Hello, Am Montag, 11. Juli 2016, 10:12:36 schrieb Darac Marjal: > On Sun, Jul 10, 2016 at 10:48:35AM +0200, Günther J. Niederwimmer wrote: > >Hello List, > > > >I read the most I found over this but .... ;-) > > > >On my system I cant found the blocked IPs in the Firewalld ? > > > >All I found is when I make a iptables -L -n then "normal" I found the > >blocked IPs but on my system I found nothing > > > >My System is CentOS 7.2 and I load this from the EPEL Repository. > > This sounds like you've configured fail2ban to use iptables to ban hosts > directly, rather than using firewalld. > > Take a look at /etc/fail2ban/jail.conf (and also, files in > /etc/fail2ban/jail.d/) and see what "banaction" is set to. If this > begins "iptables", then fail2ban is banning hosts in iptables (i.e. > without the knowledge of firewalld). In general, it's always best for > fail2ban to work with your firewall in the same way that you do; in your > case, that means finding a suitable action (in /etc/fail2ban/action.d/) > and using that instead of iptables.
in my /etc/fail2ban/jail.d/local.conf the banaction = firewallcmd-ipset but I mean this is not working after update to 7.2 ? With CentOS 7 I found all the blocked IPs with iptables -L -n but now nothing ? What is the best way to test if fail2ban working correct ? > >Thanks for the Help, -- mit freundlichen Grüßen / best regards, Günther J. Niederwimmer ------------------------------------------------------------------------------ Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today. http://sdm.link/attshape _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
