@connextechs wrote:
When I click on restart on my fail2ban i get a few errors in the log. I wanted to ask if you guys could help maybe interpret them one by one? I really need to make this fail2ban finally work correctly. It's constantly giving me issues like these:
- Bans my home IP for some odd reason. (non of the devices are using incorrect credentials.
- Would not clear banned IPs when i restart it, or stop and start it. The IPs would still get banned.
Here is a log starting when I restart fail2ban in the GUI. Would you guys be able to help me interpret some of those issues?
2017-10-11 09:11:45,643 fail2ban.server [2885]: INFO Stopping all jails
2017-10-11 09:11:45,707 fail2ban.actions.action[2885]: ERROR iptables -D INPUT -p tcp -m multiport --dports http -j fail2ban-apache-auth
iptables -F fail2ban-apache-auth
iptables -X fail2ban-apache-auth returned 100
2017-10-11 09:11:45,708 fail2ban.jail [2885]: INFO Jail 'apache-tcpwrapper' stopped
2017-10-11 09:11:46,345 fail2ban.actions.action[2885]: ERROR iptables -D INPUT -p all -j fail2ban-recidive
iptables -F fail2ban-recidive
iptables -X fail2ban-recidive returned 100
2017-10-11 09:11:46,346 fail2ban.jail [2885]: INFO Jail 'recidive' stopped
2017-10-11 09:11:46,582 fail2ban.actions.action[2885]: ERROR iptables -D INPUT -p all -j fail2ban-SIP
iptables -F fail2ban-SIP
iptables -X fail2ban-SIP returned 100
2017-10-11 09:11:46,956 fail2ban.jail [2885]: INFO Jail 'pbx-gui' stopped
2017-10-11 09:11:47,591 fail2ban.actions.action[2885]: ERROR iptables -D INPUT -p tcp -m multiport --dports http,https -j fail2ban-BadBots
iptables -F fail2ban-BadBots
iptables -X fail2ban-BadBots returned 100
2017-10-11 09:11:47,773 fail2ban.jail [2885]: INFO Jail 'apache-badbots' stopped
2017-10-11 09:11:48,593 fail2ban.actions.action[2885]: ERROR iptables -D INPUT -p tcp -m multiport --dports ssh -j fail2ban-SSH
iptables -F fail2ban-SSH
iptables -X fail2ban-SSH returned 100
2017-10-11 09:11:48,594 fail2ban.jail [2885]: INFO Jail 'ssh-iptables' stopped
2017-10-11 09:11:48,702 fail2ban.actions.action[2885]: ERROR iptables -D INPUT -p all -j fail2ban-SIP
iptables -F fail2ban-SIP
iptables -X fail2ban-SIP returned 100
2017-10-11 09:11:48,866 fail2ban.jail [2885]: INFO Jail 'asterisk-iptables' stopped
2017-10-11 09:11:49,760 fail2ban.actions.action[2885]: ERROR iptables -D INPUT -p tcp -m multiport --dports ftp -j fail2ban-FTP
iptables -F fail2ban-FTP
iptables -X fail2ban-FTP returned 100
2017-10-11 09:11:49,761 fail2ban.jail [2885]: INFO Jail 'vsftpd-iptables' stopped
2017-10-11 09:11:49,762 fail2ban.server [2885]: ERROR Unable to remove PID file: [Errno 2] No such file or directory: '/var/run/fail2ban/fail2ban.pid'
2017-10-11 09:11:49,764 fail2ban.server [2885]: INFO Exiting Fail2ban
2017-10-11 09:11:49,958 fail2ban.server [24220]: INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.14
2017-10-11 09:11:49,959 fail2ban.jail [24220]: INFO Creating new jail 'recidive'
2017-10-11 09:11:49,964 fail2ban.jail [24220]: INFO Jail 'recidive' uses Gamin
2017-10-11 09:11:49,996 fail2ban.jail [24220]: INFO Initiated 'gamin' backend
2017-10-11 09:11:49,999 fail2ban.filter [24220]: INFO Added logfile = /var/log/fail2ban.log-20170913
2017-10-11 09:11:50,001 fail2ban.filter [24220]: INFO Added logfile = /var/log/fail2ban.log-20171011
2017-10-11 09:11:50,002 fail2ban.filter [24220]: INFO Added logfile = /var/log/fail2ban.log-20171003
2017-10-11 09:11:50,004 fail2ban.filter [24220]: INFO Added logfile = /var/log/fail2ban.log-20170919
2017-10-11 09:11:50,006 fail2ban.filter [24220]: INFO Added logfile = /var/log/fail2ban.log
2017-10-11 09:11:50,007 fail2ban.filter [24220]: INFO Set maxRetry = 20
2017-10-11 09:11:50,011 fail2ban.filter [24220]: INFO Set findtime = 86400
2017-10-11 09:11:50,012 fail2ban.actions[24220]: INFO Set banTime = 604800
2017-10-11 09:11:50,036 fail2ban.jail [24220]: INFO Creating new jail 'ssh-iptables'
2017-10-11 09:11:50,037 fail2ban.jail [24220]: INFO Jail 'ssh-iptables' uses Gamin
