I'm not sure what you want tested. I briefly tried gamin with ssh, and it worked, at least for a bit. Another friend tried it and reports that his postfix rules did not result in a ban as expected, though.
I then put it back to 'polling', and that failed to be effective until I rebooted and restarted the fail2ban service. At that point, it seemed to work (with polling) again. ----- Mark Schroeder --- On Mon, 5/21/12, Yaroslav Halchenko <[email protected]> wrote: > From: Yaroslav Halchenko <[email protected]> > Subject: Re: [Bug 954453] Re: fail2ban in precise defaults to gamin, does not > work > To: [email protected] > Date: Monday, May 21, 2012, 8:37 AM > inotify backend had already merged > into upstream's master branch post > 0.8.6 release but there were no upstream release yet. > There is an issue reported against functionality of this > backend: > https://github.com/fail2ban/fail2ban/issues/44 > and it would be great if you could give it some > testing. I have updated > 'Features' page to refer to github's issues page which would > have more > information > > On Mon, 21 May 2012, alp wrote: > > > Some background: > > > RedHat ported fail2ban to use pyinotify instead of > gamin which seems the > > way forward (https://bugzilla.redhat.com/show_bug.cgi?id=658849 and > > https://bugzilla.redhat.com/show_bug.cgi?id=551895). > > > Switching to pyinotify is apparently on the fail2ban > roadmap for 0.9.0 > > at http://www.fail2ban.org/wiki/index.php/Features so it's > probably not > > worth backporting this feature at this point. > > > As such the gamin patch should be a reasonable stopgap > measure. > > > > ** Bug watch added: Red Hat Bugzilla #658849 > > https://bugzilla.redhat.com/show_bug.cgi?id=658849 > > > ** Bug watch added: Red Hat Bugzilla #551895 > > https://bugzilla.redhat.com/show_bug.cgi?id=551895 > -- > Yaroslav O. Halchenko > Postdoctoral Fellow, Department of > Psychological and Brain Sciences > Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, > NH 03755 > Phone: +1 (603) 646-9834 > Fax: +1 > (603) 646-1419 > WWW: http://www.linkedin.com/in/yarik > > -- > You received this bug notification because you are > subscribed to the bug > report. > https://bugs.launchpad.net/bugs/954453 > > Title: > fail2ban in precise defaults to gamin, does not work > > Status in “fail2ban” package in Ubuntu: > Confirmed > > Bug description: > == Relevant config ================================= > > /etc/fail2ban/jail.conf > > # "backend" specifies the backend used to get files > modification. Available > # options are "gamin", "polling" and "auto". > # yoh: For some reason Debian shipped python-gamin > didn't work as expected > # This issue left ToDo, so > polling is default backend for now > #backend = auto > backend = polling > > == InstallationMedia > ================================= > Ubuntu-Server 12.04 LTS "Precise Pangolin" - Alpha > amd64 (20120312) > > == Package ================================= > fail2ban 0.8.6-3 > > == Issue ================================= > > # date > Tue Mar 13 21:58:18 CET 2012 > > Polling works: > > # grep ^backend /etc/fail2ban/jail.conf > backend = polling > # /etc/init.d/fail2ban restart > * Restarting authentication failure > monitor fail2ban > > > > > > > [ OK ] > # tail /var/log/fail2ban.log -n1 > 2012-03-13 21:58:26,145 fail2ban.actions: WARNING > [ssh] Ban 217.21.x.x > > Gamin, doesn't work: > > # grep ^backend /etc/fail2ban/jail.conf > backend = auto > # /etc/init.d/fail2ban restart > * Restarting authentication failure > monitor fail2ban > > > > > > > [ OK ] > # tail /var/log/fail2ban.log -n1 > 2012-03-13 21:59:30,885 > fail2ban.jail : INFO Jail > 'ssh' started > # grep ' uses ' /var/log/fail2ban.log | tail -n1 > 2012-03-13 21:59:30,797 > fail2ban.jail : INFO Jail > 'ssh' uses Gamin > > The comment in jail.conf about Gamin that "doesn't > work", still seems > to be true. > > This issue doesn't only occur after restarting. Gamin > didn't work in > the first place -- which caused me to look into it. > > Regards, > Walter Doekes > > To manage notifications about this bug go to: > https://bugs.launchpad.net/ubuntu/+source/fail2ban/+bug/954453/+subscriptions > -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/954453 Title: fail2ban in precise defaults to gamin, does not work To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fail2ban/+bug/954453/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
