LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 02-17-2011, 02:39 AM   #1
Alt-Ox
LQ Newbie
 
Registered: Nov 2007
Posts: 20

Rep: Reputation: 0
Fail2ban - Closing connection after installation


Hello guys,

I just faced a weird situation installing fail2ban on Ubuntu 8 (apt-get install fail2ban). Once the installation was completed I lost the connection and was unable to get back.

I had to access throughout its console and then executed:

Code:
/etc/inid.d/fail2ban start
After that I was able to connect via ssh again and already checked it, everything is working fine.

The problem is that I have a new production server to install such tool and this machine has no console so far.

Did anyone already face this kind of problem?

Any idea on a safe way to proceed?
 
Old 02-17-2011, 04:16 AM   #2
Noway2
Senior Member
 
Registered: Jul 2007
Distribution: Gentoo
Posts: 2,125

Rep: Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781
One real potential problem with applications like fail2ban and others that have an active response is that you can block yourself out. One thing you can do to prevent this is to put your IP address in the whitelist so that you don't get blocked. In fail2ban, you want to make your modifications to jail.conf.local. You can whitelist a host with a command like the following:
Code:
ignoreip = 127.0.0.1
, where according to the program's comments you can use an IP, a CIDR mask or a hostname.

I would also take a close look at your auth.log and fail2ban log to see why it blocked your host. It may have been a 'glitch' from install, but chances are there is something in the log file that triggered the pattern matching and could indicate that something isn't quite correct with your SSH connection.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
apache2 closing connection , no response entz Linux - Server 1 04-22-2009 08:53 AM
Connection to SSH closing immediately scratched Linux - General 8 03-25-2007 11:49 PM
Auto detect a closing connection helpmhost Linux - Networking 4 01-23-2007 02:08 PM
router keeps closing connection dstrbd1 Linux - Networking 10 03-01-2006 08:00 AM
SMTP Connection Closing inforlinx Linux - Networking 2 11-04-2004 05:27 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:26 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration