fail2ban Archives | SysAdminMan

Whitelist in fail2ban and denyhosts

4 May 2012MattAsterisk, Linuxasterisk, denyhosts, fail2ban

All SysAdminMan servers come with fail2ban and denyhosts installed. These are two software packages that do similar things so can be confusing. Here are the differences – fail2ban monitors Asterisk logs for failed ‘Register’ attempts and blocks the IP using IPTables. This means if you get yourself blocked it will appear as though the server has gone down denyhosts monitors /var/log/secure for failed SSH attempts and just blocks the IP for SSH access. You will get connection refused just for SSH if you get yourself blocked It’s possible to whitelist your own IPs so that they don’t get accidentally blocked…

Blocking Asterisk hacking/scanning attempts with fail2ban

7 October 2010MattAsterisk, Linuxasterisk, elastix, fail2ban, hacking, scanning, trixbox

Warning – if you follow these instructions fail2ban will, by default, be protecting you against other scans such as ssh attempts. This means though that if you get your IP blocked you will not be able to connect to your server from that IP. Ensure that you whitelist your IP by following the instructions at the end of the post. Over the past few weeks we have seen a big jump in the scanning of VOIP servers. All of these scans are brute force scanning attempts that first scan for valid extension numbers and then to brute force guess the…

Tag: fail2ban

Whitelist in fail2ban and denyhosts

Blocking Asterisk hacking/scanning attempts with fail2ban