# PJSIP bound port / Fail2ban port mismatch

**URL:** <https://forums.vitalpbx.org/t/pjsip-bound-port-fail2ban-port-mismatch/6456>\
**Category:** Wish List\
**Created:** [September 18, 2026, 3:45pm UTC](https://forums.vitalpbx.org/t/pjsip-bound-port-fail2ban-port-mismatch/6456 "2026-09-18T15:45:21Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![telsupport](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/t/ad7895/32.png) [@telsupport](https://forums.vitalpbx.org/u/telsupport)\
**Post date:** [September 18, 2026, 3:45pm UTC](https://forums.vitalpbx.org/t/pjsip-bound-port-fail2ban-port-mismatch/6456/1 "2026-09-18T15:45:21Z")

</div>

Hi,

When changing the bound port for PJSIP in PJSIP Settings, the port setting for the asterisk jail in /etc/fail2ban/jail.conf isn’t changed accordingly. This causes SIP traffic from banned IPs in the asterisk jail to still be processed by asterisk.

Support has provided us with a manual fix, but it’d nice if it could be officially patched in the next release.

---

<div class="post-metadata">

**Author:** ![sayed](https://forums.vitalpbx.org/user_avatar/forums.vitalpbx.org/sayed/32/1223_2.png) [@sayed](https://forums.vitalpbx.org/u/sayed)\
**Post date:** [September 20, 2026, 8:23am UTC](https://forums.vitalpbx.org/t/pjsip-bound-port-fail2ban-port-mismatch/6456/2 "2026-09-20T08:23:57Z")

</div>

isn’t the rules are taken and applied from jail.local file not jail.conf file?!

Could you or anyone else check and confirm?

---

<div class="post-metadata">

**Author:** ![telsupport](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/t/ad7895/32.png) [@telsupport](https://forums.vitalpbx.org/u/telsupport)\
**Post date:** [September 21, 2026, 1:00pm UTC](https://forums.vitalpbx.org/t/pjsip-bound-port-fail2ban-port-mismatch/6456/3 "2026-09-21T13:00:32Z")

</div>

Some parameters are set in jail.local, indeed. But the port used by the iptables rules is set in jail.conf.

I’m talking about those rules:  
-A vpbx\_fail2ban -p tcp -m multiport --dports 5060 -m set --match-set f2b-asterisk-tcp src -j REJECT --reject-with icmp-port-unreachable  
-A vpbx\_fail2ban -p udp -m multiport --dports 5060 -m set --match-set f2b-asterisk-udp src -j REJECT --reject-with icmp-port-unreachable