Not sure if it availible for 4.x Version but for 5.x There is a tcp connection closed event route https://kamailio.org/docs/modules/4.4.x/modules/tcpops.html#tcpops.f.tcp_ena... You can try to play around it to get ip that distorbs you.
Probably these will be a lot of attempts during small period of time from the same ip.
On Wed, 16 Oct 2019, 08:55 Juha Heinanen, jh@tutpro.com wrote:
Yuriy Gorlichenko writes:
Looks no, because connection must be established for handling it in the config file. This error fired by ssl library during Negotiation process.
But you can try tcpdump, at least you will see Who tries to established connection
Yes, I could do that, but I would rather get the IP address to syslog so that I could fail2ban it.
-- Juha
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users