From: Carlo P. <car...@gm...> - 2013-11-21 08:16:22
|
Hello, I first tried to install fail2ban on my debian squeeze system using the debian package but the install was unsuccessful. I therefore downloaded and unpacked the latest stable .gz file and installed fail2ban using the command "python setup.py install". Fail2ban is now up and running but it does not start automatically on boot (among other things, the installer did not create a fail2ban file in the init.d directory). Could someone kindly help with getting fail2ban to start on boot on debian? Thank you. |
From: Daniel B. <dan...@in...> - 2013-11-21 08:50:36
|
On 11/21/2013 07:16 PM, Carlo Piscicelli wrote: > Hello, > > I first tried to install fail2ban on my debian squeeze system using > the debian package but the install was unsuccessful. how? > I therefore > downloaded and unpacked the latest stable .gz file and installed > fail2ban using the command "python setup.py install". > > Fail2ban is now up and running but it does not start automatically on > boot (among other things, the installer did not create a fail2ban file > in the init.d directory). Yes. this is left to the distro packagers. > Could someone kindly help with getting fail2ban to start on boot on debian? you can use the debian initscript and edit /etc/default/fail2ban DAEMON=/usr/local/bin/fail2ban-client set to the path on the new version of fail2ban-client |
From: Carlo P. <car...@gm...> - 2013-11-21 09:12:22
|
On Thu, Nov 21, 2013 at 9:50 AM, Daniel Black <dan...@in...> wrote: > On 11/21/2013 07:16 PM, Carlo Piscicelli wrote: >> Hello, >> >> I first tried to install fail2ban on my debian squeeze system using >> the debian package but the install was unsuccessful. > > how? The status check was ok and it would create a chain in iptables but would not scan the log files. If forced to do so with fail2ban-regex it would give some deprecation errors about MD5 and not perform the scan anyway. No meaningful info in the fail2ban log. > >> I therefore >> downloaded and unpacked the latest stable .gz file and installed >> fail2ban using the command "python setup.py install". >> >> Fail2ban is now up and running but it does not start automatically on >> boot (among other things, the installer did not create a fail2ban file >> in the init.d directory). > > Yes. this is left to the distro packagers. > >> Could someone kindly help with getting fail2ban to start on boot on debian? > > you can use the debian initscript Where can I find it given that I uninstalled the debian package? I would not want to install the package again over the python installation to avoid risking messing up the whole install. > > and edit /etc/default/fail2ban > DAEMON=/usr/local/bin/fail2ban-client > > set to the path on the new version of fail2ban-client > > Thank you! > > ------------------------------------------------------------------------------ > Shape the Mobile Experience: Free Subscription > Software experts and developers: Be at the forefront of tech innovation. > Intel(R) Software Adrenaline delivers strategic insight and game-changing > conversations that shape the rapidly evolving mobile landscape. Sign up now. > http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk > _______________________________________________ > Fail2ban-users mailing list > Fai...@li... > https://lists.sourceforge.net/lists/listinfo/fail2ban-users |
From: Michel D. <md...@ar...> - 2013-11-21 12:54:34
|
