Fail2ban not working?

Asterisk Asterisk General
1

Guy, do you know why fail2ban not working to me? banned this IP but still show on sngrep
Ảnh màn hình 2024-04-17 lúc 15.31.18

here is the fail2ban status:

root@vedaxdev:/# fail2ban-client status
Status
|- Number of jail:	2
`- Jail list:	asterisk-security-iptables, freepbx-iptables
root@vedaxdev:/# fail2ban-client status freepbx-iptables
Status for the jail: freepbx-iptables
|- Filter
|  |- Currently failed:	0
|  |- Total failed:	2
|  `- File list:	/var/log/asterisk/freepbx_security.log
`- Actions
   |- Currently banned:	2
   |- Total banned:	2
   `- Banned IP list:	45.155.91.7 45.155.91.17
root@vedaxdev:/# fail2ban-client status asterisk-security-iptables
Status for the jail: asterisk-security-iptables
|- Filter
|  |- Currently failed:	0
|  |- Total failed:	2
|  `- File list:	/var/log/asterisk/full
`- Actions
   |- Currently banned:	2
   |- Total banned:	2
   `- Banned IP list:	45.155.91.7 45.155.91.17
2

Hi,

sngrep, tcpdump and other tools are showing inbound traffic before blocking through firewall systems. You should not see any answers to blocked packets.

Best regrads,

Karsten

1 Like
3

Also, crossed post here: Fail2ban not working? - Security - FreePBX Community Forums