https://bugs.contribs.org/show_bug.cgi?id=10644
Bug ID: 10644
Summary: 05IgnoreIP generates ERROR during expand-template
Classification: Contribs
Product: SME Contribs
Version: Futur
Hardware: ---
OS: ---
Status: UNCONFIRMED
Severity: normal
Priority: P3
Component: smeserver-fail2ban
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
Target Milestone: ---
expand-template /etc/fail2ban/jail.conf generates this output:
> # expand-template /etc/fail2ban/jail.conf
> WARNING in /etc/e-smith/templates//etc/fail2ban/jail.conf/05IgnoreIP: Use of
> uninitialized value $_[0] in pattern match (m//) at
> /usr/share/perl5/Net/IPv4Addr.pm line 93.
> WARNING in /etc/e-smith/templates//etc/fail2ban/jail.conf/05IgnoreIP: Use of
> uninitialized value $error[2] in join or string at
> /usr/share/perl5/Carp/Heavy.pm line 214.
> ERROR in /etc/e-smith/templates//etc/fail2ban/jail.conf/05IgnoreIP: Program
> fragment delivered error <<Net::IPv4Addr: invalid IPv4 address:
> at /etc/e-smith/templates//etc/fail2ban/jail.conf/05IgnoreIP line 14>> at
> template line 1
> ERROR: Template processing failed for //etc/fail2ban/jail.conf: 2 fragments
> generated warnings, 1 fragment generated errors
> at /sbin/e-smith/expand-template line 45
"grep -h 'ERROR in /etc/e-smith/templates//etc/fail2ban/jail.conf/05IgnoreIP'
/var/log/messages*"
shows that the error first appeared on Aug 15
/var/log/yum/yum.log shows that I updated SOGo and the kernel on that date.
The kernel update was from kernel-2.6.32-754.2.1 to kernel-2.6.32-754.3.5.
rpm -qa smeserver-fail2ban
> smeserver-fail2ban-0.1.18-1.el6.fws.noarch
config show fail2ban
> fail2ban=service
> BanTime=259200
> FindTime=43200
> IgnoreIP=205.175.220.56/29,69.46.36.28/32
> IgnoreIPNote=69.46.36.28: noc1.wordfence.com
> Mail=disabled
> [email protected]
> MaxRetry=2
> PortscanBanTime=1814400
> PortscanFindTime=259200
> PortscanMaxRetry=4
> RecidiveBanTime=1814400
> RecidiveFindTime=259200
> RecidiveMaxRetry=3
> status=enabled
Diagnostics tried:
- remove custom property IgnoreIPNote
- remove property IgnoreIP
- re-add property IgnoreIP with no content
- set IgnoreIP to only one IP - with and without CIDR suffix
This is what I ended up doing to get expand-template to complete:
- create /etc/e-smith/templates-custom/etc/fail2ban/jail.conf/05IgnoreIP:
> # manual ignoreip list from
> # /etc/e-smith/templates-custom/etc/fail2ban/jail.conf/05IgnoreIP
> ignoreip = 205.175.220.56/29 69.46.36.28/32
--
You are receiving this mail because:
You are the QA Contact for the bug._______________________________________________
Mail for each SME Contribs bug report
To unsubscribe, e-mail [email protected]
Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
