I just did a fresh/new install of FreePBX 16 and during the installation I entered 192.168.1.0/24 and a few specific IP addresses in that subnet on the trusted screen during the installation, but over and over again I’m getting locked out from the new server on my LAN.
I can unblock them from the CLI on the server with:
fail2ban-client set asterisk-iptables unbanip 192.168.1.x
I can understand a SIP ban from my Grandstream ATA as I’m trying to set it up to connect to the new FreePBX server and I probably have something configured wrong, but why am I getting banned in the asterisk-iptables from my laptop? I then can’t use the web gui or ssh to the server.
If my FreePBX server is in my LAN, behind my firewall, with no external port forwarding to it, and with my only connection out is to Callcentric for a SIP account, do I even need fail2ban? Getting FreePBX to work seems hard enough at this point without getting continually banned from the server.