On 2024-08-11 02:53:27 +0200, Vincent Lefevre wrote: > On 2024-08-08 11:25:07 +0200, Vincent Lefevre wrote: > > As seen at https://github.com/fail2ban/fail2ban/pull/3782/files > > the change is quite simple: change > > > > _daemon = sshd > > > > to > > > > _daemon = sshd(?:-session)? > > Unfortunately this change alone does not solve the issue. > > I'm wondering whether this depends on another change.
I've found the issue. One also needs https://github.com/fail2ban/fail2ban/commit/6fce23e7baa484c7d1f9b0c9a11986f3916c41dd i.e. change journalmatch = _SYSTEMD_UNIT=sshd.service + _COMM=sshd to journalmatch = _SYSTEMD_UNIT=ssh.service + _COMM=sshd Indeed, "journalctl -u sshd.service" does not find any entry, contrary to "journalctl -u ssh.service". -- Vincent Lefèvre <vinc...@vinc17.net> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)