olegtsss, транспортных протоколов транспортного уровня (Layer 4) модели OSI всего два, только udp & tcp
Протокол TLS stands for "transport layer security".
protocol details:
SSL/TLS uses an underlying transport medium that provides a bidirectional stream of bytes. That would put it somewhere above layer 4.
SSL/TLS organizes data as records, that may contain, in particular, handshake messages. Handshake messages look like layer 5. This would put SSL/TLS at layer 6 or 7.
However, what SSL/TLS conveys is "application data", which is, in fact, a bidirectional stream of bytes. Applications that use SSL/TLS really use it as a transport protocol. They then use their own data representation and messages and semantics within that "application data". Therefore, SSL/TLS cannot be, in the OSI model, beyond layer 4.
Thus, in the OSI model, SSL/TLS must be in layer 6 or 7, and, at the same time, in layer 4 or below. The conclusion is unescapable: the OSI model does not work with SSL/TLS. TLS is not in any layer.
Даже в правилах видно, что это tcp
fail2ban-asterisk-tcp tcp -- * * 0.0.0.0/0 0.0.0.0/0
Также не понимаю у вас destination ports 555555555
bind=0.0.0.0:4444444444444
портов всего 65 536, как tcp, так и udp.
Фильтровать атаки через fail2ban достаточно по дефолтному для tls порту tcp 5061. Или какой у вас там -
Код: Выделить всё
# netstat -nlp|grep asterisk
tcp 0 0 10.233.248.4:5060 0.0.0.0:* LISTEN 4701/asterisk
tcp 0 0 10.233.248.4:5061 0.0.0.0:* LISTEN 4701/asterisk
