hello,

im stuck within  a problem and i dont know how to go on,

i have
fail2ban running on debian vserver somwhere in internet
everything is state of the art (regulary updates)

more or less standart (nothing fancy from my side (i guess))

although fail2ban works fine with the "normal" ip adress of the server,
there is another ip address also connected to this same server which
fail2ban seems to do nothing.
Even if i manualy ban a ip there is ongoing ssh connections from exactly
this banned ip
(banned via client  # fail2ban-client set ssh banip 103.41.124.19)

i guess its not a problem with fail2ban itself , but i hope someone out
there know where my mistake lays

i guess so, because i also cannot find any clue for this ip in any of
the logs (used # cat /var/log/* |grep 123.456.789.0 ) while for any
other actions i can find endless clues ...
so my guess is that fail2ban fails to work because they are no entrys in
any logs to use for the program to work (and thats how fail2ban works -
as i understand)

thx for your suggestions
Jens



------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to