I also use SuSE hence SuSEfirewall2/iptables

That being said, you can query fail2ban following ways:
* look into log /var/log/fail2ban.log
* use: fail2ban-client status <JAIL>
  for sshd jail: fail2ban-client status sshd
  See fail2ban in action when you try to activate a rule by too many
bad logins from ssh for example (make sure that you do not ban
yourself)
  fail2ban-client set loglevel DEBUG
  check the client status: fail2ban-client status

Here are the examples above in action:
# fail2ban-client status sshd 
Status for the jail: sshd
|- Filter
|  |- Currently failed: 1
|  |- Total failed:     3661
|  `- Journal matches:  _SYSTEMD_UNIT=sshd.service + _COMM=sshd
`- Actions
   |- Currently banned: 1
   |- Total banned:     489
   `- Banned IP list:   112.85.218.11
# fail2ban-client status
Status
|- Number of jail:      1
`- Jail list:   sshd

Hope it helps, Tomas

On Sun, 2016-10-02 at 23:59 -0400, Patrick B. Shanahan wrote:
> * Alex <[email protected]> [10-02-16 21:18]:
> > Hi,
> > 
> > > i use iptables but a google search finds:
> > >   http://serverfault.com/questions/751319/how-to-check-if-firewal
> > > ld-is-blocking-an-incoming-ip-address
> > >   and
> > >   http://www.tecmint.com/firewalld-rules-for-centos-7/2/
> > >   items #8 and #9
> > 
> > Thanks for this. I've got it set up that way already, but none of
> > these show with firewall-cmd  the list of IPs that are currently
> > being
> > blocked.
> > 
> > How are you using iptables with firewalld/fail2ban? I'd much prefer
> > to
> > do that, because it's much easier to manage networks and source
> > addresses.
> 
> 
> i don't user firewalld, but SuSEfirewall2 for iptables, and all i did
> to
> set it up was follow the instructions.  i know absolutely *nothing*
> about
> firewalld past what you have conveyed.
> 
> ps: replied on list as that is where the conversation originated and
> *should* be continued.
> 

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to