What is the correct setup for fail2ban?

[alexeynikolaev]

Intrusion detection not working?

Do you have entries like this in /etc/fail2ban/jail.conf > [asterisk-iptables] > enabled = true > filter = asterisk > action = iptables-allports[name=ASTERISK, protocol=all] > sendmail-whois[name=ASTERISK, [email protected], [email protected]] > logpath = /var/log/asterisk/messages > maxretry = 5 > bantime = 300 > ignoreip = 10.169.20.37 like this in /etc/fail2ban/filter.d/asterisk.conf > failregex = NOTICE%(__pid_re)s [^:]+: Registration from '[^']*' failed for '<HOST>(…