The fail2ban tag has no wiki summary.
1
vote
1answer
192 views
fail2ban broken after dist upgrade
My fail2ban install is broken after a dist update. I have no idea why it stopped to work. The logfile is over weeks 0 byte. Even if I can see in my server logs that the client should be blocked.
Here ...
1
vote
1answer
515 views
How to set fail2ban with apf?
I just installed fail2ban and the apf firewall. Those 2 seems to be not working together. Fail2ban have added some ipatble rules but they are not working. When I issue "/etc/init.d/iptables status" ...
0
votes
2answers
118 views
fail2ban or denyhosts to block invalid username login attempts
Is there a way to automatically block IP address when a user tries to login as any invalid username? I already have:
[ssh]
enabled = true
port = ssh
filter = sshd
logpath = /var/log/auth.log
...
1
vote
1answer
56 views
Configure Fail2Ban with bash script
I'm trying to configure the /etc/fail2ban/jail.local config with an bash script. I was thinking to use sed and regular expression to change the sections I need.
sed -i "s/^bantime = 600/bantime = ...
0
votes
0answers
453 views
fail2ban is not sending mail when it bans an ip!
I have configured fail2ban to send me a mail when it bans an IP, but it is not working. I get a message when the jails start and stop but nothing else .
I am using ssmtp to send mail via Google Mail.
...
3
votes
2answers
3k views
What are fail2ban's log iptables “returned NNN” entries? (Fail2ban is failing to ban)
In my fail2ban.log there are some entries the meaning of which I don't understand (and haven't found searching around)...
I have several "jails", and I have created one particular one that bans IP's ...
7
votes
2answers
1k views
potential ufw and fail2ban conflicts
Will running both fail2ban and ufw cause problems? I noticed that fail2ban modifies iptables rules, but ufw already has a ton of iptables rules defined... so I'm not sure if fail2ban will mess these ...
0
votes
0answers
535 views
fail2ban won't start [closed]
fail2ban does not start at boot, and I can't start it either by:
1.- sudo service fail2ban restart, which shows:
* Restarting authentication failure monitor fail2ban [fail]
or
...
1
vote
1answer
212 views
fail2ban doesn't match anything
I'm working on a new build of my FTP server and I can't get the ssh part of fail2ban to match anything. Manually checking with the regex command shows nothing. Pam and proftpd are working fine, just ...
3
votes
1answer
530 views
Fail2ban misses some relay attempts
I have some relay attempts like these in my mail.log (they total 281 connection attempts in less than 3 minutes):
May 16 04:58:30 MyServer postfix/smtpd[18950]: connect from unknown[xx.yy.zzz.www]
...
