A SIP firewall your Odoo manages

Every internet-facing PBX gets hammered by brute-force scanners. Connect NG answers with a dedicated firewall service: it watches FreeSWITCH authentication events over ESL and bans offending IPs at the kernel level with ipset and iptables, with known scanner user-agents blocked outright.

The Odoo side owns the policy: whitelists, blacklists, ban events, and one-click unbans are records with an audit trail. The service authenticates with a single shared bearer token (one secret to rotate, one decision record explaining why), and its health endpoint reports real readiness, not a hopeful 200.