fail2ban-users

[Fail2ban-users] Warning error in 0.8.6 - WARNING 'action' not defined in 'php-url-fopen' and 'lighttpd-fastcgi'

[James B. <jl...@bo...>]

Downloaded 0.8.6 and installed it on a new machine.

When starting I get:

sudo /usr/local/bin/fail2ban-client start
WARNING 'action' not defined in 'php-url-fopen'. Using default value
WARNING 'action' not defined in 'lighttpd-fastcgi'. Using default value
2012-01-25 12:01:06,435 fail2ban.server : INFO   Starting Fail2ban v0.8.6
2012-01-25 12:01:06,436 fail2ban.server : INFO   Starting in daemon mode

I'm not worried because I don't use these, but just letting you know.

James.

Re: [Fail2ban-users] Warning error in 0.8.6 - WARNING 'action' not defined in 'php-url-fopen' and 'lighttpd-fastcgi'

[Lee C. <ja...@le...>]

On 01/24/2012 08:25 PM, James Brown wrote:
> WARNING 'action' not defined in 'php-url-fopen'. Using default value
> WARNING 'action' not defined in 'lighttpd-fastcgi'. Using default value
Both from 2009 :)  I'm guessing they should default to iptables? Or
ipfw? Or shorewall? That's where it seems to get tricky, and probably
why it wasn't given an action by default. The common services seem to
have at least one or two of each (SSH, etc)...but fail2ban certainly
requires configuration out-of-the-box (OTB it offers absolutely no
protection)...

Should they just be setup with iptables actions to avoid the warning?
I'd hate to have them each with three firewall-specific jails....

Re: [Fail2ban-users] Warning error in 0.8.6 - WARNING 'action' not defined in 'php-url-fopen' and 'lighttpd-fastcgi'

[Yaroslav H. <li...@on...>]

On Tue, 24 Jan 2012, Lee Clemens wrote:
> why it wasn't given an action by default. The common services seem to
> have at least one or two of each (SSH, etc)...but fail2ban certainly
> requires configuration out-of-the-box (OTB it offers absolutely no
> protection)...

just for completeness -- fail2ban on Debian systems enables ssh by
default.

There was a related wishlist
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=407404
fail2ban: automatic enable for sections if log files exist

which might be worth considering/discussing for better OTB operation
-- 
=------------------------------------------------------------------=
Keep in touch                                     www.onerussian.com
Yaroslav Halchenko                 www.ohloh.net/accounts/yarikoptic