freeswitchforum.com

Форум поддержки FreeSWITCH

FreeSWITCH is a registered trademark of Anthony Minessale. Official FreeSWITCH site.

Текущее время: 28 апр 2024 02:30

Часовой пояс: UTC + 4 часа




Начать новую тему Ответить на тему  [ Сообщений: 29 ]  На страницу Пред.  1, 2, 3
Автор Сообщение
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 05 июн 2014 12:07 

Зарегистрирован: 31 янв 2014 11:59
Сообщения: 54
Я не понимаю :roll:
На все REGISTER я получаю SIP/2.0 401 Unauthorized
Все ответы ничем не отличаются друг от друга

[+] 
freeswitch@internal> sofia profile internal siptrace on
Enabled sip debugging on internal
freeswitch@internal> recv 720 bytes from udp/[my_ip]:45496 at 09:12:32.985935:
------------------------------------------------------------------------
SUBSCRIBE sip:2500@server_ip;transport=UDP SIP/2.0
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-a209ef4012d13d9a-1---d8754z-
Max-Forwards: 70
Contact: <sip:2500@my_pc_ip:5060;transport=UDP>
To: <sip:2500@server_ip;transport=UDP>
From: <sip:2500@server_ip;transport=UDP>;tag=401a6605
Call-ID: N2JlNGRiZmNkOWVkNmRlM2YxMGJiMGY1ZDNmYWI2NTg.
CSeq: 1 SUBSCRIBE
Expires: 3600
Accept: application/simple-message-summary
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
Supported: replaces, norefersub, extended-refer, X-cisco-serviceuri
User-Agent: Zoiper for Windows 2.38 rev.16635
Event: message-summary
Allow-Events: presence, kpml
Content-Length: 0

------------------------------------------------------------------------
recv 672 bytes from udp/[my_ip]:45496 at 09:12:32.986252:
------------------------------------------------------------------------

REGISTER sip:server_ip;transport=UDP SIP/2.0
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-87743649e21f7162-1---d8754z-
Max-Forwards: 70
Contact: <sip:2500@my_pc_ip:5060;rinstance=9d623fe52b86ded4;transport=UDP>
To: <sip:2500@server_ip;transport=UDP>
From: <sip:2500@server_ip;transport=UDP>;tag=513a3e1e
Call-ID: OWIwZTZkMzcxMzY1MDZiNmRjZTVkYTU5NGJjNWM4YmM.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
Supported: replaces, norefersub, extended-refer, X-cisco-serviceuri
User-Agent: Zoiper for Windows 2.38 rev.16635
Allow-Events: presence, kpml
Content-Length: 0

------------------------------------------------------------------------
2014-06-05 09:12:32.975265 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'internal' for [2500@server_ip] from ip my_ip
send 836 bytes to udp/[my_ip]:5060 at 09:12:32.988250:
------------------------------------------------------------------------
SIP/2.0 202 Accepted
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-a209ef4012d13d9a-1---d8754z-;received=my_ip
From: <sip:2500@server_ip;transport=UDP>;tag=401a6605
To: <sip:2500@server_ip;transport=UDP>;tag=lPtg3gDqmrO6
Call-ID: N2JlNGRiZmNkOWVkNmRlM2YxMGJiMGY1ZDNmYWI2NTg.
CSeq: 1 SUBSCRIBE
Contact: <sip:2500@server_ip:5060>
Expires: 3600
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-sum mary, refer
Subscription-State: active;expires=3600
Content-Length: 0

------------------------------------------------------------------------
send 694 bytes to udp/[my_ip]:5060 at 09:12:32.988439:
------------------------------------------------------------------------
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-87743649e21f7162-1---d8754z-;received=my_ip
From: <sip:2500@server_ip;transport=UDP>;tag=513a3e1e
To: <sip:2500@server_ip;transport=UDP>;tag=X2FQ5jtHpBX7B
Call-ID: OWIwZTZkMzcxMzY1MDZiNmRjZTVkYTU5NGJjNWM4YmM.
CSeq: 1 REGISTER
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
WWW-Authenticate: Digest realm="server_ip", nonce="ffe39a68-ec6f-11e3-a4ce-1fbe20af1be2", algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
send 1024 bytes to udp/[my_ip]:45496 at 09:12:33.081684:
------------------------------------------------------------------------
NOTIFY sip:2500@my_pc_ip:5060;transport=UDP SIP/2.0
Via: SIP/2.0/UDP server_ip;rport;branch=z9hG4bKZ7HvjDQDmg33F
Route: <sip:my_ip:45496>;transport=UDP
Max-Forwards: 70
From: <sip:2500@server_ip;transport=UDP>;tag=lPtg3gDqmrO6
To: <sip:2500@server_ip;transport=UDP>;tag=401a6605
Call-ID: N2JlNGRiZmNkOWVkNmRlM2YxMGJiMGY1ZDNmYWI2NTg.
CSeq: 1342515301 NOTIFY
Contact: <sip:2500@server_ip:5060>
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Event: message-summary
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-sum mary, refer
Subscription-State: active;expires=3599
Content-Type: application/simple-message-summary
Content-Length: 65

Messages-Waiting: no
Message-Account: sip:2500@server_ip

------------------------------------------------------------------------
recv 406 bytes from udp/[my_ip]:45496 at 09:12:33.103267:
------------------------------------------------------------------------
SIP/2.0 200 OK
Via: SIP/2.0/UDP server_ip;rport=5060;branch=z9hG4bKZ7HvjDQDmg33F
Contact: <sip:2500@my_pc_ip:5060;transport=UDP>
To: <sip:2500@server_ip;transport=UDP>;tag=401a6605
From: <sip:2500@server_ip;transport=UDP>;tag=lPtg3gDqmrO6
Call-ID: N2JlNGRiZmNkOWVkNmRlM2YxMGJiMGY1ZDNmYWI2NTg.
CSeq: 1342515301 NOTIFY
User-Agent: Zoiper for Windows 2.38 rev.16635
Content-Length: 0

------------------------------------------------------------------------
recv 720 bytes from udp/[my_ip]:45496 at 09:12:33.479119:
------------------------------------------------------------------------
SUBSCRIBE sip:2500@server_ip;transport=UDP SIP/2.0
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-a209ef4012d13d9a-1---d8754z-
Max-Forwards: 70
Contact: <sip:2500@my_pc_ip:5060;transport=UDP>
To: <sip:2500@server_ip;transport=UDP>
From: <sip:2500@server_ip;transport=UDP>;tag=401a6605
Call-ID: N2JlNGRiZmNkOWVkNmRlM2YxMGJiMGY1ZDNmYWI2NTg.
CSeq: 1 SUBSCRIBE
Expires: 3600
Accept: application/simple-message-summary
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
Supported: replaces, norefersub, extended-refer, X-cisco-serviceuri
User-Agent: Zoiper for Windows 2.38 rev.16635
Event: message-summary
Allow-Events: presence, kpml
Content-Length: 0

------------------------------------------------------------------------
send 836 bytes to udp/[my_ip]:5060 at 09:12:33.479327:
------------------------------------------------------------------------
SIP/2.0 202 Accepted
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-a209ef4012d13d9a-1---d8754z-;received=my_ip
From: <sip:2500@server_ip;transport=UDP>;tag=401a6605
To: <sip:2500@server_ip;transport=UDP>;tag=lPtg3gDqmrO6
Call-ID: N2JlNGRiZmNkOWVkNmRlM2YxMGJiMGY1ZDNmYWI2NTg.
CSeq: 1 SUBSCRIBE
Contact: <sip:2500@server_ip:5060>
Expires: 3600
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-sum mary, refer
Subscription-State: active;expires=3600
Content-Length: 0

------------------------------------------------------------------------
recv 672 bytes from udp/[my_ip]:45496 at 09:12:33.482929:
------------------------------------------------------------------------

REGISTER sip:server_ip;transport=UDP SIP/2.0
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-87743649e21f7162-1---d8754z-
Max-Forwards: 70
Contact: <sip:2500@my_pc_ip:5060;rinstance=9d623fe52b86ded4;transport=UDP>
To: <sip:2500@server_ip;transport=UDP>
From: <sip:2500@server_ip;transport=UDP>;tag=513a3e1e
Call-ID: OWIwZTZkMzcxMzY1MDZiNmRjZTVkYTU5NGJjNWM4YmM.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
Supported: replaces, norefersub, extended-refer, X-cisco-serviceuri
User-Agent: Zoiper for Windows 2.38 rev.16635
Allow-Events: presence, kpml
Content-Length: 0

