Le 10.03.2008 19:49:04, Yaroslav Halchenko a écrit : >well -- try to do not from sudo (just to eliminate any possible >weirdness) > >also -- > >strace -fF iptables -I INPUT -p tcp -m multiport --dports ssh -j >fail2ban-ssh > >might give you idea of what actually it couldn't open > >also make sure multiport kernel module is loaded >lsmod | grep multiport >
It is the good guess... My kernel was not compiled with multiport. zgrep -i multiport /proc/config.gz # CONFIG_NETFILTER_XT_MATCH_MULTIPORT is not set It is repaired now. Thank you for your patience. Regards Jean-Luc
pgpqu28rLxPR9.pgp
Description: PGP signature
