[Fail2Ban] SIP: banned on localhost

FreePBX Security
1

Hi,
I mount a FreePBX 15 Distro Sangoma Linux release 7.5.1805
The PBX is sending Email

[Fail2Ban] SIP: banned 192.168.x.xxx on localhost
To [email protected]

Hi,

The IP 192.168.x.xxx has just been banned by Fail2Ban after
7 attempts against SIP on localhost.

Regards,

Fail2Ban

First question is where do I set the To:
in the System Admin Notification setting it is set to a valid email not to the [email protected]

Second question is where do I set the rang of IP that I want to let pass thru

Thanks

2

https://wiki.freepbx.org/pages/viewpage.action?pageId=27066420

3

The email was set in the E-mail:
It is my valide email
in the Whitelist it was set to
127.0.0.1
192.168.0.0/16

4

Did you restart Intrusion Detection once you added these addresses?

Also, IIRC fail2ban does not always like a /16, try entering a /24 network and see if it still blocks it.

5

I did the changes
127.0.0.1/24
192.168.0.0/24
192.168.10.0/24
Submit
Restart
Eaiting to see

6

I once had fail2ban blocking my SIP traffic due to wrong password. Try first to find the reason the local IP is blocked. I once told not to whitelist local IP as it help detect abnormal activities.

7

Notification setting it is set to a valid email not to the [email protected]
so it is wrong user and wrong password that is being use.

8

This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.