#4652 fail2ban default jail still not saving

[M.T.R]

hi,

default jail edited, but still error message when saving.
recent version it was atleast possible to save and error came when restarting failban,
now error comes just after saving saying:

Failed to save default jail options : Matches before applying action must be a number greater than zero

Call Stack Trace

File Line Function
/usr/share/webmin/fail2ban/save_jaildef.cgi 18 WebminCore::error
(eval 55) 6 (eval)
/usr/share/webmin/miniserv.pl 2386 (eval)
/usr/share/webmin/miniserv.pl 914 miniserv::handle_request

---

thanks for assistance

cheers

[M.T.R]

just to remind,

in the recent version the problem was only in jail.conf:
Default Protocol
protocol = all (this entry was not saved)

cheers

[Jamie Cameron]

This should be fixed in Webmin 1.770.

[M.T.R]

this was reported from version 1.770.
you mean in 1.780, don't you?

<bg></bg>

[Jamie Cameron]

I did mean 1.770, which was just released.

Actually, this doesn't seem related to the protocol line at all. What's in the "Matches before applying action" field on your system?

[M.T.R]

hi,

this is the DEFAULT in jail.local:

---

[DEFAULT]

"ignoreip" can be an IP address, a CIDR mask or a DNS host. Fail2ban will not

ban a host which matches an address in this list. Several addresses can be

defined using space separator.

ignoreip = 127.0.0.0/8 90.57.0.0/16 109.210.0.0/16

"bantime" is the number of seconds that a host is banned.

bantime = 86400

A host is banned if it has generated "maxretry" during the last "findtime"

seconds.

findtime = 21600

"maxretry" is the number of failures before a host get banned.

maxretry = 0

Destination email address used solely for the interpolations in

jail.{conf,local} configuration files.

destemail = mymail@mydomain.de

Choose default action. To change, just override value of 'action' with the

interpolation to the chosen action shortcut (e.g. action_mw, action_mwl, etc) in jail.local

globally (section [DEFAULT]) or per specific section

banaction = DEFAULT

Default protocol

protocol = all

"usedns" specifies if jails should trust hostnames in logs,

warn when DNS lookups are performed, or ignore all hostnames in logs

yes: if a hostname is encountered, a DNS lookup will be performed.

warn: if a hostname is encountered, a DNS lookup will be performed,

but it will be logged as a warning.

no: if a hostname is encountered, will not be used for banning,

but it will be logged as info.

usedns = warn

"backend" specifies the backend used to get files modification. Available

options are "gamin", "polling" and "auto". This option can be overridden in

each jail too (use "gamin" for a jail and "polling" for another).

gamin: requires Gamin (a file alteration monitor) to be installed. If Gamin

is not installed, Fail2ban will use polling.

polling: uses a polling algorithm which does not require external libraries.

auto: will choose Gamin if available and polling otherwise.

backend = auto

backend = gamin

This jail corresponds to the standard configuration in Fail2ban 0.6.

The mail-whois action send a notification e-mail with a whois request

in the body.

---

this works all fine.

as soon as I open this in Webmin / Jail section / edit default,
and change nothing and then try to save, I get the error warning like mentioned above.

hope this helps

cheers

PS.
btw
don't know why i get these large letters just posting this here,
just pasted the local file content into ???

[Jamie Cameron]

Ok, I see the bug now - Webmin doesn't expect that maxretry can be set to zero. The next release will fix this.

[M.T.R]

this is also related to ZERO values in the single jail files, where for example maxretry = 0 may appear.

hope this helps

cheers