------------------------------------------------------------------------
send 694 bytes to udp/[my_ip]:5060 at 09:12:33.483028:
------------------------------------------------------------------------
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-87743649e21f7162-1---d8754z-;received=my_ip
From: <sip:2500@server_ip;transport=UDP>;tag=513a3e1e
To: <sip:2500@server_ip;transport=UDP>;tag=X2FQ5jtHpBX7B
Call-ID: OWIwZTZkMzcxMzY1MDZiNmRjZTVkYTU5NGJjNWM4YmM.
CSeq: 1 REGISTER
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
WWW-Authenticate: Digest realm="server_ip", nonce="ffe39a68-ec6f-11e3-a4ce-1fbe20af1be2", algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
recv 720 bytes from udp/[my_ip]:45496 at 09:12:34.479149:
------------------------------------------------------------------------
SUBSCRIBE sip:2500@server_ip;transport=UDP SIP/2.0
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-a209ef4012d13d9a-1---d8754z-
Max-Forwards: 70
Contact: <sip:2500@my_pc_ip:5060;transport=UDP>
To: <sip:2500@server_ip;transport=UDP>
From: <sip:2500@server_ip;transport=UDP>;tag=401a6605
Call-ID: N2JlNGRiZmNkOWVkNmRlM2YxMGJiMGY1ZDNmYWI2NTg.
CSeq: 1 SUBSCRIBE
Expires: 3600
Accept: application/simple-message-summary
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
Supported: replaces, norefersub, extended-refer, X-cisco-serviceuri
User-Agent: Zoiper for Windows 2.38 rev.16635
Event: message-summary
Allow-Events: presence, kpml
Content-Length: 0

------------------------------------------------------------------------
send 836 bytes to udp/[my_ip]:5060 at 09:12:34.479347:
------------------------------------------------------------------------
SIP/2.0 202 Accepted
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-a209ef4012d13d9a-1---d8754z-;received=my_ip
From: <sip:2500@server_ip;transport=UDP>;tag=401a6605
To: <sip:2500@server_ip;transport=UDP>;tag=lPtg3gDqmrO6
Call-ID: N2JlNGRiZmNkOWVkNmRlM2YxMGJiMGY1ZDNmYWI2NTg.
CSeq: 1 SUBSCRIBE
Contact: <sip:2500@server_ip:5060>
Expires: 3600
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-sum mary, refer
Subscription-State: active;expires=3600
Content-Length: 0

------------------------------------------------------------------------
recv 672 bytes from udp/[my_ip]:45496 at 09:12:34.483984:
------------------------------------------------------------------------
REGISTER sip:server_ip;transport=UDP SIP/2.0
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-87743649e21f7162-1---d8754z-
Max-Forwards: 70
Contact: <sip:2500@my_pc_ip:5060;rinstance=9d623fe52b86ded4;transport=UDP>
To: <sip:2500@server_ip;transport=UDP>
From: <sip:2500@server_ip;transport=UDP>;tag=513a3e1e
Call-ID: OWIwZTZkMzcxMzY1MDZiNmRjZTVkYTU5NGJjNWM4YmM.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
Supported: replaces, norefersub, extended-refer, X-cisco-serviceuri
User-Agent: Zoiper for Windows 2.38 rev.16635
Allow-Events: presence, kpml
Content-Length: 0

------------------------------------------------------------------------
send 694 bytes to udp/[my_ip]:5060 at 09:12:34.484078:
------------------------------------------------------------------------
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-87743649e21f7162-1---d8754z-;received=my_ip
From: <sip:2500@server_ip;transport=UDP>;tag=513a3e1e
To: <sip:2500@server_ip;transport=UDP>;tag=X2FQ5jtHpBX7B
Call-ID: OWIwZTZkMzcxMzY1MDZiNmRjZTVkYTU5NGJjNWM4YmM.
CSeq: 1 REGISTER
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
WWW-Authenticate: Digest realm="server_ip", nonce="ffe39a68-ec6f-11e3-a4ce-1fbe20af1be2", algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
recv 720 bytes from udp/[my_ip]:45496 at 09:12:36.479168:
------------------------------------------------------------------------
SUBSCRIBE sip:2500@server_ip;transport=UDP SIP/2.0
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-a209ef4012d13d9a-1---d8754z-
Max-Forwards: 70
Contact: <sip:2500@my_pc_ip:5060;transport=UDP>
To: <sip:2500@server_ip;transport=UDP>
From: <sip:2500@server_ip;transport=UDP>;tag=401a6605
Call-ID: N2JlNGRiZmNkOWVkNmRlM2YxMGJiMGY1ZDNmYWI2NTg.
CSeq: 1 SUBSCRIBE
Expires: 3600
Accept: application/simple-message-summary
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
Supported: replaces, norefersub, extended-refer, X-cisco-serviceuri
User-Agent: Zoiper for Windows 2.38 rev.16635
Event: message-summary
Allow-Events: presence, kpml
Content-Length: 0

------------------------------------------------------------------------
send 836 bytes to udp/[my_ip]:5060 at 09:12:36.479367:
------------------------------------------------------------------------
SIP/2.0 202 Accepted
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-a209ef4012d13d9a-1---d8754z-;received=my_ip
From: <sip:2500@server_ip;transport=UDP>;tag=401a6605
To: <sip:2500@server_ip;transport=UDP>;tag=lPtg3gDqmrO6
Call-ID: N2JlNGRiZmNkOWVkNmRlM2YxMGJiMGY1ZDNmYWI2NTg.
CSeq: 1 SUBSCRIBE
Contact: <sip:2500@server_ip:5060>
Expires: 3600
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-sum mary, refer
Subscription-State: active;expires=3600
Content-Length: 0




------------------------------------------------------------------------
recv 672 bytes from udp/[my_ip]:45496 at 09:12:36.484948:
------------------------------------------------------------------------
REGISTER sip:server_ip;transport=UDP SIP/2.0
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-87743649e21f7162-1---d8754z-
Max-Forwards: 70
Contact: <sip:2500@my_pc_ip:5060;rinstance=9d623fe52b86ded4;transport=UDP>
To: <sip:2500@server_ip;transport=UDP>
From: <sip:2500@server_ip;transport=UDP>;tag=513a3e1e
Call-ID: OWIwZTZkMzcxMzY1MDZiNmRjZTVkYTU5NGJjNWM4YmM.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
Supported: replaces, norefersub, extended-refer, X-cisco-serviceuri
User-Agent: Zoiper for Windows 2.38 rev.16635
Allow-Events: presence, kpml
Content-Length: 0

------------------------------------------------------------------------
send 694 bytes to udp/[my_ip]:5060 at 09:12:36.485047:
------------------------------------------------------------------------
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-87743649e21f7162-1---d8754z-;received=my_ip
From: <sip:2500@server_ip;transport=UDP>;tag=513a3e1e
To: <sip:2500@server_ip;transport=UDP>;tag=X2FQ5jtHpBX7B
Call-ID: OWIwZTZkMzcxMzY1MDZiNmRjZTVkYTU5NGJjNWM4YmM.
CSeq: 1 REGISTER
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
WWW-Authenticate: Digest realm="server_ip", nonce="ffe39a68-ec6f-11e3-a4ce-1fbe20af1be2", algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------

freeswitch@internal> recv 720 bytes from udp/[my_ip]:45496 at 09:12:40.479211:
------------------------------------------------------------------------
SUBSCRIBE sip:2500@server_ip;transport=UDP SIP/2.0
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-a209ef4012d13d9a-1---d8754z-
Max-Forwards: 70
Contact: <sip:2500@my_pc_ip:5060;transport=UDP>
To: <sip:2500@server_ip;transport=UDP>
From: <sip:2500@server_ip;transport=UDP>;tag=401a6605
Call-ID: N2JlNGRiZmNkOWVkNmRlM2YxMGJiMGY1ZDNmYWI2NTg.
CSeq: 1 SUBSCRIBE
Expires: 3600
Accept: application/simple-message-summary
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
Supported: replaces, norefersub, extended-refer, X-cisco-serviceuri
User-Agent: Zoiper for Windows 2.38 rev.16635
Event: message-summary
Allow-Events: presence, kpml
Content-Length: 0

------------------------------------------------------------------------
send 836 bytes to udp/[my_ip]:5060 at 09:12:40.479543:
------------------------------------------------------------------------
SIP/2.0 202 Accepted
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-a209ef4012d13d9a-1---d8754z-;received=my_ip
From: <sip:2500@server_ip;transport=UDP>;tag=401a6605
To: <sip:2500@server_ip;transport=UDP>;tag=lPtg3gDqmrO6
Call-ID: N2JlNGRiZmNkOWVkNmRlM2YxMGJiMGY1ZDNmYWI2NTg.
CSeq: 1 SUBSCRIBE
Contact: <sip:2500@server_ip:5060>
Expires: 3600
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-sum mary, refer
Subscription-State: active;expires=3600
Content-Length: 0

------------------------------------------------------------------------
recv 672 bytes from udp/[my_ip]:45496 at 09:12:40.486048:
------------------------------------------------------------------------
REGISTER sip:server_ip;transport=UDP SIP/2.0
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-87743649e21f7162-1---d8754z-
Max-Forwards: 70
Contact: <sip:2500@my_pc_ip:5060;rinstance=9d623fe52b86ded4;transport=UDP>
To: <sip:2500@server_ip;transport=UDP>
From: <sip:2500@server_ip;transport=UDP>;tag=513a3e1e
Call-ID: OWIwZTZkMzcxMzY1MDZiNmRjZTVkYTU5NGJjNWM4YmM.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
Supported: replaces, norefersub, extended-refer, X-cisco-serviceuri
User-Agent: Zoiper for Windows 2.38 rev.16635
Allow-Events: presence, kpml
Content-Length: 0

------------------------------------------------------------------------
send 694 bytes to udp/[my_ip]:5060 at 09:12:40.486253:
------------------------------------------------------------------------
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP my_pc_ip:5060;branch=z9hG4bK-d8754z-87743649e21f7162-1---d8754z-;received=my_ip
From: <sip:2500@server_ip;transport=UDP>;tag=513a3e1e
To: <sip:2500@server_ip;transport=UDP>;tag=X2FQ5jtHpBX7B
Call-ID: OWIwZTZkMzcxMzY1MDZiNmRjZTVkYTU5NGJjNWM4YmM.
CSeq: 1 REGISTER
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
WWW-Authenticate: Digest realm="server_ip", nonce="ffe39a68-ec6f-11e3-a4ce-1fbe20af1be2", algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
sofia profile internal siptrace off


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 05 июн 2014 12:41 
FreeSWITCH_GuRu

Зарегистрирован: 22 авг 2012 09:52
Сообщения: 1710
после SIP/2.0 401 Unauthorized
клиент должен отправить REGISTER, содержащий заголовок Authorization: Digest ... (у вас его нет вообще)
FS ответит на него SIP/2.0 403 Forbidden, если не подошел пароль или нет пользователя, т.е. так же как при действии alwaysauthreject = yes в астериске

успокойтесь нормально всё

пытаетесь заняться безопасностью, а сами даже не знаете что искать.

_________________
ЛС: @rostel
Сообщество: @ru_freeswitch


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 05 июн 2014 14:41 

Зарегистрирован: 31 янв 2014 11:59
Сообщения: 54
искал 401 Unathorized, 404 Not Found в ответ на REGISTER с несуществующим номером


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 27 июн 2014 14:29 
Site Admin

Зарегистрирован: 29 июн 2012 11:19
Сообщения: 224
Коллеги, а почему могут возникать
Цитата:
2014-06-27 13:56:32.113671 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 14:01:33.053848 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 14:01:33.153834 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 14:05:55.114571 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 14:05:55.254555 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 14:17:03.734221 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 14:17:03.874214 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1


От вполне нормальных регистраций с верным паролем? Что можно сделать?