Hi, Just for info : Concern the MD5 error I met too this last day as : /usr/share/fail2ban/server/filter.py:442: DeprecationWarning: the md5 module is deprecated; use hashlib instead I modified the line 442 of the file /usr/share/fail2ban/server/filter.py #import md5 by this one : from hashlib import md5 and the warning is gone.... in the Le jeudi 21 novembre 2013, 10:12:14 Carlo Piscicelli a écrit : > On Thu, Nov 21, 2013 at 9:50 AM, Daniel Black > > <dan...@in...> wrote: > > On 11/21/2013 07:16 PM, Carlo Piscicelli wrote: > >> Hello, > >> > >> I first tried to install fail2ban on my debian squeeze system using > >> the debian package but the install was unsuccessful. > > > > how? > > The status check was ok and it would create a chain in iptables but > would not scan the log files. If forced to do so with fail2ban-regex > it would give some deprecation errors about MD5 and not perform the > scan anyway. No meaningful info in the fail2ban log. > > >> I therefore > >> downloaded and unpacked the latest stable .gz file and installed > >> fail2ban using the command "python setup.py install". > >> > >> Fail2ban is now up and running but it does not start automatically on > >> boot (among other things, the installer did not create a fail2ban file > >> in the init.d directory). > > > > Yes. this is left to the distro packagers. > > > >> Could someone kindly help with getting fail2ban to start on boot on > >> debian? > > > > you can use the debian initscript > > Where can I find it given that I uninstalled the debian package? I > would not want to install the package again over the python > installation to avoid risking messing up the whole install. > > > and edit /etc/default/fail2ban > > DAEMON=/usr/local/bin/fail2ban-client > > > > set to the path on the new version of fail2ban-client > > Thank you! > > > -------------------------------------------------------------------------- > > ---- Shape the Mobile Experience: Free Subscription > > Software experts and developers: Be at the forefront of tech innovation. > > Intel(R) Software Adrenaline delivers strategic insight and game-changing > > conversations that shape the rapidly evolving mobile landscape. Sign up > > now. > > http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clkt > > rk _______________________________________________ > > Fail2ban-users mailing list > > Fai...@li... > > https://lists.sourceforge.net/lists/listinfo/fail2ban-users > > ---------------------------------------------------------------------------- > -- Shape the Mobile Experience: Free Subscription > Software experts and developers: Be at the forefront of tech innovation. > Intel(R) Software Adrenaline delivers strategic insight and game-changing > conversations that shape the rapidly evolving mobile landscape. Sign up now. > http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk > _______________________________________________ > Fail2ban-users mailing list > Fai...@li... > https://lists.sourceforge.net/lists/listinfo/fail2ban-users -- .-"-. .-"-. .-"-. .-"-. .-"-. .-"-. "-.-" "-.-" "-.-" "-.-" "-.-" "-.-" Michel Dubois Ingénieur Support CIM PACA Conception Tel : 04 92 38 85 53 Mobile : 06 09 65 71 76 |
From: Daniel B. <dan...@in...> - 2013-11-21 20:06:44
|
On 11/21/2013 11:54 PM, Michel Dubois wrote: > Hi, > > Just for info : > Concern the MD5 error I met too this last day as : > /usr/share/fail2ban/server/filter.py:442: DeprecationWarning: the md5 module is > deprecated; use hashlib instead > > I modified the line 442 of the file /usr/share/fail2ban/server/filter.py > #import md5 > by this one : > from hashlib import md5 > > and the warning is gone.... In the latest code this is already: try: import hashlib md5sum = hashlib.md5 except ImportError: # pragma: no cover # hashlib was introduced in Python 2.5. For compatibility with those # elderly Pythons, import from md5 import md5 md5sum = md5.new |
From: Michel D. <md...@ar...> - 2013-11-21 13:16:30
|
