Package: fail2ban
Version: 1.0.2-2
Severity: serious
Tags: sid trixie bookworm

Hello,

The default journalmatch for ssh the following:

filter.d/sshd.conf: journalmatch = _SYSTEMD_UNIT=sshd.service + _COMM=sshd

But the .service file for ssh in debian is called ssh.service, not sshd.service

If I run journalctl _SYSTEMD_UNIT=sshd.serviceĀ  _COMM=sshd, I get no entries.

If I run journalctl _SYSTEMD_UNIT=ssh.serviceĀ  _COMM=sshd , I get the logs

I think there are still something broken with the switch to journald

The configuration should be changed to: "_SYSTEMD_UNIT=ssh.service _COMM=sshd" IMVHO

Kind regards,

Laurent Bigonville

Reply via email to