full</code></div>
<div><code></code><code>maxretry
= 5</code></div>
<div><code></code><code>bantime
= 600<br>
<br>
</code><b>/etc/asterisk/logger.conf</b><br>
[general]<br>
dateformat=%F %T<br>
<br>
<br>
<br>
</div>
<br>
<br>
<br>
__________ Información de ESET NOD32 Antivirus, versión de la base de firmas de virus 5512 (20101007) __________<br>
<br>
ESET NOD32 Antivirus ha comprobado este mensaje.<br>
<br>
<a href="http://www.eset.com" target="_blank">http://www.eset.com</a><br>
</div></div></div>
<br><div class="im">_______________________________________________<br>
KHOMP: qualidade em placas de E1, GSM, FXS e FXO para Asterisk.<br>
- Hardware com alta disponibilidade de recursos e qualidade KHOMP<br>
- Suporte técnico local qualificado e gratuito<br>
Conheça a linha completa de produtos KHOMP em <a href="http://www.khomp.com.br" target="_blank">www.khomp.com.br</a><br>
_______________________________________________<br>
Temos tudo para seu projeto VoIP com Asterisk!<br>
Descontos especiais para assinantes da AsteriskBrasil.org.<br>
Registre-se e receba um cupom exclusivo de desconto!<br>
Acesse agora <a href="http://www.voipmania.com.br" target="_blank">www.voipmania.com.br</a><br>
______________________________________________<br>
Lista de discussões AsteriskBrasil.org<br>
<a href="mailto:AsteriskBrasil@listas.asteriskbrasil.org" target="_blank">AsteriskBrasil@listas.asteriskbrasil.org</a><br>
<a href="http://listas.asteriskbrasil.org/mailman/listinfo/asteriskbrasil" target="_blank">http://listas.asteriskbrasil.org/mailman/listinfo/asteriskbrasil</a><br>
______________________________________________<br>
Para remover seu email desta lista, basta enviar um email em branco para <a href="mailto:asteriskbrasil-unsubscribe@listas.asteriskbrasil.org" target="_blank">asteriskbrasil-unsubscribe@listas.asteriskbrasil.org</a><br></div>
</blockquote></div>
<br></div>
</blockquote></div><br></div>