Revision as of 09:31, 13 July 2015

Make sure that configuration is correct on Caller side and it is really sending call to right IP (your server IP).

Check if IP is not blocked

Make sure that iptables are not blocking Caller IP on server side. Command to do that:

# iptables -L -n | grep DROP | grep 11.22.33.44

Where 11.22.33.44 is Caller's Public IP address.

If IP is blocked by iptables in your server output, will look like this:

DROP       all  --  11.22.33.44        0.0.0.0/0

If you are not getting such line, IP is not blocked by iptables on your server.

iptables -nL --line-numbers | grep 11.22.33.44

output will be like:

4    DROP       all  --  11.22.33.44       0.0.0.0/0

notice that first number and then place in following command to delete rule which block IP:

iptables -D INPUT 4

After this command IP will be unblocked.

If you are sure this IP should never be blocked, do following steps:

Open file /etc/fail2ban/jail.conf with you favorite text editor.

Find the line which starts with

ignoreip = 127.0.0.1

add IP which was blocked to end of this line so it would look like that:

ignoreip = 127.0.0.1 11.22.33.44

restart fail2ban service to apply changes:

service fail2ban restart

@@ Line 1: / Line 1: @@
 * Make sure that configuration is correct on Caller side and it is really sending call to right IP (your server IP).
+<br>
+= Check if IP is not blocked =
 * Make sure that iptables are not blocking Caller IP on server side. Command to do that:
@@ Line 12: / Line 16: @@
 If you are not getting such line, IP is not blocked by iptables on your server.
+<br>
-'''To unblock IP:'''
+= Unblock IP =
   iptables -nL --line-numbers | grep 11.22.33.44
@@ Line 27: / Line 31: @@
 After this command IP will be unblocked.
+<br>
+= Add IP to whitelist so it would not be blocked again =
-'''To add IP to whitelist so it would not be blocked again by fail2ban:'''
+If you are sure this IP should never be blocked, do following steps:
 Open file /etc/fail2ban/jail.conf with you favorite text editor.