Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

[Solved] Fail2ban does not work

Linux Kernel, Network, and Services configuration.
Locked
Message
Author
jasonnix
Posts: 27
Joined: 2023-12-04 11:30
Has thanked: 1 time

[Solved] Fail2ban does not work

#1 Post by jasonnix »

Hello,
The SSH part of Fail2ban is as follows:

Code: Select all

[sshd]
enabled = true
port    = 22
logpath = /var/log/ssh-fail2ban.log
backend = %(sshd_backend)s
maxretry  = 2
findtime  = 10
bantime   = 4w
I connected to the host and entered the wrong SSH password a few times, but I was not blocked. Why?

Thank you.

MODERATOR EDIT (aki, Tue Feb 27 08:28:22 CET 2024): added "solved" tag.

User avatar
ruwolf
Posts: 643
Joined: 2008-02-18 05:04
Location: Banovce nad Bebravou
Has thanked: 41 times
Been thanked: 30 times

Re: Fail2ban does not work

#2 Post by ruwolf »

What about findtime? Have you entered wrong passwords 3 times in 10 seconds?

jasonnix
Posts: 27
Joined: 2023-12-04 11:30
Has thanked: 1 time

Re: Fail2ban does not work

#3 Post by jasonnix »

ruwolf wrote: 2024-02-26 16:34 What about findtime? Have you entered wrong passwords 3 times in 10 seconds?
Hello,
Thank you so much for your reply.
Yes.

Aki
Global Moderator
Global Moderator
Posts: 2979
Joined: 2014-07-20 18:12
Location: Europe
Has thanked: 75 times
Been thanked: 407 times

Re: Fail2ban does not work

#4 Post by Aki »

@jasonnix:
Are you in the other forum posting the same questions ?
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄⠀

Aki
Global Moderator
Global Moderator
Posts: 2979
Joined: 2014-07-20 18:12
Location: Europe
Has thanked: 75 times
Been thanked: 407 times

Re: Fail2ban does not work

#5 Post by Aki »

@jasonnix:
I read in the other forum you solved it, therefore I'm going to mark this thread as "solved" for you and lock it. You could at least have done it by yourself and answer to my previous post. It is sad to note your persistent behaviour, even in light of previous reports regarding your former forum's user name.
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄⠀

Locked