LinuxForum.Fans
Тема

fail2ban

Автор: kerogaz 1 сообщений 449 просмотров
#358592

Почему при рестарте этого сервиса появляется ошибка

text
2014-01-06 10:45:26,288 fail2ban.server : INFO   Stopping all jails
2014-01-06 10:45:27,251 fail2ban.actions.action: ERROR  iptables -D INPUT -p tcp --dport ssh -j fail2ban-SSH
iptables -F fail2ban-SSH
iptables -X fail2ban-SSH returned 100
2014-01-06 10:45:27,400 fail2ban.jail   : INFO   Jail 'ssh-iptables' stopped
2014-01-06 10:45:27,402 fail2ban.server : INFO   Exiting Fail2ban
2014-01-06 10:47:11,286 fail2ban.server : INFO   Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.11
2014-01-06 10:47:11,289 fail2ban.jail   : INFO   Creating new jail 'ssh-iptables'
2014-01-06 10:47:11,602 fail2ban.jail   : INFO   Jail 'ssh-iptables' uses pyinotify
2014-01-06 10:47:11,744 fail2ban.jail   : INFO   Initiated 'pyinotify' backend
2014-01-06 10:47:11,753 fail2ban.filter : INFO   Added logfile = /var/log/secure
2014-01-06 10:47:11,758 fail2ban.filter : INFO   Set maxRetry = 3
2014-01-06 10:47:11,762 fail2ban.filter : INFO   Set findtime = 60
2014-01-06 10:47:11,765 fail2ban.actions: INFO   Set banTime = 99887766
2014-01-06 10:47:12,126 fail2ban.jail   : INFO   Jail 'ssh-iptables' started

Хотя сам fail2ban вроде работает

Показать
iptables -L -v -x
Chain INPUT (policy ACCEPT 1658 packets, 222693 bytes)
pkts bytes target prot opt in out source destination
145 13189 fail2ban-SSH tcp -- any any anywhere anywhere tcp dpt:ssh
145 13189 fail2ban-SSH tcp -- any any anywhere anywhere tcp dpt:ssh
145 13189 fail2ban-SSH tcp -- any any anywhere anywhere tcp dpt:ssh

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 1586 packets, 211252 bytes)
pkts bytes target prot opt in out source destination

Chain fail2ban-SSH (3 references)
pkts bytes target prot opt in out source destination
435 39567 RETURN all -- any any anywhere anywhere
0 0 RETURN all -- any any anywhere anywhere
0 0 RETURN all -- any any anywhere anywhere
Войдите или зарегистрируйтесь, чтобы ответить.