Hi all, I've installed fail2ban from unstable on my sarge box. Is any one using it on sarge? If so I could yse your help. It seems as though it's not working. I'm still getting alot of failed login attempts over SSH and never get emailed about a rule being added?
---------Samlpe--------- Nov 10 11:02:53 spoonie sshd[21318]: Illegal user adm from ::ffff:83.211.3.125 Nov 10 11:02:53 spoonie sshd[21318]: Illegal user adm from ::ffff:83.211.3.125 Nov 10 11:02:54 spoonie sshd[21320]: Illegal user ident from ::ffff:83.211.3.125 Nov 10 11:02:54 spoonie sshd[21320]: Illegal user ident from ::ffff:83.211.3.125 Nov 10 11:02:55 spoonie sshd[21322]: Illegal user resin from ::ffff:83.211.3.125 Nov 10 11:02:55 spoonie sshd[21322]: Illegal user resin from ::ffff:83.211.3.125 Nov 10 11:02:56 spoonie sshd[21324]: Illegal user mikael from ::ffff:83.211.3.125 Nov 10 11:02:56 spoonie sshd[21324]: Illegal user mikael from ::ffff:83.211.3.125 Nov 10 11:02:57 spoonie sshd[21326]: Illegal user mike from ::ffff:83.211.3.125 Nov 10 11:02:57 spoonie sshd[21326]: Illegal user mike from ::ffff:83.211.3.125 Nov 10 11:02:58 spoonie sshd[21328]: Illegal user suva from ::ffff:83.211.3.125 Nov 10 11:02:58 spoonie sshd[21328]: Illegal user suva from ::ffff:83.211.3.125 ---------End Sample----------- I'm am also using firehol firewall. Would that cause problems for fail2ban creating rules? Any help would be great. Thanks Ralph -- The pen is mightier than the sword, and considerably easier to write with.
