LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 02-29-2008, 01:41 AM   #1
markoh
LQ Newbie
 
Registered: Feb 2008
Posts: 1

Rep: Reputation: 0
Strange problem with fail2ban


I have fail2ban version 0.8.1 installed on some CentOS5 servers and it works great.

Now I have tried to install it on Redhat 5 which is practically the same as CentOS5. I installed it and copied configuration files from the working installation on CentOS5.

The problem I have is that fail2ban service does not find any failed vsftpd login in /var/log/secure while the same configuration on CentOS does.

I have tried fail2ban-regex utility and it finds all failed logins and identifies them correctly.

I have even discovered that. If I login incorrectly with vsftpd when fail2ban is stopped that is recorded in /var/secure as it should be. When I run fail2ban it opens to the log file and finds failed login which was recording while fail2ban was stopped. If I try it with fail2ban started it just reports in fail2ban.log that log file has been changed but it finds no failed logins.

What to do?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
selinux killing fail2ban vonedaddy Linux - Security 5 01-20-2008 05:09 PM
Fail2Ban Question nomb Debian 0 05-21-2007 07:28 AM
fail2ban and proftpd 1.3 reeseslover531 Linux - Security 4 02-14-2007 07:10 AM
Weird problem with fail2ban miza Linux - Software 0 10-28-2006 09:57 AM
strange, strange alsa problem: sound is grainy/pixellated? fenderman11111 Linux - Software 1 11-01-2004 05:16 PM


All times are GMT -5. The time now is 11:49 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration