Allowlist Telnyx in both fail2ban jails

FixKlusterServices
Shipped
August 26, 2026 at 11:03 PM UTC
Author
Kamo
Commit
a29c857

Adds the Telnyx US signaling addresses (192.76.120.10, 64.16.250.10 — sip.telnyx.com) to ignoreip now that the carrier trunk is provisioned. Also overrides ignoreip for the image's own [asterisk] jail. That jail carries a hardcoded ignoreip listing only RFC1918 space, which silently beats the [DEFAULT] block for that jail — so the carrier would have been exempt in our jail and still bannable in theirs. jail.d is read after jail.local, so re-declaring the key here is what actually wins. This matters because that jail runs maxretry=2 / findtime=30 / bantime=1w: a carrier fumbling auth twice earns a week-long ban, which presents as "the carrier never sends us anything" — indistinguishable from a trunk that was never provisioned.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing