1

I'm working on a new build of my FTP server and I can't get the ssh part of fail2ban to match anything. Manually checking with the regex command shows nothing. Pam and proftpd are working fine, just not ssh.

Any ideas? Anyone already solved it, maybe? (Hope hope hope)

1
  • can you add info on what strings you have configured to match on, and then a pcap dump of the SSH connections you are making
    – Rory Alsop
    Jul 6, 2011 at 8:28

1 Answer 1

0

Are you using a different port than default?

My guess is that fail2ban reads /etc/services and in that file your ssh is listed as 22.

1
  • This was close. Turns out I was using a non-default logging location... Go figure.
    – mcbobbo
    Jul 6, 2011 at 21:58

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .