diff --git a/config/filter.d/freeswitch.conf b/config/filter.d/freeswitch.conf index 13204a1e..70a1b810 100644 --- a/config/filter.d/freeswitch.conf +++ b/config/filter.d/freeswitch.conf @@ -10,7 +10,6 @@ failregex = ^\.\d+ \[WARNING\] sofia_reg\.c:\d+ SIP auth (failure|challenge) \((REGISTER|INVITE)\) on sofia profile \'[^']+\' for \[.*\] from ip $ ^\.\d+ \[WARNING\] sofia_reg\.c:\d+ Can't find user \[\d+@\d+\.\d+\.\d+\.\d+\] from $ - ^\.\d+ \[DEBUG\] sofia\.c:\d+ IP Rejected by acl "\S+"\. Falling back to Digest auth\.$ ignoreregex = @@ -18,3 +17,5 @@ ignoreregex = # http://wiki.freeswitch.org/wiki/Fail2ban # Thanks to Jim on mailing list of samples and guidance # +# No need to match the following. Its a duplicate of the SIP auth regex. +# ^\.\d+ \[DEBUG\] sofia\.c:\d+ IP Rejected by acl "\S+"\. Falling back to Digest auth\.$ diff --git a/testcases/files/logs/freeswitch b/testcases/files/logs/freeswitch index 8b0ebec4..f151995c 100644 --- a/testcases/files/logs/freeswitch +++ b/testcases/files/logs/freeswitch @@ -2,7 +2,7 @@ 2013-12-31 17:39:54.767815 [WARNING] sofia_reg.c:1533 SIP auth challenge (INVITE) on sofia profile 'internal' for [011448708752617@192.168.2.51] from ip 81.94.202.251 # failJSON: { "time": "2013-12-31T17:39:54", "match": true, "host": "5.11.47.236" } 2013-12-31 17:39:54.767815 [WARNING] sofia_reg.c:1478 SIP auth failure (INVITE) on sofia profile 'internal' for [000972543480510@192.168.2.51] from ip 5.11.47.236 -# failJSON: { "time": "2013-12-31T17:39:54", "match": true, "host": "185.24.234.141" } +# failJSON: { "time": "2013-12-31T17:39:54", "match": false } 2013-12-31 17:39:54.767815 [DEBUG] sofia.c:7954 IP 185.24.234.141 Rejected by acl "domains". Falling back to Digest auth. # failJSON: { "time": "2013-12-31T17:39:54", "match": true, "host": "5.11.47.236" }