nsinnovations/fusionpbx-install.sh
Public Access
2
0
Fork 0
forked from norman/fusionpbx-install.sh-github-mirror
Code Pull Requests Activity

Update jail.local

Browse Source
This commit is contained in:
FusionPBX
2017-11-28 22:52:03 -07:00
committed by GitHub
parent fb03795e44
commit 78875548ae
1 changed files with 32 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

52
debian/resources/fail2ban/jail.local vendored
View File

@@ -1,74 +1,86 @@
[ssh]
enabled = true
port = 5060-5090
protocol = ssh
filter = sshd
logpath = /var/log/auth.log
action = iptables-allports[name=sshd, protocol=all]
maxretry = 5
findtime = 7200
bantime = 86400
[freeswitch-udp] [freeswitch-udp]
enabled = true enabled = true
port = 5060,5061,5080,5081 port = 5060-5090
5080,5081
protocol = all protocol = all
filter = freeswitch filter = freeswitch
logpath = /var/log/freeswitch/freeswitch.log logpath = /var/log/freeswitch/freeswitch.log
action = iptables-multiport[name=freeswitch-udp, port="5060,5061,5080,5081", protocol=udp] action = iptables-multiport[name=freeswitch-udp, port="5060-5090", protocol=udp]
maxretry = 5 maxretry = 5
findtime = 600 findtime = 600
bantime = 600 bantime = 3600
# sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed # sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed
[freeswitch-tcp] [freeswitch-tcp]
enabled = true enabled = true
port = 5060,5061,5080,5081 port = 5060-5090
protocol = all protocol = all
filter = freeswitch filter = freeswitch
logpath = /var/log/freeswitch/freeswitch.log logpath = /var/log/freeswitch/freeswitch.log
action = iptables-multiport[name=freeswitch-tcp, port="5060,5061,5080,5081", protocol=tcp] action = iptables-multiport[name=freeswitch-tcp, port="5060-5090", protocol=tcp]
maxretry = 5 maxretry = 5
findtime = 600 findtime = 600
bantime = 600 bantime = 3600
# sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed # sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed
[freeswitch-ip-tcp] [freeswitch-ip-tcp]
enabled = false enabled = false
port = 5060,5061,5080,5081 port = 5060-5090
protocol = all protocol = all
filter = freeswitch-ip filter = freeswitch-ip
logpath = /var/log/freeswitch/freeswitch.log logpath = /var/log/freeswitch/freeswitch.log
action = iptables-multiport[name=freeswitch-ip-tcp, port="5060,5061,5080,5081", protocol=tcp] action = iptables-multiport[name=freeswitch-ip-tcp, port="5060-5090", protocol=tcp]
maxretry = 1 maxretry = 1
findtime = 30 findtime = 30
bantime = 86400 bantime = 86400
[freeswitch-ip-udp] [freeswitch-ip-udp]
enabled = false enabled = false
port = 5060,5061,5080,5081 port = 5060-5090
protocol = all protocol = all
filter = freeswitch-ip filter = freeswitch-ip
logpath = /var/log/freeswitch/freeswitch.log logpath = /var/log/freeswitch/freeswitch.log
action = iptables-multiport[name=freeswitch-ip-udp, port="5060,5061,5080,5081", protocol=udp] action = iptables-multiport[name=freeswitch-ip-udp, port="5060-5090", protocol=udp]
maxretry = 1 maxretry = 1
findtime = 30 findtime = 30
bantime = 86400 bantime = 86400
[freeswitch-dos-udp] [freeswitch-dos-udp]
enabled = true enabled = true
port = 5060,5061,5080,5081 port = 5060-5090
protocol = all protocol = all
filter = freeswitch-dos filter = freeswitch-dos
logpath = /var/log/freeswitch/freeswitch.log logpath = /var/log/freeswitch/freeswitch.log
action = iptables-multiport[name=freeswitch-dos-udp, port="5060,5061,5080,5081", protocol=udp] action = iptables-multiport[name=freeswitch-dos-udp, port="5060-5090", protocol=udp]
maxretry = 50 maxretry = 50
findtime = 30 findtime = 30
bantime = 6000 bantime = 6000
[freeswitch-dos-tcp] [freeswitch-dos-tcp]
enabled = true enabled = true
port = 5060,5061,5080,5081 port = 5060-5090
protocol = all protocol = all
filter = freeswitch-dos filter = freeswitch-dos
logpath = /var/log/freeswitch/freeswitch.log logpath = /var/log/freeswitch/freeswitch.log
action = iptables-multiport[name=freeswitch-dos-tcp, port="5060,5061,5080,5081", protocol=tcp] action = iptables-multiport[name=freeswitch-dos-tcp, port="5060-5090", protocol=tcp]
maxretry = 50 maxretry = 50
findtime = 30 findtime = 30
bantime = 6000 bantime = 7200
[freeswitch-404] [freeswitch-404]
enabled = true enabled = true
port = 5060,5061,5080,5081 port = 5060-5090
protocol = all protocol = all
filter = freeswitch-404 filter = freeswitch-404
logpath = /var/log/freeswitch/freeswitch.log logpath = /var/log/freeswitch/freeswitch.log
@@ -87,7 +99,7 @@ action = iptables-multiport[name=fusionpbx, port="http,https", protocol=tcp]
# sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed # sendmail-whois[name=fusionpbx, dest=root, sender=fail2ban@example.org] #no smtp server installed
maxretry = 10 maxretry = 10
findtime = 600 findtime = 600
bantime = 600 bantime = 3600
[fusionpbx-mac] [fusionpbx-mac]
enabled = true enabled = true
@@ -97,8 +109,8 @@ filter = fusionpbx-mac
logpath = /var/log/syslog logpath = /var/log/syslog
action = iptables-multiport[name=fusionpbx-mac, port="http,https", protocol=tcp] action = iptables-multiport[name=fusionpbx-mac, port="http,https", protocol=tcp]
# sendmail-whois[name=fusionpbx-mac, dest=root, sender=fail2ban@example.org] #no smtp server installed # sendmail-whois[name=fusionpbx-mac, dest=root, sender=fail2ban@example.org] #no smtp server installed
maxretry = 3 maxretry = 5
findtime = 600 findtime = 300
bantime = -1 bantime = -1
[nginx-404] [nginx-404]
@@ -107,7 +119,7 @@ port = 80,443
protocol = tcp protocol = tcp
filter = nginx-404 filter = nginx-404
logpath = /var/log/nginx/access*.log logpath = /var/log/nginx/access*.log
bantime = 600 bantime = 3600
findtime = 60 findtime = 60
maxretry = 120 maxretry = 120