FC 23 distro running here... Installed packages:
fail2ban-server-0.9.3-1.fc23.noarch fail2ban-sendmail-0.9.3-1.fc23.noarch fail2ban-systemd-0.9.3-1.fc23.noarch I've got sshd setup as follows in jail.local: [DEFAULT] bantime = 86400 findtime = 14400 maxretry = 3 ignoreip = 127.0.0.0/8 192.168.0.0/24 banaction = firewallcmd-ipset sender = [email protected] [sshd] action = %(action_xarf)s enabled = true The IP ban works but the email does not...here's an except from /var/log/fail2ban.log: 2016-05-09 18:28:46,890 fail2ban.actions [8445]: NOTICE [sshd] Ban 192.168.0.1 2016-05-09 18:28:46,998 fail2ban.actions [8445]: ERROR Failed to execute ban jail 'sshd' action 'xarf-login-attack' info 'CallingMap({'ipjailmatches': <function <lambda> at 0x7f3cef93d848>, 'matches': u'2016-05-09T18:26:56.440381 host.private sshd[8593]: Failed password for zzzz from 192.168.0.1 port 35304 ssh2\n2016-05- 09T18:26:59.494175 host.private sshd[8593]: Failed password for zzzz from 192.168.0.1 port 35304 ssh2\n2016-05-09T18:28:46.278531 host.private sshd[8615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.0.1 user=zzzz', 'ip': '192.168.0.1', 'ipmatches': <function <lambda> at 0x7f3cef93d9b0>, 'ipfailures': <function <lambda> at 0x7f3cef93d6e0>, 'time': 1462832926.890728, 'failures': 3, 'ipjailfailures': <function <lambda> at 0x7f3cef93d7d0>})': 'bool' object is not iterable 2016-05-09 18:28:47,675 fail2ban.filter [8445]: INFO [sshd] Found 192.168.0.1 Seems like ipmatches, ipfailures, and ipjailfailures are not being found, causing the failure. All suggestions appreciated please! ------------------------------------------------------------------------------ Mobile security can be enabling, not merely restricting. Employees who bring their own devices (BYOD) to work are irked by the imposition of MDM restrictions. Mobile Device Manager Plus allows you to control only the apps on BYO-devices by containerizing them, leaving personal data untouched! https://ad.doubleclick.net/ddm/clk/304595813;131938128;j _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
