LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   fail2ban log errors for ssh jail (https://www.linuxquestions.org/questions/linux-security-4/fail2ban-log-errors-for-ssh-jail-821856/)

linuxlover.chaitanya 07-24-2010 04:58 AM
fail2ban log errors for ssh jail
 
Hello all,

There is a server where fail2ban is installed. I can see the error in the log files repeatedly and do not know this is. Any help?

Code:
2010-07-13 10:39:49,966 fail2ban.jail  : INFO  Jail 'ssh-iptables' started
2010-07-13 10:55:41,550 fail2ban.actions.action: ERROR  iptables -D INPUT -p tcp --dport ssh -j fail2ban-SSH
iptables -F fail2ban-SSH
iptables -X fail2ban-SSH returned 100
2010-07-13 10:55:41,829 fail2ban.jail  : INFO  Jail 'ssh-iptables' stopped
2010-07-13 10:57:45,656 fail2ban.server : INFO  Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.3
2010-07-13 10:57:45,665 fail2ban.jail  : INFO  Creating new jail 'ssh-iptables'
2010-07-13 10:57:45,695 fail2ban.jail  : INFO  Jail 'ssh-iptables' uses Gamin
2010-07-13 10:57:45,780 fail2ban.filter : INFO  Added logfile = /var/log/secure
2010-07-13 10:57:45,781 fail2ban.filter : INFO  Set maxRetry = 5
2010-07-13 10:57:45,782 fail2ban.filter : INFO  Set findtime = 600
2010-07-13 10:57:45,783 fail2ban.actions: INFO  Set banTime = 600
2010-07-13 10:57:45,832 fail2ban.jail  : INFO  Jail 'ssh-iptables' started
2010-07-14 10:17:12,593 fail2ban.actions.action: ERROR  iptables -D INPUT -p tcp --dport ssh -j fail2ban-SSH
iptables -F fail2ban-SSH
iptables -X fail2ban-SSH returned 100
2010-07-14 10:17:13,618 fail2ban.jail  : INFO  Jail 'ssh-iptables' stopped

unSpawn 07-24-2010 05:51 AM
See http://www.fail2ban.org/wiki/index.p...mmunity_Portal and search for the "actions.action: ERROR iptables" part.

linuxlover.chaitanya 07-24-2010 07:01 AM
There is same issue discussed there and it says to modify the python script shebang line from /usr/bin/python to /usr/bin/python2.4. Have changed it but I do not see any change. Will still wait till monday to see if the error persists.


All times are GMT -5. The time now is 09:39 PM.