Hi Carlos, I don't know if you see my last problem before. I went to uninstall fail2ban and reinstall it on my debian server with these both commands: sudo apt-get remove --purge fail2ban sudo apt-get install fail2ban because the tool didn't ban some IP address which scanned my SSH entry in brute force mode. It should help. Now I use the command "/usr/bin/fail2ban-client reload <JAIL>" for managing fail2ban. It seems to be more efficient than the fail2ban service. Regards, Le jeudi 21 novembre 2013 14:07:18, vous avez écrit : > Thanks Michel. I uninstalled the debian package so this is no longer > relevant for me but I will keep this in mind if I end up reinstalling > it. Also, not sure this would have solved the issue: I googled around > and it appeared that the deprecation warning was not supposed to be > fatal. Did your fail2ban work even before you fixed this? > > On Thu, Nov 21, 2013 at 1:54 PM, Michel Dubois <md...@ar...> wrote: > > Hi, > > > > Just for info : > > Concern the MD5 error I met too this last day as : > > /usr/share/fail2ban/server/filter.py:442: DeprecationWarning: the md5 > > module is deprecated; use hashlib instead > > > > I modified the line 442 of the file /usr/share/fail2ban/server/filter.py > > #import md5 > > by this one : > > from hashlib import md5 > > > > and the warning is gone.... > > > > in the Le jeudi 21 novembre 2013, 10:12:14 Carlo Piscicelli a écrit : > >> On Thu, Nov 21, 2013 at 9:50 AM, Daniel Black > >> > >> <dan...@in...> wrote: > >> > On 11/21/2013 07:16 PM, Carlo Piscicelli wrote: > >> >> Hello, > >> >> > >> >> I first tried to install fail2ban on my debian squeeze system using > >> >> the debian package but the install was unsuccessful. > >> > > >> > how? > >> > >> The status check was ok and it would create a chain in iptables but > >> would not scan the log files. If forced to do so with fail2ban-regex > >> it would give some deprecation errors about MD5 and not perform the > >> scan anyway. No meaningful info in the fail2ban log. > >> > >> >> I therefore > >> >> downloaded and unpacked the latest stable .gz file and installed > >> >> fail2ban using the command "python setup.py install". > >> >> > >> >> Fail2ban is now up and running but it does not start automatically on > >> >> boot (among other things, the installer did not create a fail2ban file > >> >> in the init.d directory). > >> > > >> > Yes. this is left to the distro packagers. > >> > > >> >> Could someone kindly help with getting fail2ban to start on boot on > >> >> debian? > >> > > >> > you can use the debian initscript > >> > >> Where can I find it given that I uninstalled the debian package? I > >> would not want to install the package again over the python > >> installation to avoid risking messing up the whole install. > >> > >> > and edit /etc/default/fail2ban > >> > DAEMON=/usr/local/bin/fail2ban-client > >> > > >> > set to the path on the new version of fail2ban-client > >> > >> Thank you! > >> > >> > ----------------------------------------------------------------------- > >> > --- > >> > ---- Shape the Mobile Experience: Free Subscription > >> > Software experts and developers: Be at the forefront of tech > >> > innovation. > >> > Intel(R) Software Adrenaline delivers strategic insight and > >> > game-changing > >> > conversations that shape the rapidly evolving mobile landscape. Sign up > >> > now. > >> > http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.cl > >> > kt > >> > rk _______________________________________________ > >> > Fail2ban-users mailing list > >> > Fai...@li... > >> > https://lists.sourceforge.net/lists/listinfo/fail2ban-users > >> > >> ------------------------------------------------------------------------- > >> --- -- Shape the Mobile Experience: Free Subscription > >> Software experts and developers: Be at the forefront of tech innovation. > >> Intel(R) Software Adrenaline delivers strategic insight and game-changing > >> conversations that shape the rapidly evolving mobile landscape. Sign up > >> now. > >> http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clk > >> trk _______________________________________________ > >> Fail2ban-users mailing list > >> Fai...@li... > >> https://lists.sourceforge.net/lists/listinfo/fail2ban-users > > > > -- > > .-"-. .-"-. .-"-. .-"-. .-"-. .-"-. > > > > "-.-" "-.-" "-.-" "-.