[freeswitch-dos-udp]
enabled  = false
port     = 5060,5061,5080,5081
protocol = all
filter   = freeswitch-dos
backend  = systemd
action   = iptables-multiport[name=freeswitch-dos-udp, port="5060,5061,5080,5081", protocol=udp]
maxretry = 50
findtime = 30
bantime  = 6000
ignorecommand = /usr/bin/freeswitch-fail2ban-registration <ip>

[freeswitch-dos-tcp]
enabled  = false
port     = 5060,5061,5080,5081
protocol = all
filter   = freeswitch-dos
backend  = systemd
action   = iptables-multiport[name=freeswitch-dos-tcp, port="5060,5061,5080,5081", protocol=tcp]
maxretry = 50
findtime = 30
ignorecommand = /usr/bin/freeswitch-fail2ban-registration <ip>

[freeswitch-ip-tcp]
enabled  = true
port     = 5060,5061,5080,5081
protocol = all
filter   = freeswitch-ip
backend  = systemd
action   = iptables-multiport[name=freeswitch-ip-tcp, port="5060,5061,5080,5081", protocol=tcp]
maxretry = 1
findtime = 30
bantime  = 86400
ignorecommand = /usr/bin/freeswitch-fail2ban-registration <ip>

[freeswitch-ip-udp]
enabled  = true
port     = 5060,5061,5080,5081
protocol = all
filter   = freeswitch-ip
backend  = systemd
action   = iptables-multiport[name=freeswitch-ip-udp, port="5060,5061,5080,5081", protocol=udp]
maxretry = 1
findtime = 30
bantime  = 86400
ignorecommand = /usr/bin/freeswitch-fail2ban-registration <ip>

[freeswitch-udp]
enabled  = true
port     = 5060,5061,5080,5081
protocol = all
filter   = freeswitch2
backend  = systemd
action   = iptables-multiport[name=freeswitch-udp, port="5060,5061,5080,5081", protocol=udp]
maxretry = 5
findtime = 600
bantime  = 600
ignorecommand = /usr/bin/freeswitch-fail2ban-registration <ip>
#          sendmail-whois[name=FreeSwitch, dest=root, sender=fail2ban@example.org] #no smtp server installed

[freeswitch-tcp]
enabled  = true
port     = 5060,5061,5080,5081
protocol = all
filter   = freeswitch2
backend  = systemd
action   = iptables-multiport[name=freeswitch-tcp, port="5060,5061,5080,5081", protocol=tcp]
maxretry = 5
findtime = 600
bantime  = 600
ignorecommand = /usr/bin/freeswitch-fail2ban-registration <ip>

[freeswitch-session-tcp]
enabled  = true
port     = 5060,5061,5080,5081
protocol = all
filter   = freeswitch-session
backend  = systemd
action   = iptables-multiport[name=freeswitch-session-tcp, port="5060,5061,5080,5081", protocol=tcp]
maxretry = 3
findtime = 30
bantime  = 86400

[freeswitch-session-udp]
enabled  = true
port     = 5060,5061,5080,5081
protocol = all
filter   = freeswitch-session
backend  = systemd
action   = iptables-multiport[name=freeswitch-session-udp, port="5060,5061,5080,5081", protocol=udp]
maxretry = 3
findtime = 30
bantime  = 86400

[sshd]
enabled = true
port = 22
protocol = tcp
filter = sshd
backend = systemd
action = iptables-allports[name=sshd, protocol=all]
