erro no fail2ban e iptables

beyraq
(usa Arch Linux)

Enviado em 25/04/2012 - 21:37h

alguém pode me ajudar? segue os logs


2012-04-25 21:34:25,181 fail2ban.server : INFO Stopping all jails
2012-04-25 21:34:25,896 fail2ban.actions.action: ERROR iptables -D INPUT -p tcp --dport ssh -j fail2ban-SSH
iptables -F fail2ban-SSH
iptables -X fail2ban-SSH returned 100
2012-04-25 21:34:25,896 fail2ban.jail : INFO Jail 'ssh-iptables' stopped
2012-04-25 21:34:25,903 fail2ban.server : INFO Exiting Fail2ban
2012-04-25 21:34:29,220 fail2ban.server : INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.6
2012-04-25 21:34:29,221 fail2ban.jail : INFO Creating new jail 'ssh-iptables'
2012-04-25 21:34:29,222 fail2ban.jail : INFO Jail 'ssh-iptables' uses Gamin
2012-04-25 21:34:29,239 fail2ban.filter : INFO Set maxRetry = 2
2012-04-25 21:34:29,240 fail2ban.filter : INFO Set findtime = 300
2012-04-25 21:34:29,241 fail2ban.actions: INFO Set banTime = 7200
2012-04-25 21:34:29,289 fail2ban.jail : INFO Jail 'ssh-iptables' started




iptables -L -v
Chain INPUT (policy DROP 1 packets, 365 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- lo any anywhere anywhere
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:ftp
1149 92553 ACCEPT tcp -- any any anywhere anywhere tcp dpt:http
307 19890 ACCEPT tcp -- any any anywhere anywhere tcp dpt:touchnetplus
0 0 ACCEPT icmp -- any any ip-10-0-0-0.sa-east-1.compute.internal/24 anywhere icmp echo-request
31251 47M ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED

Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy DROP 510 packets, 179K bytes)
pkts bytes target prot opt in out source destination
16962 1360K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
11 528 ACCEPT tcp -- any any anywhere anywhere multiport dports ftp-data,ftp,domain,http,touchnetplus
18 1170 ACCEPT udp -- any any anywhere anywhere multiport dports domain
0 0 ACCEPT icmp -- any any anywhere anywhere icmp echo-request

phrich
(usa Slackware)

Enviado em 26/04/2012 - 00:41h

Vc já testou para ver se o fail2ban está funcionando corretamente?

Vc fez as confs no arquivo /etc/fail2ban/jail.conf?

andrecanhadas
(usa Debian)

Enviado em 26/04/2012 - 02:01h

Pelo que Vi só tem erro no inicio limpe o log e reinicie o fail2ban para ver se o erro persiste.

andrecanhadas
(usa Debian)

Enviado em 26/04/2012 - 02:08h

Alias fui ver o meu log e tem o mesmo erro mas ta funcionando 100% deve ser algum bug na geração do log.

beyraq
(usa Arch Linux)

Enviado em 27/04/2012 - 13:26h

blz, valeu

johnnyb
(usa Fedora)

Enviado em 13/07/2012 - 18:37h

apague o pid e os logs e veja se o bug continua