Re: [Fail2ban-users] CentOS 7 1511 fail2ban (EPEL)

[Steve R. <st...@st...>]

Thanks for the reply. I suggest you follow Losif's example instead. 
(pasted here for convenience in case you missed it).

Hi Günther,

> on my system fail2ban don't work anymore after update to CentOS 7 1511
>
> Have any a Idea what is wrong with this RPM (?) and have a hint to 
> configure
> this correct?
>
> Thanks for a answer
>
> The problem is I mean iptables I have no entry from fail2ban (firewalld)

Check your

/etc/fail2ban/action.d/iptables-common.conf

for the

lockingopt = -w

option in, near end of the file.

Outcomment that option if your installed iptables version is < 1.4.20.

Best regards,

Iosif Fettich




Cheers

Steve



On 17/01/2016 13:00, Günther J. Niederwimmer wrote:
> Hello Steve,
>
> Am Samstag, 16. Januar 2016, 13:39:13 CET schrieb Steve Rowe:
>> Hi Gunther. yes i had this problem too.
>> I updated to centos 7.2 and fail2ban stopped working (except http).
> I mean 7.2 have much more problems then 7.1 :-((.
>   
>> The issue for me was that the maillog and messages files were empty, so
>> fail2ban is not at fault.
>> Its a problem with system logger.
> Yes / No
>
> I have all the Log Files on my system and mails from fail2ban "Ban/ banned"
> but the iptables entry are lost?
>   
>> remove the following file if you also have an empty /var/log/maillog and
>> /var/log/messages
>>
>> rm /var/lib/rsyslog/imjournal.state
>>
>> restart rsyslog and you should see the files getting populated.
>>
>> I also (precautionary) restarted fail2ban to pick up the missed blocks.
>> Hope this helps.
> Thanks for the answer, I tested it, but on my system it helps not .-(.
>
>> Steve
>>
>> On 16/01/2016 13:12, Günther J. Niederwimmer wrote:
>>> Hello,
>>>
>>> on my system fail2ban don't work anymore after update to CentOS 7 1511
>>>
>>> Have any a Idea what is wrong with this RPM (?) and have a hint to
>>> configure this correct?
>>>
>>> Thanks for a answer
>>>
>>> The problem is I mean iptables I have no entry from fail2ban (firewalld)
>> ----------------------------------------------------------------------------
>> -- Site24x7 APM Insight: Get Deep Visibility into Application Performance
>> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
>> Monitor end-to-end web transactions and take corrective actions now
>> Troubleshoot faster and improve end-user experience. Signup Now!
>> http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
>> _______________________________________________
>> Fail2ban-users mailing list
>> Fai...@li...
>> https://lists.sourceforge.net/lists/listinfo/fail2ban-users
>