forum.lissyara.su

Код: Выделить всё

# uname -a
FreeBSD  8.2-STABLE FreeBSD 8.2-STABLE #1: Thu Mar 24 20:22:32 YEKT 2011     gofer@:/usr/obj/usr/src/sys/mykernel  i386

Код: Выделить всё

# pkg_info | grep fail
py27-fail2ban-0.8.4 Scans log files and bans IP that makes too many password fa

Код: Выделить всё

# cat /usr/local/etc/fail2ban/jail.conf
[DEFAULT]
ignoreip = 127.0.0.1
bantime  = 600
findtime  = 900
maxretry = 3
backend = auto

[asterisk-ipfw]

enabled  = true
filter   = asterisk
action   = bsd-ipfw[table=50]
logpath  = /var/log/asterisk/messages
bantime  = 604800
maxretry = 3
ignoreip = 192.168.10.0/24

Код: Выделить всё

# cat /usr/local/etc/fail2ban/filter.d/asterisk.conf
[INCLUDES]

[Definition]

failregex = NOTICE.* .*: Registration from '.*' failed for '<HOST>' - Wrong password
NOTICE.* .*: Registration from '.*' failed for '<HOST>' - No matching peer found
NOTICE.* .*: Registration from '.*' failed for '<HOST>' - Username/auth name mismatch
NOTICE.* .*: Registration from '.*' failed for '<HOST>' - Device does not match ACL
NOTICE.* .*: No registration for peer '.*' \(from <HOST>\)
NOTICE.* .*: Host <HOST> failed MD5 authentication for '.*' (.*)
NOTICE.* .*: Failed to authenticate user .*@<HOST>.*

ignoreregex =

Код: Выделить всё

# cat /usr/local/etc/fail2ban/action.d/bsd-ipfw.conf
actionban = /sbin/ipfw table <table> add <ip>
actionunban = /sbin/ipfw table <table> delete <ip>
#actionunban =

Код: Выделить всё

# /usr/local/etc/rc.d/fail2ban start
ERROR  Error in action definition bsd-ipfw[table=50]
ERROR  Errors in jail 'asterisk-ipfw'. Skipping...

Код: Выделить всё

2011-04-10 18:00:55,222 fail2ban.jail   : INFO   Jail 'asterisk-ipfw' started
2011-04-10 18:01:37,300 fail2ban.actions: WARNING [asterisk-ipfw] Ban XX.XXX.XXX.XXX
2011-04-10 18:01:37,310 fail2ban.actions.action: ERROR  /sbin/ipfw table 50 add XX.XXX.XXX.XXX returned 4700

Код: Выделить всё

# ipfw table 50 list
XX.XXX.XXX.XXX/32 0

Код: Выделить всё

# /sbin/ipfw add 10 deny ip from ${asterisk_ban_table} to me
asterisk_ban_table: Undefined variable.

Код: Выделить всё

asterisk_ban_table="table(50)"
# fail2ban
${fwcmd} add 10 deny ip from ${asterisk_ban_table} to me

Код: Выделить всё

asterisk_ban_table="table(50)"
# fail2ban
${ipfw} add 10 deny all from ${asterisk_ban_table} to me

Код: Выделить всё

cat /etc/rc.conf
cat <ваш конфиг фаервола>

Код: Выделить всё

def __processCmd(self, cmd, showRet = True):
beautifier = Beautifier() for c in cmd:
beautifier.setInputCmd(c)

Код: Выделить всё

def __processCmd(self, cmd, showRet = True):
beautifier = Beautifier() for c in cmd:
time.sleep(0.1)
beautifier.setInputCmd(c)