Intrusion-detection

[feetmil (Yaroslav)]

Greetings!

I’m diving into FreePBX and have a query about Intrusion Detection. If an IP is added to the blacklist due to failed authorization attempts, could you guide me on how to remove a specific IP from the blacklist?

Thanks in advance for your help.

[Stewart1 (Stewart)]

How to clear a banned IP address?

Occasionally a remote Agent will lose internet access and then our Fail2Ban will ban their IP address as their remote phone tries to re-establish its connection to the PBX. To clear the phone from the Fail2Ban list of Banned IP addresses: a. I would prefer not to add the banned Agent’s IP address to the "Whitelist" b. I tried selecting “Restart” of the Intrusion Detection module from within the FreePBX GUI, but 15 seconds after the restart the remote agent’s IP address appears again in the Ba…

[feetmil (Yaroslav)]

Thanks a bunch for your reply! Is it feasible to do this from the web as well, or is it strictly a command line operation?

[Stewart1 (Stewart)]

Firewall - Intrusion Detection - New features | FreePBX - Let Freedom Ring

[feetmil (Yaroslav)]

Thank you for your help, but I couldn’t find those actions in my instance. Currently, I’m using version 16.

[dicko]

You only get that with the commercially licensed sysadmin module insatalled, otherwise use fail2ban-client to get the same (or better) result.