2017-10-11 09:11:50,038 fail2ban.jail [24220]: INFO Initiated 'gamin' backend
2017-10-11 09:11:50,039 fail2ban.filter [24220]: INFO Added logfile = /var/log/secure
2017-10-11 09:11:50,040 fail2ban.filter [24220]: INFO Set maxRetry = 3
2017-10-11 09:11:50,043 fail2ban.filter [24220]: INFO Set findtime = 1800
2017-10-11 09:11:50,044 fail2ban.actions[24220]: INFO Set banTime = 604800
2017-10-11 09:11:50,400 fail2ban.jail [24220]: INFO Creating new jail 'apache-badbots'
2017-10-11 09:11:50,400 fail2ban.jail [24220]: INFO Jail 'apache-badbots' uses Gamin
2017-10-11 09:11:50,402 fail2ban.jail [24220]: INFO Initiated 'gamin' backend
2017-10-11 09:11:50,403 fail2ban.filter [24220]: INFO Added logfile = /var/log/httpd/access_log
2017-10-11 09:11:50,404 fail2ban.filter [24220]: INFO Added logfile = /var/log/httpd/ssl_access_log
2017-10-11 09:11:50,406 fail2ban.filter [24220]: INFO Set maxRetry = 3
2017-10-11 09:11:50,408 fail2ban.filter [24220]: INFO Set findtime = 1800
2017-10-11 09:11:50,409 fail2ban.actions[24220]: INFO Set banTime = 604800
2017-10-11 09:11:50,467 fail2ban.jail [24220]: INFO Creating new jail 'pbx-gui'
2017-10-11 09:11:50,467 fail2ban.jail [24220]: INFO Jail 'pbx-gui' uses Gamin
2017-10-11 09:11:50,468 fail2ban.jail [24220]: INFO Initiated 'gamin' backend
2017-10-11 09:11:50,470 fail2ban.filter [24220]: INFO Added logfile = /var/log/asterisk/freepbx_security.log
2017-10-11 09:11:50,471 fail2ban.filter [24220]: INFO Set maxRetry = 3
2017-10-11 09:11:50,475 fail2ban.filter [24220]: INFO Set findtime = 1800
2017-10-11 09:11:50,475 fail2ban.actions[24220]: INFO Set banTime = 604800
2017-10-11 09:11:50,493 fail2ban.jail [24220]: INFO Creating new jail 'asterisk-iptables'
2017-10-11 09:11:50,493 fail2ban.jail [24220]: INFO Jail 'asterisk-iptables' uses Gamin
2017-10-11 09:11:50,494 fail2ban.jail [24220]: INFO Initiated 'gamin' backend
2017-10-11 09:11:50,496 fail2ban.filter [24220]: INFO Added logfile = /var/log/asterisk/fail2ban
2017-10-11 09:11:50,498 fail2ban.filter [24220]: INFO Set maxRetry = 3
2017-10-11 09:11:50,500 fail2ban.filter [24220]: INFO Set findtime = 1800
2017-10-11 09:11:50,500 fail2ban.actions[24220]: INFO Set banTime = 604800
2017-10-11 09:11:50,971 fail2ban.jail [24220]: INFO Creating new jail 'apache-tcpwrapper'
2017-10-11 09:11:50,971 fail2ban.jail [24220]: INFO Jail 'apache-tcpwrapper' uses Gamin
2017-10-11 09:11:50,972 fail2ban.jail [24220]: INFO Initiated 'gamin' backend
2017-10-11 09:11:50,974 fail2ban.filter [24220]: INFO Added logfile = /var/log/httpd/error_log
2017-10-11 09:11:50,974 fail2ban.filter [24220]: INFO Set maxRetry = 3
2017-10-11 09:11:50,976 fail2ban.filter [24220]: INFO Set findtime = 1800
2017-10-11 09:11:50,977 fail2ban.actions[24220]: INFO Set banTime = 604800
2017-10-11 09:11:51,078 fail2ban.jail [24220]: INFO Creating new jail 'vsftpd-iptables'
2017-10-11 09:11:51,078 fail2ban.jail [24220]: INFO Jail 'vsftpd-iptables' uses Gamin
2017-10-11 09:11:51,079 fail2ban.jail [24220]: INFO Initiated 'gamin' backend
2017-10-11 09:11:51,080 fail2ban.filter [24220]: INFO Added logfile = /var/log/vsftpd.log
2017-10-11 09:11:51,080 fail2ban.filter [24220]: INFO Set maxRetry = 3
2017-10-11 09:11:51,082 fail2ban.filter [24220]: INFO Set findtime = 1800
2017-10-11 09:11:51,082 fail2ban.actions[24220]: INFO Set banTime = 604800
2017-10-11 09:11:51,102 fail2ban.jail [24220]: INFO Jail 'recidive' started
2017-10-11 09:11:51,116 fail2ban.jail [24220]: INFO Jail 'ssh-iptables' started
2017-10-11 09:11:51,154 fail2ban.jail [24220]: INFO Jail 'apache-badbots' started
2017-10-11 09:11:51,183 fail2ban.jail [24220]: INFO Jail 'pbx-gui' started
2017-10-11 09:11:51,219 fail2ban.jail [24220]: INFO Jail 'asterisk-iptables' started
2017-10-11 09:11:51,313 fail2ban.jail [24220]: INFO Jail 'apache-tcpwrapper' started
2017-10-11 09:11:51,359 fail2ban.jail [24220]: INFO Jail 'vsftpd-iptables' started
Posts: 1
Participants: 1