QUESTION PIAF12 (Ubuntu) fail2ban disabled ?

panachoi

New Member
Joined
Jan 14, 2015
Messages
3
Reaction score
0
I've noticed that I no longer get emails about IPs being banned by fail2ban, which I used to with the "old" (CentOS, PIAF 11).

Digging deeper, it appears that the entire fail2ban has been disabled in /etc/fail2ban/jail.conf:

Code:
# Multiple jails, 1 per protocol, are necessary ATM:
# see https://github.com/fail2ban/fail2ban/issues/37
[asterisk-tcp]
 
enabled  = false
filter  = asterisk
port    = 5060,5061
protocol = tcp
logpath  = /var/log/asterisk/messages
 
[asterisk-udp]
 
enabled  = false
filter  = asterisk
port    = 5060,5061
protocol = udp
logpath  = /var/log/asterisk/messages

On Centos/PIAF11, it looked thusly:

Code:
[asterisk-iptables]
 
enabled  = true
filter  = asterisk
action  = iptables-allports[name=ASTERISK, protocol=all]
          sendmail-whois[name=ASTERISK, dest=root@localhost, [email protected]]
logpath  = /var/log/asterisk/full
#logpath  = /var/log/messages
maxretry = 5
bantime = 1800


I dont rember if I changed that in the installtion, as there's nothing much interesting in /var/log/messages, nor in /var/log/asterisk/messages either on PIAF12.
Clearly, enabled=false will disable the jail for asterisk entirely. Is it safe and/or useful to just set enabled=true on PIAF12 and then restart fail2ban ?
 

Members online

Forum statistics

Threads
26,687
Messages
174,410
Members
20,257
Latest member
Dempan
Get 3CX - Absolutely Free!

Link up your team and customers Phone System Live Chat Video Conferencing

Hosted or Self-managed. Up to 10 users free forever. No credit card. Try risk free.

3CX
A 3CX Account with that email already exists. You will be redirected to the Customer Portal to sign in or reset your password if you've forgotten it.
Back
Top