nixos

commit 47006418f9106077d7014abd981f998e2db1f1b4
parent e0e9b81302b583c4b4f96e7e49038ddebf3984c4
Author: MTRNord <mtrnord1@gmail.com>
Date:   Wed, 16 Aug 2023 14:22:44 +0200

Fail2ban

Diffstat:
M
nixos/worker-1/configuration.nix
 | 
12
+++++++++---

1 file changed, 9 insertions(+), 3 deletions(-)
diff --git a/nixos/worker-1/configuration.nix b/nixos/worker-1/configuration.nix
@@ -131,9 +131,6 @@
     firewall =
       let
         blockedV4 = [
-          "151.106.32.0/20" # Sip bruteforce
-          "92.204.128.0/20" # Sip bruteforce
-          "165.232.78.17" # Sip bruteforce
           "158.101.19.243" # full-text search scraper https://macaw.social/@angilly/109597402157254670
           "207.231.106.226" # fediverse.network / fedi.ninja
           "45.81.20.80" # instances.social
@@ -209,6 +206,15 @@
   services.fail2ban = {
     extraPackages = [ pkgs.ipset ];
     banaction = "iptables-ipset-proto6-allports";
+    jails = {
+      asterisk = ''
+        filter = asterisk
+        action = iptables-allports[name=ASTERISK, protocol=all]
+        maxretry = 4
+        findtime = 21600
+        bantime = 86400
+      '';
+    };
   };
 
   # packages that are not flakes