ELTEX SMG-1016M, Руководство по эксплуатации

Страница: 189 / 441

SMG Digital Gateway
189
Upload PEM certificate and key
This section allows uploading generated and signed РЕМ certificate and key. To upload a file, select its
type in drop-down menu, click "Browse", select the file and click "Upload".
After uploading of the certificate and key, please, restart the web server using "Restart WEB-
server" button.
3.1.13.2 Dynamic firewall
Dynamic firewall — is a utility that tracks attempts of access to various services. When constantly
repeated unsuccessful access attempts from the same IP address/host are discovered, fail2ban blocks all further
access attempts from this IP address/host.
The following actions may be identified as an unsuccessful access attempt:

Brute forcing web configurator or SSH authentication data, i.e. attempt to log in to the
management interface using wrong login or password.

Brute forcing authentication data — reception of REGISTER requests from known IP address but
containing wrong authentication data.

Reception of requests (REGISTER, INIVITE, SUBSCRIBE and others) from unknown IP address.

Reception of unknown requests via SIP port.
Parameters:

Enable — launch dynamic firewall utility.

Block time, seconds — time in seconds during which access from the suspicious address will be
banned.