GEO IP Firewall Issue

› VitalPBX Community Support › General Discussion › GEO IP Firewall Issue

  • Post
    • November 15, 2019 at 2:52 pm
    krzykat
    Participant
    Up
    0
    Down
    ::

    I have GEO IP module installed with access limited to US and UK.  However, on the asterisk cli, I am constantly getting attempts from a French IP:

    [2019-11-15 09:51:08] NOTICE[1673]: chan_sip.c:28935 handle_request_register: Registration from ‘<sip:2021@XXX.XX.XX.XX>’ failed for ‘163.172.205.78:59219’ – Not a local domain
    [2019-11-15 09:51:31] NOTICE[1673]: chan_sip.c:28935 handle_request_register: Registration from ‘<sip:2022@XXX.XX.XX.XX>’ failed for ‘163.172.205.78:54613’ – Not a local domain

    Any thoughts on how I can find out why it is allowing this attempt?

    0
Viewing 4 replies - 1 through 4 (of 4 total)
  • Replies
    • November 15, 2019 at 3:34 pm
    Jose Miguel Rivera
    Keymaster
    NI
    Up
    0
    Down
    ::

    There some IP address that are not listed on country zones. We are updating this IP blocks on each new version of the add-on.

    0
    • November 17, 2019 at 1:35 pm
    wroot
    Participant
    Up
    0
    Down
    ::

    mrivera,

    Is there a way to manually update zones?

    wroot

    0
    • November 18, 2019 at 3:12 pm
    Jose Miguel Rivera
    Keymaster
    NI
    Up
    0
    Down
    ::

    All the firewall zones are located in the following path:

    /var/lib/ombutel/firewall_zones/

    0
    • November 18, 2019 at 3:36 pm
    krzykat
    Participant
    Up
    0
    Down
    ::

    Excellent.

    So I went to /var/lib/ombutel/firewall_zones/

    Since I know this is a french IP, I edited fr.zone and added to the top:
    163.172.205.0/24

    Then I went to my vitalpbx portal and untagged France, save/apply.  then tagged again, save/apply to insure that it would reload the file, and BOOM – they’re blocked. 

    Works perfect

    0
Viewing 4 replies - 1 through 4 (of 4 total)

Tagged: 

  • The topic ‘GEO IP Firewall Issue’ is closed to new replies.