Hello. I have a FreePBX server version 13.0.197.31. Actually, I have several servers with different versions, and one with the same version. I noticed that fail2ban is not working for detecting password brute-force attempts on extensions. I started investigating and realized that one jail is missing in the configuration file /etc/fail2ban/jail.local. The [asterisk-iptables] jail is missing, even though it is present in the default configuration. For now, I resolved this by creating a file in /etc/fail2ban/jail.d. However, I want to understand where it went and how to restore it natively.
This configuration is generated by FreePBX itself, but I couldn’t find where to enable it. So I started looking in the databases. Eventually, just out of curiosity, I found a table in the newer version of FreePBX called sysadmin_fail2ban, which contains jail settings. However, in the older version, this table doesn’t exist, and searching through the text files didn’t yield any results related to jail settings.
Could you please tell me if it’s possible to restore this configuration so that the [asterisk-iptables] jail is generated automatically by the FreePBX system (i.e., so that it is included in the automatically generated jail.local)?