Menu
▾
▴
Re: [Fail2ban-users] ssh-iptables problem & IPtables error
|
From: Usama A. <ua...@gm...> - 2011-12-07 17:53:19
|
Here is what I got in the log file. I set maxretry to 2 though and that didn't help too. 2011-12-07 19:53:57,313 fail2ban.filter : DEBUG File changed: /var/log/secure 2011-12-07 19:53:57,313 fail2ban.filter.datedetector: DEBUG Sorting the template list 2011-12-07 19:53:59,316 fail2ban.filter : DEBUG Got event: 1 for /var/log/secure 2011-12-07 19:53:59,316 fail2ban.filter : DEBUG File changed: /var/log/secure 2011-12-07 19:53:59,316 fail2ban.filter : DEBUG Processing line with time:1323269637.0 and ip:176.45.39.130 2011-12-07 19:53:59,317 fail2ban.filter : DEBUG Ignore line since time 1323269637.0 < 1323276839.32 - 600 2011-12-07 19:53:59,317 fail2ban.filter.datedetector: DEBUG Sorting the template list 2011-12-07 19:54:04,323 fail2ban.filter : DEBUG Got event: 1 for /var/log/secure 2011-12-07 19:54:04,323 fail2ban.filter : DEBUG File changed: /var/log/secure 2011-12-07 19:54:04,323 fail2ban.filter.datedetector: DEBUG Sorting the template list 2011-12-07 19:54:06,326 fail2ban.filter : DEBUG Got event: 1 for /var/log/secure 2011-12-07 19:54:06,326 fail2ban.filter : DEBUG File changed: /var/log/secure 2011-12-07 19:54:06,327 fail2ban.filter : DEBUG Processing line with time:1323269645.0 and ip:176.45.39.130 2011-12-07 19:54:06,327 fail2ban.filter : DEBUG Ignore line since time 1323269645.0 < 1323276846.33 - 600 2011-12-07 19:54:06,327 fail2ban.filter : DEBUG Processing line with time:1323269646.0 and ip:176.45.39.130 2011-12-07 19:54:06,327 fail2ban.filter : DEBUG Ignore line since time 1323269646.0 < 1323276846.33 - 600 2011-12-07 19:54:06,328 fail2ban.filter.datedetector: DEBUG Sorting the template list 2011-12-07 19:54:08,330 fail2ban.filter : DEBUG Got event: 1 for /var/log/secure 2011-12-07 19:54:08,330 fail2ban.filter : DEBUG File changed: /var/log/secure 2011-12-07 19:54:08,331 fail2ban.filter : DEBUG Processing line with time:1323269646.0 and ip:176.45.39.130 2011-12-07 19:54:08,332 fail2ban.filter : DEBUG Ignore line since time 1323269646.0 < 1323276848.33 - 600 2011-12-07 19:54:08,332 fail2ban.filter.datedetector: DEBUG Sorting the template list 2011-12-07 19:54:10,334 fail2ban.filter : DEBUG Got event: 1 for /var/log/secure 2011-12-07 19:54:10,334 fail2ban.filter : DEBUG File changed: /var/log/secure 2011-12-07 19:54:10,334 fail2ban.filter : DEBUG Processing line with time:1323269648.0 and ip:176.45.39.130 2011-12-07 19:54:10,334 fail2ban.filter : DEBUG Ignore line since time 1323269648.0 < 1323276850.33 - 600 2011-12-07 19:54:10,335 fail2ban.filter : DEBUG Processing line with time:1323269649.0 and ip:176.45.39.130 2011-12-07 19:54:10,335 fail2ban.filter : DEBUG Ignore line since time 1323269649.0 < 1323276850.34 - 600 2011-12-07 19:54:10,335 fail2ban.filter.datedetector: DEBUG Sorting the template list 2011-12-07 19:54:11,337 fail2ban.filter : DEBUG Got event: 1 for /var/log/secure 2011-12-07 19:54:11,337 fail2ban.filter : DEBUG File changed: /var/log/secure 2011-12-07 19:54:11,337 fail2ban.filter.datedetector: DEBUG Sorting the template list 2011-12-07 19:54:16,342 fail2ban.filter : DEBUG Got event: 1 for /var/log/secure 2011-12-07 19:54:16,342 fail2ban.filter : DEBUG File changed: /var/log/secure 2011-12-07 19:54:16,343 fail2ban.filter.datedetector: DEBUG Sorting the template list 2011-12-07 19:54:19,346 fail2ban.filter : DEBUG Got event: 1 for /var/log/secure 2011-12-07 19:54:19,347 fail2ban.filter : DEBUG File changed: /var/log/secure 2011-12-07 19:54:19,347 fail2ban.filter : DEBUG Processing line with time:1323269657.0 and ip:176.45.39.130 2011-12-07 19:54:19,347 fail2ban.filter : DEBUG Ignore line since time 1323269657.0 < 1323276859.35 - 600 2011-12-07 19:54:19,348 fail2ban.filter.datedetector: DEBUG Sorting the template list 2011/12/7 Yaroslav Halchenko <li...@on...>: > raise loglevel to 4, restart, and then make sure there are new entries > in the log and check fail2ban.log > > On Wed, 07 Dec 2011, Usama Akkad wrote: >> it seems that fail2ban detects log file changes for "modlimitipconn" >> filter but not for the "ssh" one. There is no error by iptables on >> start. > > -- > =------------------------------------------------------------------= > Keep in touch www.onerussian.com > Yaroslav Halchenko www.ohloh.net/accounts/yarikoptic > > ------------------------------------------------------------------------------ > Cloud Services Checklist: Pricing and Packaging Optimization > This white paper is intended to serve as a reference, checklist and point of > discussion for anyone considering optimizing the pricing and packaging model > of a cloud services business. Read Now! > http://www.accelacomm.com/jaw/sfnl/114/51491232/ > _______________________________________________ > Fail2ban-users mailing list > Fai...@li... > https://lists.sourceforge.net/lists/listinfo/fail2ban-users |