Debian 11.4
Warning message on startup:
Code: Select all
Jul 19 08:36:31 svr fail2ban.filter[1550]: WARNING [postfix] Simulate NOW in operation since found time has too large deviation 1658244743.065254 ~ 1658244991.7781656 +/- 60
Jul 19 08:36:31 svr fail2ban.filter[1550]: WARNING [postfix] Please check jail has possibly a timezone issue. Line with odd timestamp: ('', '2022-07-19T08:32:23.065254', 'svr postfix/postfix-script[1406]: starting the Postfix mail system')
Code: Select all
[DEFAULT]
usedns = no
logencoding = utf-8
[postfix]
enabled = true
filter = postfix
bantime = 4h
findtime = 2h
maxretry = 2
action = ban
backend = systemd
Code: Select all
journalmatch = _SYSTEMD_UNIT=postfix@-.service
#journalmatch = _SYSTEMD_UNIT=postfix.service
The warning message goes away when backend = auto, so I suspect the timestamp issue is the key.