Hi,
When changing the bound port for PJSIP in PJSIP Settings, the port setting for the asterisk jail in /etc/fail2ban/jail.conf isn’t changed accordingly. This causes SIP traffic from banned IPs in the asterisk jail to still be processed by asterisk.
Support has provided us with a manual fix, but it’d nice if it could be officially patched in the next release.
isn’t the rules are taken and applied from jail.local file not jail.conf file?!
Could you or anyone else check and confirm?
Some parameters are set in jail.local, indeed. But the port used by the iptables rules is set in jail.conf.
I’m talking about those rules:
-A vpbx_fail2ban -p tcp -m multiport --dports 5060 -m set --match-set f2b-asterisk-tcp src -j REJECT --reject-with icmp-port-unreachable
-A vpbx_fail2ban -p udp -m multiport --dports 5060 -m set --match-set f2b-asterisk-udp src -j REJECT --reject-with icmp-port-unreachable