tested all those 3 commands on my box and it worked fine... may be there
is leftover chain left or smth... so do
/etc/init.d/fail2ban stop
iptables -L -n -v | grep fail2ban
# should be empty! if not -that would be a reason I guess ;-) just prune
# those manually and start fail2ban
and if it is then run
iptables -N fail2ban-ssh
iptables -A fail2ban-ssh -j RETURN
iptables -I INPUT -p tcp -m multiport --dports ssh -j fail2ban-ssh
and if those fail -- what do they spit out? what version of iptables?
On Mon, 10 Mar 2008, Jean-Luc Coulon (f5ibh) wrote:
> Package: fail2ban
> Version: 0.8.2-1
> Severity: normal
> Hi,
> Versions earlier then 0.7.5-2 return and error ant start:
> <snip>
> 2008-03-10 14:07:13,559 fail2ban.actions.action: INFO Set actionBan =
> iptables -I fail2ban-<name> 1 -s <ip> -j DROP
> 2008-03-10 14:07:13,560 fail2ban.actions.action: INFO Set actionStop =
> iptables -D INPUT -p <protocol> -m multiport --dports <port> -j
> fail2ban-<name>
> iptables -F fail2ban-<name>
> iptables -X fail2ban-<name>
> 2008-03-10 14:07:13,562 fail2ban.actions.action: INFO Set actionStart =
> iptables -N fail2ban-<name>
> iptables -A fail2ban-<name> -j RETURN
> iptables -I INPUT -p <protocol> -m multiport --dports <port> -j
> fail2ban-<name>
> 2008-03-10 14:07:13,563 fail2ban.actions.action: INFO Set actionUnban =
> iptables -D fail2ban-<name> -s <ip> -j DROP
> 2008-03-10 14:07:13,564 fail2ban.actions.action: INFO Set actionCheck =
> iptables -n -L INPUT | grep -q fail2ban-<name>
> 2008-03-10 14:07:13,741 fail2ban.actions.action: ERROR iptables -N
> fail2ban-ssh
> iptables -A fail2ban-ssh -j RETURN
> iptables -I INPUT -p tcp -m multiport --dports ssh -j fail2ban-ssh returned
> 100
> <snip/>
> Regards
> Jean-Luc
> -- System Information:
> Debian Release: lenny/sid
> APT prefers unstable
> APT policy: (500, 'unstable')
> Architecture: amd64 (x86_64)
> Kernel: Linux 2.6.25-rc5-k8-1 (SMP w/2 CPU cores; PREEMPT)
> Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/bash
> Versions of packages fail2ban depends on:
> ii lsb-base 3.2-4 Linux Standard Base 3.2 init
> scrip
> ii python 2.4.4-6 An interactive high-level
> object-o
> ii python-central 0.5.15-0.1 register and build utility for
> Pyt
> Versions of packages fail2ban recommends:
> ii iptables 1.4.0-3 administration tools for packet
> fi
> -- no debconf information
--
Yaroslav Halchenko
Research Assistant, Psychology Department, Rutgers-Newark
Student Ph.D. @ CS Dept. NJIT
Office: (973) 353-5440x263 | FWD: 82823 | Fax: (973) 353-1171
101 Warren Str, Smith Hall, Rm 4-105, Newark NJ 07102
WWW: http://www.linkedin.com/in/yarik
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
