I too am getting similar errors and it has never worked for my qmail
installation. It works for Proftpd and ssh just fine. Although in this
snippet it shows a ProFTPD error too. Little or no info out there to
resolve this.
2009-10-30 09:01:02,004 fail2ban.actions.action: ERROR iptables -N
fail2ban-pop3
iptables -A fail2ban-pop3 -j RETURN
iptables -I INPUT -p tcp --dport pop3 -j fail2ban-pop3 returned 200
2009-10-30 09:01:02,126 fail2ban.actions.action: ERROR iptables -N
fail2ban-QMAIL
iptables -A fail2ban-QMAIL -j RETURN
iptables -I INPUT -p tcp --dport smtp -j fail2ban-QMAIL returned 200
2009-10-30 09:01:02,298 fail2ban.actions.action: ERROR iptables -N
fail2ban-ProFTPD
iptables -A fail2ban-ProFTPD -j RETURN
iptables -I INPUT -p tcp --dport ftp -j fail2ban-ProFTPD returned 100
Ole N.Johansen wrote:
I think i need to see your conf files for fail2ban.
You may send it directly to my email address.
------------------------------------------------------------------------
*From:* Vidyadhar [mailto:[email protected]]
*Sent:* 30. oktober 2009 12:28
*To:* [email protected]
*Subject:* Re: [qmailtoaster] fail2ban query
Hi
OS : CentOS:5.3
Enabled log of fail2ban.
2009-10-18 04:02:07,988 fail2ban.filter : INFO Log rotation detected for
/var/log/maillog
2009-10-18 04:02:07,990 fail2ban.filter : INFO Log rotation detected for
/var/log/maillog
2009-10-18 04:04:09,985 fail2ban.filter : INFO Log rotation detected for
/var/log/maillog
2009-10-18 04:04:09,987 fail2ban.filter : INFO Log rotation detected for
/var/log/maillog
2009-10-19 07:17:03,728 fail2ban.actions: WARNING [vpopmail] Ban
41.219.219.61
2009-10-19 07:17:03,732 fail2ban.actions.action: ERROR iptables -n -L
INPUT | grep -q fail2ban-pop3 returned 100
2009-10-19 07:17:03,732 fail2ban.actions.action: ERROR Invariant check
failed. Trying to restore a sane environment
2009-10-19 07:17:03,743 fail2ban.actions.action: ERROR iptables -N
fail2ban-pop3
iptables -A fail2ban-pop3 -j RETURN
iptables -I INPUT -p tcp] sendmailwhois[name --dport pop3 -j fail2ban-pop3
returned 200
2009-10-19 07:17:03,748 fail2ban.actions.action: ERROR iptables -n -L
INPUT | grep -q fail2ban-pop3 returned 100
2009-10-19 07:17:03,748 fail2ban.actions.action: CRITICAL Unable to
restore environment
2009-10-19 07:17:04,749 fail2ban.actions: WARNING [vpopmail] 41.219.219.61
already banned
2009-10-19 07:17:05,749 fail2ban.actions: WARNING [vpopmail] 41.219.219.61
already banned
2009-10-20 09:47:18,938 fail2ban.comm : WARNING Invalid command:
['restart']
2009-10-20 09:47:24,053 fail2ban.jail : INFO Jail 'qmail-iptables'
stopped
2009-10-20 09:47:25,035 fail2ban.actions: WARNING [vpopmail] Unban
41.219.219.61
2009-10-20 09:47:25,039 fail2ban.actions.action: ERROR iptables -n -L
INPUT | grep -q fail2ban-pop3 returned 100
2009-10-20 09:47:25,039 fail2ban.actions.action: ERROR Invariant check
failed. Trying to restore a sane environment
2009-10-20 09:47:25,048 fail2ban.actions.action: ERROR iptables -N
fail2ban-pop3
iptables -A fail2ban-pop3 -j RETURN
iptables -I INPUT -p tcp] sendmailwhois[name --dport pop3 -j fail2ban-pop3
returned 200
2009-10-20 09:47:25,052 fail2ban.actions.action: ERROR iptables -n -L
INPUT | grep -q fail2ban-pop3 returned 100
When i checked the entries in iptables it was not showing the
41.219.219.61 ip
Regards,
Vidyadhar
On Fri, Oct 30, 2009 at 4:35 PM, Ole N.Johansen
<[email protected] <mailto:[email protected]>> wrote:
Hello,
Works like a dream here.
What is your OS, version
Error messages?
B/R
Ole J
------------------------------------------------------------------------
*From:* Vidyadhar [mailto:[email protected]
<mailto:[email protected]>]
*Sent:* 30. oktober 2009 11:41
*To:* [email protected]
<mailto:[email protected]>
*Subject:* [qmailtoaster] fail2ban query
Hi list,
Do anybody here have successfully implemented fail2ban for vpopmail. I
tried by following this way:
http://www.mail-archive.com/[email protected]/msg23954.html
but not working. Can anybody help me out to resolve the same.
Regards,
Vidyadhar
--
Cecil Yother, Jr. "cj"
cj's
2318 Clement Ave
Alameda, CA 94501
tel 510.865.2787 | fax 510.864.7300
http://yother.com
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