-" "-.-" "-.-" > > > > Michel Dubois > > Ingénieur Support CIM PACA Conception > > Tel : 04 92 38 85 53 > > Mobile : 06 09 65 71 76 > > > > -------------------------------------------------------------------------- > > ---- Shape the Mobile Experience: Free Subscription > > Software experts and developers: Be at the forefront of tech innovation. > > Intel(R) Software Adrenaline delivers strategic insight and game-changing > > conversations that shape the rapidly evolving mobile landscape. Sign up > > now. > > http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clkt > > rk _______________________________________________ > > Fail2ban-users mailing list > > Fai...@li... > > https://lists.sourceforge.net/lists/listinfo/fail2ban-users -- .-"-. .-"-. .-"-. .-"-. .-"-. .-"-. "-.-" "-.-" "-.-" "-.-" "-.-" "-.-" Michel Dubois Ingénieur Support CIM PACA Conception Tel : 04 92 38 85 53 Mobile : 06 09 65 71 76 |
From: Michel D. <dub...@gm...> - 2013-11-21 13:46:49
|
Carlos, Sorry I do'nt know this way for installing fail2ban. May be there is an option in the setup.py script or an uninstall script has done. If the developers did the thing well, this command should help : sudo aptitude search fail2ban | grep "^i" i fail2ban In this case the package is registered and you can use apt-get remove as I told you. Regards, 2013/11/21 Carlo Piscicelli <car...@gm...> > I did, thanks, and I replied to it. > > On Thu, Nov 21, 2013 at 2:25 PM, Michel Dubois <md...@ar...> wrote: > > Hi Carlos, > > Did you recieve my last mail ? I used my work mail and may be problem is > > occured > > > > > > 2013/11/21 Michel Dubois <md...@ar...> > >> > >> Hi Carlos, > >> > >> I don't know if you see my last problem before. > >> I went to uninstall fail2ban and reinstall it on my debian server with > >> these > >> both commands: > >> sudo apt-get remove --purge fail2ban > >> sudo apt-get install fail2ban > >> because the tool didn't ban some IP address which scanned my SSH entry > in > >> brute force mode. It should help. > >> > >> Now I use the command "/usr/bin/fail2ban-client reload <JAIL>" for > >> managing > >> fail2ban. It seems to be more efficient than the fail2ban service. > >> > >> Regards, > >> > >> Le jeudi 21 novembre 2013 14:07:18, vous avez écrit : > >> > Thanks Michel. I uninstalled the debian package so this is no longer > >> > relevant for me but I will keep this in mind if I end up reinstalling > >> > it. Also, not sure this would have solved the issue: I googled around > >> > and it appeared that the deprecation warning was not supposed to be > >> > fatal. Did your fail2ban work even before you fixed this? > >> > > >> > On Thu, Nov 21, 2013 at 1:54 PM, Michel Dubois <md...@ar...> > >> > wrote: > >> > > Hi, > >> > > > >> > > Just for info : > >> > > Concern the MD5 error I met too this last day as : > >> > > /usr/share/fail2ban/server/filter.py:442: DeprecationWarning: the > md5 > >> > > module is deprecated; use hashlib instead > >> > > > >> > > I modified the line 442 of the file > >> > > /usr/share/fail2ban/server/filter.py > >> > > #import md5 > >> > > by this one : > >> > > from hashlib import md5 > >> > > > >> > > and the warning is gone.... > >> > > > >> > > in the Le jeudi 21 novembre 2013, 10:12:14 Carlo Piscicelli a > écrit : > >> > >> On Thu, Nov 21, 2013 at 9:50 AM, Daniel Black > >> > >> > >> > >> <dan...@in...