Seems logwatch behaviour has changed, it was this:
-if (keys %ServicesBans) {
+if (keys %ServicesBans and ($Detail > 0)) {
printf("\nBanned services with Fail2Ban:
Bans:Unbans ReBans:Flush\n");
from June 2022, commit [8aade3]
https://sourceforge.net/p/logwatch/git/ci/8aade3ed559c8a60aa94715d202373ddffbd5a12/
Fail2ban summary is produced only if Detail > 0.
So I set it to 1 in command line,
/usr/sbin/logwatch --output mail --hostname $(hostname -f) --detail 1
and the summary is in e-mail I receive:
--------------------- fail2ban-messages Begin ------------------------
Banned services with Fail2Ban: Bans:Unbans
ReBans:Flush
dovecot: [ 20:20 ] [
0:0 ]
postfix: [ 4:4 ] [
0:0 ]
postfix-sasl: [ 4:4 ] [
0:0 ]
recidive: [116:90 ] [
0:0 ]
sshd: [254:252] [
0:0 ]
---------------------- fail2ban-messages End -------------------------
So bug is not in code, it is in documentation and changelog. Debian
Changelog does not mention this change in behaviour, and I can not see
in logwatch documentation any mention of this either.
--
Tapio Lehtonen / Pori
Sampolan ATK
