Add fail2ban & iptables

[pergolafabio]

Can you add those and make it configurable? It's to protect our PBX from outside

[felipecrs]

In the freepbx docker image, fail2ban requires --privileged, which is very discouraged in add-ons and would require a manual step in the installation. Not to mention it would decrease the score of the add-on in overall to 1, I think.

Just mentioning.

[pergolafabio]

Yeah , but protecting an local hosted app is also important, so I dont care about score :-)

[Tekno-man]

In the freepbx docker image,

Is this also the case with asterisk rather than FreePBX?

I was looking at this as my ref https://medium.com/@jamesemyn/intrusion-prevention-for-astersik-with-fail2ban-iptables-2c7e907bae4c

[felipecrs]

I think that if we manage to make TECH7Fox/asterisk-hass-integration#45 work, we won't need to have any port exposed outside. Thus, probably we won't need to bother about these firewall things.

[felipecrs]

@pergolafabio I think the best thing that can be done is to leverage fail2ban from Home Assistant for the job, as in #178. I'm closing this issue in favor of #178, but if you disagree we can reopen.