ispcp 1.0.5 + fail2ban Probleme

[joximu]

was steht denn im fail2ban log?

[Iron73]

Hallo joximu,

nach dem letzten /etc/init.d/fail2ban restart steht jetzt folgendes dort:

/var/log/fail2ban.log

Code:

2010-05-21 21:27:17,561 fail2ban.jail   : INFO   Jail 'apache' stopped
2010-05-21 21:27:18,343 fail2ban.jail   : INFO   Jail 'proftpd' stopped
2010-05-21 21:27:19,354 fail2ban.jail   : INFO   Jail 'ssh' stopped
2010-05-21 21:27:19,609 fail2ban.server : INFO   Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.3
2010-05-21 21:27:19,610 fail2ban.jail   : INFO   Creating new jail 'ssh'
2010-05-21 21:27:19,610 fail2ban.jail   : INFO   Jail 'ssh' uses poller
2010-05-21 21:27:19,621 fail2ban.filter : INFO   Added logfile = /var/log/auth.log
2010-05-21 21:27:19,621 fail2ban.filter : INFO   Set maxRetry = 3
2010-05-21 21:27:19,622 fail2ban.filter : INFO   Set findtime = 600
2010-05-21 21:27:19,623 fail2ban.actions: INFO   Set banTime = 600
2010-05-21 21:27:19,692 fail2ban.jail   : INFO   Creating new jail 'apache'
2010-05-21 21:27:19,692 fail2ban.jail   : INFO   Jail 'apache' uses poller
2010-05-21 21:27:19,693 fail2ban.filter : INFO   Added logfile = /var/log/apache2/users/MY-DOMAINs.de-access.log
2010-05-21 21:27:19,693 fail2ban.filter : INFO   Added logfile = /var/log/apache2/users/MY-DOMAINs.de-access.log
2010-05-21 21:27:19,694 fail2ban.filter : INFO   Added logfile = /var/log/apache2/users/MY-DOMAINs.de-access.log
2010-05-21 21:27:19,695 fail2ban.filter : INFO   Added logfile = /var/log/apache2/users/admin.MY-DOMAINs.de-access.log
2010-05-21 21:27:19,696 fail2ban.filter : INFO   Added logfile = /var/log/apache2/users/MY-DOMAINs.de-access.log
2010-05-21 21:27:19,697 fail2ban.filter : INFO   Set maxRetry = 3
2010-05-21 21:27:19,698 fail2ban.filter : INFO   Set findtime = 600
2010-05-21 21:27:19,698 fail2ban.actions: INFO   Set banTime = 600
2010-05-21 21:27:19,705 fail2ban.jail   : INFO   Creating new jail 'proftpd'
2010-05-21 21:27:19,705 fail2ban.jail   : INFO   Jail 'proftpd' uses poller
2010-05-21 21:27:19,708 fail2ban.filter : INFO   Added logfile = /var/log/auth.log
2010-05-21 21:27:19,708 fail2ban.filter : INFO   Set maxRetry = 3
2010-05-21 21:27:19,709 fail2ban.filter : INFO   Set findtime = 600
2010-05-21 21:27:19,710 fail2ban.actions: INFO   Set banTime = 600
2010-05-21 21:27:19,722 fail2ban.jail   : INFO   Jail 'ssh' started
2010-05-21 21:27:19,724 fail2ban.jail   : INFO   Jail 'apache' started
2010-05-21 21:27:19,732 fail2ban.actions.action: ERROR  iptables -N fail2ban-apache
iptables -A fail2ban-apache -j RETURN
iptables -I INPUT -p tcp -m multiport --dports http,https -j fail2ban-apache returned 400
2010-05-21 21:27:19,732 fail2ban.jail   : INFO   Jail 'proftpd' started

Das erstemal das ich dort eine ERROR Message sehe, in der gesamten fail2ban.log stehen sonst nur RESTARTs drin !!!

[Pionier]

Dieses könnte helfen:

Stell fail2ban bitte mal um, dass es den route Command anstatt iptables benutzt:

http://www.faqforge.com/linux/controlpan...nnections/