Proper way to drop traffic

[terrible-employee-77]

I've tried the fail2ban-client route to fusionpbx, freeswitch, and then a raw drop via an iptables command. I'm still seeing traffic coming from an IP. What is the proper way to block an IP on a fusion PBX system, assume I have to alter its location in the iptables line up.

Kinda a bugger, ya'know? Think it might be because I'm tired.

 

[DigitalDaz]

All you are seeing is single packets, this is no problem. You cannot stop UDP traffic entering your interface, that is what you are seeing.

The only way to block it completely would be on an upstream firewall.

What you are seeing shouldn't be causing you any problems, this traffic is not getting to freeswitch. sngrep sees the raw interface.