Re: [CentOS] CentOS 6.3 - fail2ban not working properly + workaround

2013-03-12 Thread Theo Band
On 10/17/2012 05:51 PM, SilverTip257 wrote: I recall others on this list are using fail2ban to block brute force login attempts. Packages are from the EPEL repo, so I'm just sharing some knowledge here. For about two months now I've had a CentOS 6.3 box (web host) in production that

Re: [CentOS] CentOS 6.3 - fail2ban not working properly + workaround

2013-03-12 Thread SilverTip257
On Tue, Mar 12, 2013 at 11:51 AM, Theo Band theo.b...@greenpeak.com wrote: On 10/17/2012 05:51 PM, SilverTip257 wrote: I recall others on this list are using fail2ban to block brute force login attempts. Packages are from the EPEL repo, so I'm just sharing some knowledge here. For

Re: [CentOS] CentOS 6.3 - fail2ban not working properly + workaround

2013-03-12 Thread Timothy Murphy
Theo Band wrote: I have updated recently to 6 and see that fail2band ssh dos no longer works. Indeed after log rotate fail2ban seems to follow the old log file instead of the newly created /var/log/secure. I had backend = auto in /etc/fail2ban/jail.conf and gamin and pyinotify are both

Re: [CentOS] CentOS 6.3 - fail2ban not working properly + workaround

2013-03-12 Thread Theo Band
On 03/12/2013 05:35 PM, Timothy Murphy wrote: I'm running fail2ban on my server (under CentOS-6.4) and it seems to be running according to - [tim@grover fail2ban]$ sudo service fail2ban status Fail2ban (pid 31794) is running... Status |- Number of jail: 1 `-

Re: [CentOS] CentOS 6.3 - fail2ban not working properly + workaround

2013-03-12 Thread Fabien Archambault
2013/3/12 Theo Band theo.b...@greenpeak.com: On 03/12/2013 05:35 PM, Timothy Murphy wrote: I'm running fail2ban on my server (under CentOS-6.4) and it seems to be running according to - [tim@grover fail2ban]$ sudo service fail2ban status Fail2ban (pid 31794) is

Re: [CentOS] CentOS 6.3 - fail2ban not working properly + workaround

2013-03-12 Thread David Hrbáč
Dne 12.3.2013 19:03, Fabien Archambault napsal(a): I too have the same problem but couldn't figure where is the issue. It stops working even if the service says all is right. I have to restart the service to let it work again... I will try to find through your idea. Thanks, Fabien As

Re: [CentOS] CentOS 6.3 - fail2ban not working properly + workaround

2013-03-12 Thread SilverTip257
On Tue, Mar 12, 2013 at 1:57 PM, Theo Band theo.b...@greenpeak.com wrote: On 03/12/2013 05:35 PM, Timothy Murphy wrote: I'm running fail2ban on my server (under CentOS-6.4) and it seems to be running according to - [tim@grover fail2ban]$ sudo service fail2ban

Re: [CentOS] CentOS 6.3 - fail2ban not working properly + workaround

2013-03-12 Thread SilverTip257
On Tue, Mar 12, 2013 at 3:45 PM, David Hrbáč david-li...@hrbac.cz wrote: Dne 12.3.2013 19:03, Fabien Archambault napsal(a): I too have the same problem but couldn't figure where is the issue. It stops working even if the service says all is right. I have to restart the service to let it

[CentOS] CentOS 6.3 - fail2ban not working properly + workaround

2012-10-17 Thread SilverTip257
I recall others on this list are using fail2ban to block brute force login attempts. Packages are from the EPEL repo, so I'm just sharing some knowledge here. For about two months now I've had a CentOS 6.3 box (web host) in production that occasionally is ftp brute forced. Oddly enough fail2ban