asterisk.ru

Код: Выделить всё

[2013-08-31 16:45:05] NOTICE[1956] chan_sip.c: Sending fake auth rejection for device 400<sip:400@moyIP>;tag=39c6fee4
[2013-08-31 16:45:06] NOTICE[1956] chan_sip.c: Sending fake auth rejection for device 400<sip:400@moyIP>;tag=c567f21b
[2013-08-31 16:45:07] NOTICE[1956] chan_sip.c: Sending fake auth rejection for device 400<sip:400@moyIP>;tag=c567f21b
[2013-08-31 16:45:09] NOTICE[1956] chan_sip.c: Sending fake auth rejection for device 400<sip:400@moyIP>;tag=9609ffac
[2013-08-31 16:45:09] NOTICE[1956] chan_sip.c: Sending fake auth rejection for device 400<sip:400@moyIP>;tag=9609ffac

Код: Выделить всё

-A INPUT -p udp -m udp --dport 5060 -m string --string "REGISTER sip:" --algo bm --to 65535 -m recent --set --name VOIPREG --rsource
-A INPUT -p udp -m udp --dport 5060 -m string --string "REGISTER sip:" --algo bm --to 65535 -m recent --update --seconds 60 --hitcount 6 --rttl --name VOIPREG --rsource -j LOG --log-prefix "IPTABLES SPAMFILTER REGISTER:" --log-level 7
-A INPUT -p udp -m udp --dport 5060 -m string --string "INVITE sip:" --algo bm --to 65535 -m recent --set --name VOIPINV --rsource
-A INPUT -p udp -m udp --dport 5060 -m string --string "INVITE sip:" --algo bm --to 65535 -m recent --update --seconds 10 --hitcount 3 --rttl --name VOIPINV --rsource -j LOG --log-prefix "IPTABLES SPAMFILTER INVITE:" --log-level 7
-A INPUT -p udp -m hashlimit --hashlimit 6/sec --hashlimit-mode srcip,dstport --hashlimit-name tunnel_limit -m udp --dport 5060 -j ACCEPT
  
sed 's/\(^failregex.*=.*$\)/\1\n\t\tIPTABLES SPAMFILTER \w+:.* SRC=<HOST> .*/' -i /etc/fail2ban/filter.d/asterisk.conf 
    if [ -f /etc/rsyslog.conf ];then 
      sed 's/\(^local7.*\)/\1\nkern.=debug\t\t\t\t\t\t\/var\/log\/iptables.log/' -i /etc/rsyslog.conf
    elif [ -f /etc/syslog.conf ];then 
      sed 's/\(^local7.*\)/\1\nkern.=debug\t\t\t\t\t\t\/var\/log\/iptables.log/' -i /etc/syslog.conf
    fi 

[asterisk]
logpath = /var/log/asterisk/full
          /var/log/iptables.log


 

Код: Выделить всё

-A INPUT -p udp -m udp --dport 5060 -m string --string "REGISTER sip:" --algo bm --to 65535 -m recent --set --name VOIPREG --rsource
-A INPUT -p udp -m udp --dport 5060 -m string --string "REGISTER sip:" --algo bm --to 65535 -m recent --update --seconds 60 --hitcount 6 --rttl --name VOIPREG --rsource -j LOG --log-prefix "IPTABLES SPAMFILTER REGISTER:" --log-level 7
-A INPUT -p udp -m udp --dport 5060 -m string --string "INVITE sip:" --algo bm --to 65535 -m recent --set --name VOIPINV --rsource
-A INPUT -p udp -m udp --dport 5060 -m string --string "INVITE sip:" --algo bm --to 65535 -m recent --update --seconds 10 --hitcount 3 --rttl --name VOIPINV --rsource -j LOG --log-prefix "IPTABLES SPAMFILTER INVITE:" --log-level 7
-A INPUT -p udp -m hashlimit --hashlimit 6/sec --hashlimit-mode srcip,dstport --hashlimit-name tunnel_limit -m udp --dport 5060 -j ACCEPT
  

Код: Выделить всё

[asterisk]
logpath = /var/log/asterisk/full
          /var/log/iptables.log

Код: Выделить всё

sed 's/\(^failregex.*=.*$\)/\1\n\t\tIPTABLES SPAMFILTER \w+:.* SRC=<HOST> .*/' -i /etc/fail2ban/filter.d/asterisk.conf 
    if [ -f /etc/rsyslog.conf ];then 
      sed 's/\(^local7.*\)/\1\nkern.=debug\t\t\t\t\t\t\/var\/log\/iptables.log/' -i /etc/rsyslog.conf
    elif [ -f /etc/syslog.conf ];then 
      sed 's/\(^local7.*\)/\1\nkern.=debug\t\t\t\t\t\t\/var\/log\/iptables.log/' -i /etc/syslog.conf
    fi 

Код: Выделить всё

[b]/etc/fail2ban/jail.local[/b]
[asterisk]
logpath = /var/log/asterisk/full
          /var/log/iptables.log

Код: Выделить всё

sed 's/\(^failregex.*=.*$\)/\1\n\t\tIPTABLES SPAMFILTER \w+:.* SRC=<HOST> .*/' -i /etc/fail2ban/filter.d/asterisk.conf 
    if [ -f /etc/rsyslog.conf ];then 
      sed 's/\(^local7.*\)/\1\nkern.=debug\t\t\t\t\t\t\/var\/log\/iptables.log/' -i /etc/rsyslog.conf
    elif [ -f /etc/syslog.conf ];then 
      sed 's/\(^local7.*\)/\1\nkern.=debug\t\t\t\t\t\t\/var\/log\/iptables.log/' -i /etc/syslog.conf
    fi