+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega International Area (/forum-22.html)
+--- Forum: German Corner (/forum-26.html)
+--- Thread: ispcp 1.0.5 + fail2ban Probleme (/thread-10741.html)
Pages: 1 2
RE: ispcp 1.0.5 + fail2ban Probleme - joximu - 05-22-2010 06:41 AM
was steht denn im fail2ban log?
RE: ispcp 1.0.5 + fail2ban Probleme - Iron73 - 05-22-2010 07:08 AM
Hallo joximu,
nach dem letzten /etc/init.d/fail2ban restart steht jetzt folgendes dort:
/var/log/fail2ban.log
Code:
2010-05-21 21:27:17,561 fail2ban.jail : INFO Jail 'apache' stopped
2010-05-21 21:27:18,343 fail2ban.jail : INFO Jail 'proftpd' stopped
2010-05-21 21:27:19,354 fail2ban.jail : INFO Jail 'ssh' stopped
2010-05-21 21:27:19,609 fail2ban.server : INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.3
2010-05-21 21:27:19,610 fail2ban.jail : INFO Creating new jail 'ssh'
2010-05-21 21:27:19,610 fail2ban.jail : INFO Jail 'ssh' uses poller
2010-05-21 21:27:19,621 fail2ban.filter : INFO Added logfile = /var/log/auth.log
2010-05-21 21:27:19,621 fail2ban.filter : INFO Set maxRetry = 3
2010-05-21 21:27:19,622 fail2ban.filter : INFO Set findtime = 600
2010-05-21 21:27:19,623 fail2ban.actions: INFO Set banTime = 600
2010-05-21 21:27:19,692 fail2ban.jail : INFO Creating new jail 'apache'
2010-05-21 21:27:19,692 fail2ban.jail : INFO Jail 'apache' uses poller
2010-05-21 21:27:19,693 fail2ban.filter : INFO Added logfile = /var/log/apache2/users/MY-DOMAINs.de-access.log
2010-05-21 21:27:19,693 fail2ban.filter : INFO Added logfile = /var/log/apache2/users/MY-DOMAINs.de-access.log
2010-05-21 21:27:19,694 fail2ban.filter : INFO Added logfile = /var/log/apache2/users/MY-DOMAINs.de-access.log
2010-05-21 21:27:19,695 fail2ban.filter : INFO Added logfile = /var/log/apache2/users/admin.MY-DOMAINs.de-access.log
2010-05-21 21:27:19,696 fail2ban.filter : INFO Added logfile = /var/log/apache2/users/MY-DOMAINs.de-access.log
2010-05-21 21:27:19,697 fail2ban.filter : INFO Set maxRetry = 3
2010-05-21 21:27:19,698 fail2ban.filter : INFO Set findtime = 600
2010-05-21 21:27:19,698 fail2ban.actions: INFO Set banTime = 600
2010-05-21 21:27:19,705 fail2ban.jail : INFO Creating new jail 'proftpd'
2010-05-21 21:27:19,705 fail2ban.jail : INFO Jail 'proftpd' uses poller
2010-05-21 21:27:19,708 fail2ban.filter : INFO Added logfile = /var/log/auth.log
2010-05-21 21:27:19,708 fail2ban.filter : INFO Set maxRetry = 3
2010-05-21 21:27:19,709 fail2ban.filter : INFO Set findtime = 600
2010-05-21 21:27:19,710 fail2ban.actions: INFO Set banTime = 600
2010-05-21 21:27:19,722 fail2ban.jail : INFO Jail 'ssh' started
2010-05-21 21:27:19,724 fail2ban.jail : INFO Jail 'apache' started
2010-05-21 21:27:19,732 fail2ban.actions.action: ERROR iptables -N fail2ban-apache
iptables -A fail2ban-apache -j RETURN
iptables -I INPUT -p tcp -m multiport --dports http,https -j fail2ban-apache returned 400
2010-05-21 21:27:19,732 fail2ban.jail : INFO Jail 'proftpd' startedDas erstemal das ich dort eine ERROR Message sehe, in der gesamten fail2ban.log stehen sonst nur RESTARTs drin !!!
RE: ispcp 1.0.5 + fail2ban Probleme - Pionier - 05-23-2010 07:56 PM
Dieses könnte helfen:
Stell fail2ban bitte mal um, dass es den route Command anstatt iptables benutzt:
http://www.faqforge.com/linux/controlpanels/ispconfig3/configure-fail2ban-to-use-route-instead-of-iptables-to-block-connections/