> wrote: > >> > >> > On 11/21/2013 07:16 PM, Carlo Piscicelli wrote: > >> > >> >> Hello, > >> > >> >> > >> > >> >> I first tried to install fail2ban on my debian squeeze system > >> > >> >> using > >> > >> >> the debian package but the install was unsuccessful. > >> > >> > > >> > >> > how? > >> > >> > >> > >> The status check was ok and it would create a chain in iptables but > >> > >> would not scan the log files. If forced to do so with > fail2ban-regex > >> > >> it would give some deprecation errors about MD5 and not perform the > >> > >> scan anyway. No meaningful info in the fail2ban log. > >> > >> > >> > >> >> I therefore > >> > >> >> downloaded and unpacked the latest stable .gz file and installed > >> > >> >> fail2ban using the command "python setup.py install". > >> > >> >> > >> > >> >> Fail2ban is now up and running but it does not start > automatically > >> > >> >> on > >> > >> >> boot (among other things, the installer did not create a > fail2ban > >> > >> >> file > >> > >> >> in the init.d directory). > >> > >> > > >> > >> > Yes. this is left to the distro packagers. > >> > >> > > >> > >> >> Could someone kindly help with getting fail2ban to start on boot > >> > >> >> on > >> > >> >> debian? > >> > >> > > >> > >> > you can use the debian initscript > >> > >> > >> > >> Where can I find it given that I uninstalled the debian package? I > >> > >> would not want to install the package again over the python > >> > >> installation to avoid risking messing up the whole install. > >> > >> > >> > >> > and edit /etc/default/fail2ban > >> > >> > DAEMON=/usr/local/bin/fail2ban-client > >> > >> > > >> > >> > set to the path on the new version of fail2ban-client > >> > >> > >> > >> Thank you! > >> > >> > >> > >> > > >> > >> > > ----------------------------------------------------------------------- > >> > >> > --- > >> > >> > ---- Shape the Mobile Experience: Free Subscription > >> > >> > Software experts and developers: Be at the forefront of tech > >> > >> > innovation. > >> > >> > Intel(R) Software Adrenaline delivers strategic insight and > >> > >> > game-changing > >> > >> > conversations that shape the rapidly evolving mobile landscape. > >> > >> > Sign up > >> > >> > now. > >> > >> > > >> > >> > > http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.cl > >> > >> > kt > >> > >> > rk _______________________________________________ > >> > >> > Fail2ban-users mailing list > >> > >> > Fai...@li... > >> > >> > https://lists.sourceforge.net/lists/listinfo/fail2ban-users > >> > >> > >> > >> > >> > >> > ------------------------------------------------------------------------- > >> > >> --- -- Shape the Mobile Experience: Free Subscription > >> > >> Software experts and developers: Be at the forefront of tech > >> > >> innovation. > >> > >> Intel(R) Software Adrenaline delivers strategic insight and > >> > >> game-changing > >> > >> conversations that shape the rapidly evolving mobile landscape. > Sign > >> > >> up > >> > >> now. > >> > >> > >> > >> > http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clk > >> > >> trk _______________________________________________ > >> > >> Fail2ban-users mailing list > >> > >> Fai...@li... > >> > >> https://lists.sourceforge.net/lists/listinfo/fail2ban-users > >> > > > >> > > -- > >> > > .-"-. .-"-. .-"-. .-"-. .-"-. .-"-. > >> > > > >> > > "-.-" "-.-" "-.-" "-.-" "-.-" "-.-" > >> > > > >> > > Michel Dubois > >> > > Ingénieur Support CIM PACA Conception > >> > > Tel : 04 92 38 85 53 > >> > > Mobile : 06 09 65 71 76 > >> > > > >> > > > >> > > > -------------------------------------------------------------------------- > >> > > ---- Shape the Mobile Experience: Free Subscription > >> > > Software experts and developers: Be at the forefront of tech > >> > > innovation. > >> > > Intel(R) Software Adrenaline delivers strategic insight and > >> > > game-changing > >> > > conversations that shape the rapidly evolving mobile landscape. Sign > >> > > up > >> > > now. > >> > > > >> > > > http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clkt > >> > > rk _______________________________________________ > >> > > Fail2ban-users mailing list > >> > > Fai...@li... > >> > > https://lists.sourceforge.net/lists/listinfo/fail2ban-users > >> > >> -- > >> .-"-. .-"-. .-"-. .-"-. .-"-. .-"-. > >> "-.-" "-.-" "-.-" "-.-" "-.-" "-.