You are not logged in.

#1 2015-08-06 07:41:01

sacarde
Member
Registered: 2006-07-14
Posts: 389

[solved] fail2ban problem

hi,
   I install and configure fail2ban following wiki, thi is my config (.../jail.d/ssh-iptables.conf):

enabled  = true
port     = ssh
filter   = sshd
action   = iptables[name=SSH, port=ssh, protocol=tcp]
           sendmail[name=SSH, dest=sacarde@localhost, sender=fail2ban@mail.com]
logpath  = /var/log/auth.log
maxretry = 2

when I start service I view:

ago 06 08:18:57 arch64 systemd[1]: Starting Fail2Ban Service...
ago 06 08:19:13 arch64 fail2ban-client[448]: 2015-08-06 08:19:13,449 fail2ban.server    ....2
ago 06 08:19:13 arch64 fail2ban-client[448]: 2015-08-06 08:19:13,449 fail2ban.server    ...de
ago 06 08:19:13 arch64 fail2ban-client[448]: ERROR  NOK: ('Failed to change log target',)
ago 06 08:19:15 arch64 systemd[1]: Started Fail2Ban Service.


but if I try to login with a remote vm and I wrong 3 times password, it doesnot block me


can you help me?



thank you

Last edited by sacarde (2015-08-07 15:15:29)

Offline

#2 2015-08-06 09:35:34

sacarde
Member
Registered: 2006-07-14
Posts: 389

Re: [solved] fail2ban problem

I install: python-systemd

and insert in config:

backend = systemd


now ip is banned OK (with notice emailed)


p.s.


remains: ERROR  NOK: ('Failed to change log target'

Last edited by sacarde (2015-08-06 09:38:14)

Offline

Board footer

Powered by FluxBB