On Mon, Aug 24, 2020 at 1:01 PM Jason Long <hack3r...@yahoo.com> wrote:

> Thank you so much.
> The content of "00-firewalld.conf" file is:
>
> $ cat /etc/fail2ban/jail.d/00-firewalld.conf
>
> # This file is part of the fail2ban-firewalld package to configure the use
> of
> # the firewalld actions as the default actions. You can remove this package
> # (along with the empty fail2ban meta-package) if you do not use firewalld
> [DEFAULT]
> banaction = firewallcmd-rich-rules[actiontype=<multiport>]
> banaction_allports = firewallcmd-rich-rules[actiontype=<allports>]
>
>
> If I remove "action = firewallcmd-ipset", then it will be working?
>

I would start with the vsftpd config and verify it's working,  but in
general specifying the action in a jail should only be needed if the
default doesn't do the "right thing".  For instance, my whole sshd config
is:

# cat /etc/fail2ban/jail.d/sshd.local
[sshd]
enabled = true

Thanks,
Richard
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to