From: Fabian W. <fa...@we...> - 2012-07-02 22:35:35
|
Hello Xuo On 02.07.2012 21:54, Xuo wrote: > I have noticed that since a few days, I get nothing from fail2ban (no > mail while /var/log/messages is full of unwanted ssh access) and that > nothing is written in its log file (/var/log/fail2ban). > I have set the loglevel to 4 in /etc/fail2ban/fail2ban.conf, but this > changes nothing. > > /etc/fail2ban 221 # ls -l /var/log/fail2ban > -rw-r--r-- 1 root root 0 juil. 2 21:21 /var/log/fail2ban > > If I run : > fail2ban-client -i > everything seems correct. Does 'fail2ban-client ping' report 'Server replied: pong'? > If I run : > fail2ban-regex /var/log/messages filter.d/sshd.conf > everything seems correct. Is the jail.conf and eventually a jail.local file still there, and do they have the expected content? > How to check that fail2ban sends mails (I receive mails when I > stop/start fail2ban service) ? Why is the log file empty ? Does it log anything when you restart fail2ban? E.g. with 'fail2ban-client reload' or through the /etc/init.d/ script? bye Fabian |