What I did was change the action that fail2ban takes to add rules to our network firewall (a custom pf-based system). That way, each server processes its own logs, but protects all of them.
Unfortunately, I can't share the exact action that we use, but you should be able to create a pretty script that calls iptables on each of your servers.

- Y


On Fri, Aug 9, 2013 at 11:10 AM, Jonathan Horne <jonathanmhorne@outlook.com> wrote:
hello
 
i am trying to figure out if i can share logfiles via NFS from one server to another, so that servers will get each others updates.  has anyone successfully set this up?
 
what im trying to build, is a set of 3 servers (mailscanner/postfix) that are using fail2ban to block spammers.  due to the nature of DNS and MX records, a spammer might get glocked at the first server, but the next spam would likely just go to another server and be let thru because its not currently broken any rules on the 2nd or 3rd server.  it seems if i could get all 3 to read each others log files, that would be the best solution.
 
any one have any tips or pointers for me?  or maybe im going about this all wrong?
 
thanks,
jonathan

------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users