Il 2016-11-25 14:14 Tom Hendrikx ha scritto:
>
> This part is messed up. It should probably be something like:
>
> failregex = ^%(__prefix_line)slost connection after
> (AUTH|STARTTLS|NOOP|EHLO|RCPT|UNKNOWN) from .*\..*\[<HOST>\]$
>             ^%(__prefix_line)sdisconnect from unknown\[<HOST>\]$
>
> Note: these are two lines, not three (watch for wrapping lines)! 
> First
> line contains the complete regex for 'lost connection after AUTH ...
> [<HOST>}$', the next line is indented, and contains the regex for
> 'disconnect from unknown...'.
>

Well, I didn't understand that it could be a problem of codes that 
ranged through mail...

Now I've correct the problem, and now fail2ban run, with one warning:

  service fail2ban status
● fail2ban.service - LSB: Start/stop fail2ban
    Loaded: loaded (/etc/init.d/fail2ban)
    Active: active (running) since ven 2016-11-25 22:54:18 CET; 5s ago
   Process: 2090 ExecStop=/etc/init.d/fail2ban stop (code=exited, 
status=0/SUCCESS)
   Process: 2099 ExecStart=/etc/init.d/fail2ban start (code=exited, 
status=0/SUCCESS)
    CGroup: /system.slice/fail2ban.service
            └─2110 /usr/bin/python /usr/bin/fail2ban-server -b -s 
/var/run/fail2ban/fail2ban.sock -p /var/run/fail2ban/fail2ban.pid

nov 25 22:54:18 server fail2ban[2099]: Starting authentication failure 
monitor: fail2banWARNING 'ignoreregex' not defined in 'Definition'. 
Using default one: ''


and looking into its log any errors:

2016-11-25 22:54:18,572 fail2ban.jail   [2110]: INFO    Jail 'dovecot' 
started
2016-11-25 22:54:26,439 fail2ban.filter [2110]: ERROR   Error in 
FilterPyinotify callback: 'module' object has no attribute 
'_strptime_time'
2016-11-25 22:54:26,439 fail2ban.filter [2110]: ERROR   Error in 
FilterPyinotify callback: 'module' object has no attribute 
'_strptime_time'
2016-11-25 22:54:26,440 fail2ban.filter [2110]: ERROR   Error in 
FilterPyinotify callback: 'module' object has no attribute 
'_strptime_time'
2016-11-25 22:54:26,440 fail2ban.filter [2110]: ERROR   Error in 
FilterPyinotify callback: 'module' object has no attribute 
'_strptime_time'
2016-11-25 22:54:26,440 fail2ban.filter [2110]: ERROR   Error in 
FilterPyinotify callback: 'module' object has no attribute 
'_strptime_time'
2016-11-25 22:54:26,441 fail2ban.filter [2110]: ERROR   Error in 
FilterPyinotify callback: 'module' object has no attribute 
'_strptime_time'
2016-11-25 22:54:26,441 fail2ban.filter [2110]: ERROR   Error in 
FilterPyinotify callback: 'module' object has no attribute 
'_strptime_time'
2016-11-25 22:54:26,442 fail2ban.filter [2110]: ERROR   Error in 
FilterPyinotify callback: 'module' object has no attribute 
'_strptime_time'
2016-11-25 22:54:26,757 fail2ban.filter [2110]: WARNING Unable to find 
a corresponding IP address for unknown: [Errno -2] Name or service not 
known
2016-11-25 22:57:49,931 fail2ban.filter [2110]: WARNING Unable to find 
a corresponding IP address for unknown: [Errno -2] Name or service not 
known


And the first ip banned too:

2016-11-25 22:57:51,872 fail2ban.actions[2110]: WARNING 
[postfix-discsl] Ban 38.109.217.119


But I dont understant what refers these errors



many many thanks!

------------------------------------------------------------------------------
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to