From c4c8e811d179b30a7932e50d30c95cbe5acfcf2b Mon Sep 17 00:00:00 2001
From: FusionPBX <markjcrane@gmail.com>
Date: Wed, 2 May 2018 13:18:22 -0600
Subject: [PATCH] Create freeswitch-sip_auth_challenge.conf

---
 .../freeswitch-sip_auth_challenge.conf        | 21 +++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 debian/resources/fail2ban/freeswitch-sip_auth_challenge.conf

diff --git a/debian/resources/fail2ban/freeswitch-sip_auth_challenge.conf b/debian/resources/fail2ban/freeswitch-sip_auth_challenge.conf
new file mode 100644
index 0000000..3407183
--- /dev/null
+++ b/debian/resources/fail2ban/freeswitch-sip_auth_challenge.conf
@@ -0,0 +1,21 @@
+# Fail2Ban configuration file
+#
+# Author: soapee01
+#
+
+[Definition]
+
+# Option:  failregex
+# Notes.:  regex to match the password failures messages in the logfile. The
+#          host must be matched by a group named "host". The tag "<HOST>" can
+#          be used for standard IP/hostname matching and is only an alias for
+#          (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
+# Values:  TEXT
+#
+failregex = \[WARNING\] sofia_reg.c:\d+ SIP auth challenge \(REGISTER\) on sofia profile \'\w+\' for \[.*\] from ip <HOST>
+
+# Option:  ignoreregex
+# Notes.:  regex to ignore. If this regex matches, the line is ignored.
+# Values:  TEXT
+#
+ignoreregex =