On 31-08-15 15:25, Ali Metin wrote:
>
>
>
>>> So what is the answer? How can I load xt_set module in my case to
>>> make fail2ban work?
>>
>> Are they a requirement for fail2ban? My openSUSE 13.1 server is
>> running kernel 3.11.10 desktop and fail2ban 0.9.2 and doesn't have
>> xt_set loaded and the modules are available to load.
>> /lib/modules/3.11.10-29-desktop/kernel/net/netfilter/xt_set.ko
>>
>
> I guess so, at least some part of fail2ban to work. We came back to
> original point I have been. For 3.1* kernels I have them too. But
> fail2ban complains.
>
Hi,
If your cloud provider offers a kernel without ipset support (i.e.
kernel is too old, module unavailable and not compiled in, etc), then
don't use a jail method that requires ipset. Update your f2b
configuration to use a method that does not use ipset. (You also could
try to get your cloud provider to configure a suitable kernel for you,
but don't get your hopes up).
If you think you did just that, and f2b is still complaining, then share
your f2b configuration and the exact error message.
Regards,
Tom
------------------------------------------------------------------------------
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
