QUESTION installing fspbx on proxmox 8.4.1

[islandtech]

Debian 13, 4 cores, 4GB ram, 32GB drive
Following this guide https://nerdvittles.com/icing-on-the-cake-meet-fs-pbx-its-fusionpbx-on-steroids/
Is voipbl installed?
In the section Securing Your FS PBX Server
My iptables look good except the entry DROP 0 -- 0.0.0.0/0 0.0.0.0/0 match-set voipbl src
is missing.

 

[kenn10]

You need to install it separately along with api-ban. I believe the instructions in this Nerd Vittles article still work: https://nerdvittles.com/icing-on-the-cake-meet-fs-pbx-its-fusionpbx-on-steroids/

 

[islandtech]

This morning my iptables has the entry

root@fspbx:~# iptables -nL
Chain INPUT (policy DROP)
target     prot opt source               destination        
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0          
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0            state RELATED,ESTABLISHED
ACCEPT     all  --  10.8.0.0/24          0.0.0.0/0          
DROP       all  --  0.0.0.0/0            0.0.0.0/0            match-set voipbl src
DROP       all  --  0.0.0.0/0            0.0.0.0/0            match-set apiban src
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0          
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0            state RELATED,ESTABLISHED
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:5060:5091 STRING match  "friendly-scanner" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:5060:5091 STRING match  "friendly-scanner" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:35000 STRING match  "friendly-scanner" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:35000 STRING match  "friendly-scanner" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:36000:36011 STRING match  "friendly-scanner" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:36000:36011 STRING match  "friendly-scanner" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:5060:5091 STRING match  "sipcli/" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:5060:5091 STRING match  "sipcli/" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:35000 STRING match  "sipcli/" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:35000 STRING match  "sipcli/" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:36000:36011 STRING match  "sipcli/" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:36000:36011 STRING match  "sipcli/" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:5060:5091 STRING match  "VaxSIPUserAgent/" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:5060:5091 STRING match  "VaxSIPUserAgent/" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:35000 STRING match  "VaxSIPUserAgent/" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:35000 STRING match  "VaxSIPUserAgent/" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:36000:36011 STRING match  "VaxSIPUserAgent/" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:36000:36011 STRING match  "VaxSIPUserAgent/" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:5060:5091 STRING match  "pplsip" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:5060:5091 STRING match  "pplsip" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:35000 STRING match  "pplsip" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:35000 STRING match  "pplsip" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:36000:36011 STRING match  "pplsip" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:36000:36011 STRING match  "pplsip" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:5060:5091 STRING match  "system " ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:5060:5091 STRING match  "system " ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:35000 STRING match  "system " ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:35000 STRING match  "system " ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:36000:36011 STRING match  "system " ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:36000:36011 STRING match  "system " ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:5060:5091 STRING match  "exec." ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:5060:5091 STRING match  "exec." ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:35000 STRING match  "exec." ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:35000 STRING match  "exec." ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:36000:36011 STRING match  "exec." ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:36000:36011 STRING match  "exec." ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:5060:5091 STRING match  "multipart/mixed;boundary" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:5060:5091 STRING match  "multipart/mixed;boundary" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:35000 STRING match  "multipart/mixed;boundary" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:35000 STRING match  "multipart/mixed;boundary" ALGO name bm ICASE
DROP       udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:36000:36011 STRING match  "multipart/mixed;boundary" ALGO name bm ICASE
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:36000:36011 STRING match  "multipart/mixed;boundary" ALGO name bm ICASE
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:22
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:80
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:443
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:7443
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:5060:5091
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:5060:5091
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:35000
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:35000
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpts:36000:36011
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:36000:36011
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp dpts:16384:32768
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0            icmptype 8
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:1194

Chain FORWARD (policy DROP)
target     prot opt source               destination        

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

https://nerdvittles.com/icing-on-the-cake-meet-fs-pbx-its-fusionpbx-on-steroids/
is what I followed to install fs pbx

cd /
apt install ipset -y
wget https://filedn.com/lBgbGypMOdDm8PWOoOiBR7j/FusionPBX/ipset-additions.tar.gz
tar zxvf ipset-additions.tar.gz
# insert your APIkey when the text editor opens below & save the file
nano -w /usr/local/sbin/apiban-init
chmod +x /etc/rc.local
echo "2 0 * * * root rm -f /var/log/*.gz >/dev/null 2>&1" >> /etc/crontab
echo "2 5 * * * root rm -f /var/log/*.1 >/dev/null 2>&1" >> /etc/crontab
echo "9 5 * * * root rm -f /var/log/freeswitch/*.1 >/dev/null 2>&1" >> /etc/crontab
echo "3 */6 * * * root /usr/local/sbin/iptables-restart >/dev/null 2>&1" >> /etc/crontab
reboot

root@fspbx:~# fail2ban-client status voipbl
2026-06-03 07:57:57,718 fail2ban                [875199]: ERROR   NOK: ('voipbl',)
Sorry but the jail 'voipbl' does not exist
root@fspbx:~# iptables -L -n | grep -i voipbl
DROP       all  --  0.0.0.0/0            0.0.0.0/0            match-set voipbl src
root@fspbx:~# systemctl status voipbl-update
Unit voipbl-update.service could not be found.
root@fspbx:~# ls -la /etc/cron.daily/voipbl
ls: cannot access '/etc/cron.daily/voipbl': No such file or directory

Was the install voipbl not included in the script?