-" > >> Michel Dubois > >> Ingénieur Support CIM PACA Conception > >> Tel : 04 92 38 85 53 > >> Mobile : 06 09 65 71 76 > >> > >> > >> > ------------------------------------------------------------------------------ > >> Shape the Mobile Experience: Free Subscription > >> Software experts and developers: Be at the forefront of tech innovation. > >> Intel(R) Software Adrenaline delivers strategic insight and > game-changing > >> conversations that shape the rapidly evolving mobile landscape. Sign up > >> now. > >> > >> > http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk > >> _______________________________________________ > >> Fail2ban-users mailing list > >> Fai...@li... > >> https://lists.sourceforge.net/lists/listinfo/fail2ban-users > > > > > > > > > > -- > > -- Sent from my mobile phone --- > > .-"-. .-"-. .-"-. .-"-. .-"-. .-"-. > > "-.-" "-.-" "-.-" "-.-" "-.-" "-.-" > > Michel Dubois > > Ingénieur Support CIM PACA Conception > > Tel : 04 92 38 85 53 > > Mobile : 06 09 65 71 76 > -- ----------------------------------------------------------- Michel Dubois |
From: Yaroslav H. <li...@on...> - 2013-11-24 01:19:51
|
FWIW -- backports of recent fail2ban releases (now including 0.8.11-1) are available from http://neuro.debian.net for your Debian/Ubuntu. They should work... if something doesn't work -- describe in detail how/what is not working and adhere to general hints/instructions http://www.fail2ban.org/wiki/index.php/HOWTO_Seek_Help cheers, On Thu, 21 Nov 2013, Michel Dubois wrote: > Carlos, > Sorry I do'nt know this way for installing fail2ban. May be there is an > option in the setup.py script or an uninstall script has done. > If the developers did the thing well, this command should help : > sudo aptitude search fail2ban | grep "^i" > i fail2ban > In this case the package is registered and you can use apt-get remove as I > told you. > Regards, -- Yaroslav O. Halchenko, Ph.D. http://neuro.debian.net http://www.pymvpa.org http://www.fail2ban.org Senior Research Associate, Psychological and Brain Sciences Dept. Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755 Phone: +1 (603) 646-9834 Fax: +1 (603) 646-1419 WWW: http://www.linkedin.com/in/yarik |
From: Carlo P. <car...@gm...> - 2013-11-24 07:45:17
|
Will do, thank you. > On Nov 24, 2013, at 2:19 AM, Yaroslav Halchenko <li...@on...> wrote: > > FWIW -- backports of recent fail2ban releases (now including 0.8.11-1) > are available from http://neuro.debian.net for your Debian/Ubuntu. They > should work... if something doesn't work -- describe in detail how/what > is not working and adhere to general hints/instructions > http://www.fail2ban.org/wiki/index.php/HOWTO_Seek_Help > > cheers, > >> On Thu, 21 Nov 2013, Michel Dubois wrote: >> >> Carlos, >> Sorry I do'nt know this way for installing fail2ban. May be there is an >> option in the setup.py script or an uninstall script has done. >> If the developers did the thing well, this command should help : >> sudo aptitude search fail2ban | grep "^i" >> i fail2ban >> In this case the package is registered and you can use apt-get remove as I >> told you. >> Regards, > > -- > Yaroslav O. Halchenko, Ph.D. > http://neuro.debian.net http://www.pymvpa.org http://www.fail2ban.org > Senior Research Associate, Psychological and Brain Sciences Dept. > Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755 > Phone: +1 (603) 646-9834 Fax: +1 (603) 646-1419 > WWW: http://www.linkedin.com/in/yarik > > ------------------------------------------------------------------------------ > Shape the Mobile Experience: Free Subscription > Software experts and developers: Be at the forefront of tech innovation. > Intel(R) Software Adrenaline delivers strategic insight and game-changing > conversations that shape the rapidly evolving mobile landscape. Sign up now. > http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk > _______________________________________________ > Fail2ban-users mailing list > Fai...@li... > https://lists.sourceforge.net/lists/listinfo/fail2ban-users |