_________________
Если вы нашли решение, опишите его, пожалуйста, на форуме


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 27 июн 2014 15:58 
Site Admin

Зарегистрирован: 29 июн 2012 11:19
Сообщения: 224
Обнаружил, что происходит это каждые 5 минут(в клиенте стоит переригистрация каждые 5 мин - не понятно, правда почему FS это не нравится)
Цитата:
root@VDS ~ # cat /usr/local/freeswitch/log/freeswitch.log | grep -P 'challenge.+1.1.1.1'
2014-06-27 14:48:55.094328 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 14:48:55.094328 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 14:53:52.774624 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 14:53:52.774624 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 14:58:48.774927 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 14:58:48.794905 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:03:49.555161 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:03:49.615252 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:08:50.455390 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:08:50.635416 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:13:57.495614 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:13:57.495614 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:19:19.495535 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:19:19.515514 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:24:14.935836 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:24:15.055855 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1

_________________
Если вы нашли решение, опишите его, пожалуйста, на форуме


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 27 июн 2014 16:03 
Site Admin

Зарегистрирован: 29 июн 2012 11:19
Сообщения: 224
Это бы все не беспокоило - но fail2ban считает это за попытку подбора и банит нормальные IPшники.

_________________
Если вы нашли решение, опишите его, пожалуйста, на форуме


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 27 июн 2014 16:05 
FreeSWITCH_GuRu

Зарегистрирован: 22 авг 2012 09:52
Сообщения: 1710
когда не нравится то так:
Код:
2014-06-27 15:59:27.787673 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'sip-tcp-reg' for [353319@146.2.1.202] from ip 89.23.140.90
2014-06-27 15:59:30.407656 [WARNING] sofia_reg.c:2748 Can't find user [353319@146.2.1.202] from 89.235.140.90
You must define a domain called '146.2.1.202' in your directory and add a user with the id="353319" attribute
2014-06-27 15:59:30.407656 [WARNING] sofia_reg.c:1608 SIP auth failure (REGISTER) on sofia profile 'sip-tcp-reg' for [353319@146.2.1.202] from ip 89.23.140.90
вон оно "auth failure"

"auth challenge" это просто логирование для защиты от SIP_DOS_Attack

_________________
ЛС: @rostel
Сообщество: @ru_freeswitch


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 27 июн 2014 16:33 
Site Admin

Зарегистрирован: 29 июн 2012 11:19
Сообщения: 224
Так от них бы тоже защититься, так как в целом за единицу времени пополам получается - мусора и хороших регистраций:
[+] 
2014-06-27 14:46:50.855881 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [901@100.100.100.100] from ip 37.187.74.126
2014-06-27 14:46:59.075847 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [2002@100.100.100.100] from ip 37.187.74.126
2014-06-27 14:48:55.094328 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 14:48:55.094328 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 14:49:45.493720 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [100972592338044@100.100.100.100] from ip 62.210.131.200
2014-06-27 14:53:52.774624 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 14:53:52.774624 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 14:57:38.595778 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [1002@100.100.100.100] from ip 37.187.74.126
2014-06-27 14:58:48.774927 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 14:58:48.794905 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 14:59:09.994638 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [0000972592338044@100.100.100.100] from ip 62.210.131.200
2014-06-27 15:01:36.212819 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [1001@100.100.100.100] from ip 37.187.74.126
2014-06-27 15:01:40.632791 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [2810201069935845@100.100.100.100] from ip 62.210.99.103
2014-06-27 15:03:49.555161 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:03:49.615252 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:08:39.075535 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [9000972592338044@100.100.100.100] from ip 62.210.131.200
2014-06-27 15:08:50.455390 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:08:50.635416 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:11:57.393084 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [801@100.100.100.100] from ip 37.187.74.126
2014-06-27 15:11:59.413056 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [101@100.100.100.100] from ip 37.187.74.126
2014-06-27 15:13:57.495614 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:13:57.495614 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:18:03.592488 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [9001972592338044@100.100.100.100] from ip 62.210.131.200
2014-06-27 15:19:19.495535 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:19:19.515514 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:22:20.493273 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [900201069935845@100.100.100.100] from ip 62.210.99.103
2014-06-27 15:24:14.935836 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:24:15.055855 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:27:28.953408 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [90972592338044@100.100.100.100] from ip 62.210.131.200
2014-06-27 15:27:31.773381 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [1001@100.100.100.100] from ip 37.187.74.126
2014-06-27 15:28:01.793026 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [201@100.100.100.100] from ip 37.187.74.126
2014-06-27 15:29:15.976091 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:29:15.996239 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:34:16.192332 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:34:16.192332 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:36:59.034331 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [10009972592338044@100.100.100.100] from ip 62.210.131.200
2014-06-27 15:38:22.193263 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [3001@100.100.100.100] from ip 37.187.74.126
2014-06-27 15:39:05.853138 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [301@100.100.100.100] from ip 37.187.74.126
2014-06-27 15:39:17.432710 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:39:17.432710 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:42:59.773825 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [9000201069935845@100.100.100.100] from ip 62.210.99.103
2014-06-27 15:44:26.212724 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:44:26.212724 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:46:28.495171 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [00110972592338044@100.100.100.100] from ip 62.210.131.200
2014-06-27 15:49:31.012893 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:49:31.032889 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:50:33.696128 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [201@100.100.100.100] from ip 37.187.74.126
2014-06-27 15:50:33.776112 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [704@100.100.100.100] from ip 188.165.219.67
2014-06-27 15:51:10.335659 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [102@100.100.100.100] from ip 37.187.74.126
2014-06-27 15:54:33.473122 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 15:54:33.593120 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:55:11.436021 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [0200972592338044@100.100.100.100] from ip 62.210.131.200
2014-06-27 15:59:36.233340 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 15:59:36.253471 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 16:02:18.055344 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [3804@100.100.100.100] from ip 188.165.219.67
2014-06-27 16:03:09.834679 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [002000972592338044@100.100.100.100] from ip 62.210.131.200
2014-06-27 16:04:16.513833 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [3004@100.100.100.100] from ip 188.165.219.67
2014-06-27 16:04:33.093614 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 16:04:33.093614 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 16:09:29.073918 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 16:09:29.113914 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 16:10:15.673347 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 16:10:17.093333 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 16:10:59.292793 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 16:11:07.012705 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 16:11:11.692651 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [00900972592338044@100.100.100.100] from ip 62.210.131.200
2014-06-27 16:11:58.756035 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [90201069935845@100.100.100.100] from ip 62.210.99.103
2014-06-27 16:14:58.013810 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [5304@100.100.100.100] from ip 188.165.219.67
2014-06-27 16:15:16.493566 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [304@100.100.100.100] from ip 188.165.219.67
2014-06-27 16:19:11.094685 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'local' for [0900972592338044@100.100.100.100] from ip 62.210.131.200
2014-06-27 16:20:54.453359 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [ch13@somehost.ru] from ip 1.1.1.1
2014-06-27 16:21:02.213265 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [k202@somehost.ru] from ip 1.1.1.1
2014-06-27 16:25:30.013929 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'local' for [5004@100.100.100.100] from ip 188.165.219.67


Пока, конечно, я в белый лист ip нужный занес. Но это временное решение. На данный момент получается - или защищен от DDOS или не банятся товои IP?

Хотя похоже нужно поиграться с

Цитата:
maxretry = 50
findtime = 30

_________________
Если вы нашли решение, опишите его, пожалуйста, на форуме


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 27 июн 2014 19:22 
FreeSWITCH_GuRu

Зарегистрирован: 22 авг 2012 09:52
Сообщения: 1710
да, эти два параметра и крутить

_________________
ЛС: @rostel
Сообщество: @ru_freeswitch


Вернуться к началу
 Профиль  
 
Показать сообщения за:  Поле сортировки  
Начать новую тему Ответить на тему  [ Сообщений: 29 ]  На страницу Пред.  1, 2, 3

Часовой пояс: UTC + 4 часа


Кто сейчас на конференции

Сейчас этот форум просматривают: нет зарегистрированных пользователей и гости: 259


Вы не можете начинать темы
Вы не можете отвечать на сообщения
Вы не можете редактировать свои сообщения
Вы не можете удалять свои сообщения
Вы не можете добавлять вложения

Найти:
Перейти:  
Powered by phpBB® Forum Software © phpBB Group
Русская поддержка phpBB