Fail2Ban doing its thing

Nefertiti · 17. Dezember 2023

I uninstalled the plugin several times and enabled the jails first but same result!

Code

 ls -al /var/run/fail2ban/
total 0
drwxr-xr-x  2 root root   40 Dec 17 07:05 .
drwxr-xr-x 37 root root 1180 Dec 17 10:24 ..

Code

~# ls -al /var/run/
total 44
drwxr-xr-x 36 root     root     1160 Dec 17 10:04 .
drwxr-xr-x 25 root     root     4096 Dec 11 19:22 ..
drwxr-xr-x  3 root     root       60 Dec 17 07:05 NetworkManager
-rw-------  1 root     root        0 Dec 17 07:05 agetty.reload
drwxr-xr-x  2 avahi    avahi      80 Dec 17 07:05 avahi-daemon
drwxr-xr-x  2 root     root       60 Dec 17 07:05 blkid
-rw-r--r--  1 root     root        4 Dec 17 07:05 blkmapd.pid
drwxr-x---  2 _chrony  _chrony    80 Dec 17 07:05 chrony
srw-rw----  1 root     root        0 Dec 17 07:05 collectd.socket
drwxr-xr-x  2 root     root       80 Dec 17 07:05 console-setup
drwx--x--x  5 root     root      140 Dec 17 07:06 containerd
drwxr-xr-x  6 root     root      120 Dec 17 07:20 credentials
-rw-r--r--  1 root     root        5 Dec 17 07:05 crond.pid
----------  1 root     root        0 Dec 17 07:05 crond.reboot
drwxr-xr-x  2 root     root       60 Dec 17 07:05 dbus
prw-------  1 root     root        0 Dec 17 07:05 dmeventd-client
prw-------  1 root     root        0 Dec 17 07:05 dmeventd-server
drwx------  8 root     root      180 Dec 17 07:07 docker
-rw-r--r--  1 root     root        4 Dec 17 07:05 docker.pid
srw-rw----  1 root     docker      0 Dec 17 07:05 docker.sock
drwxr-xr-x  2 root     root       40 Dec 17 07:05 fail2ban
drwxr-xr-x  2 root     root      160 Dec 17 07:05 fsck
prw-------  1 root     root        0 Dec 17 07:05 initctl
drwx------  2 root     root       80 Dec 17 07:05 initramfs
drwxrwxrwt  4 root     root      220 Dec 17 07:05 lock
drwxr-xr-x  3 root     root       60 Dec 17 07:05 log
drwx------  2 root     root       80 Dec 17 07:05 lvm
drwxr-xr-x  2 minidlna minidlna   60 Dec 17 07:05 minidlna
-rw-r--r--  1 root     root        5 Dec 17 07:05 monit.pid
srwxr-xr-x  1 root     root        0 Dec 17 07:06 monit.sock
-rw-r--r--  1 root     root      113 Dec 17 10:04 motd.dynamic
drwxr-xr-x  2 root     root       40 Dec 17 07:05 mount
drwxr-xr-x  2 root     root       40 Dec 17 08:02 needrestart
drwxr-xr-x  2 root     root      100 Dec 17 07:05 network
-rw-r--r--  1 root     root        5 Dec 17 07:05 nginx.pid
-rw-r--r--  1 root     root        4 Dec 17 07:05 omv-engined.pid
drwxr-xr-x  2 www-data www-data  120 Dec 17 07:05 php
drwxrwsr-x  3 postgres postgres  120 Dec 17 07:05 postgresql
drwxr-xr-x  2 root     root       40 Dec 17 07:05 proftpd
dr-xr-xr-x 11 root     root        0 Dec 17 07:05 rpc_pipefs
drwxr-xr-x  2 _rpc     root       40 Dec 17 07:05 rpcbind
-r--r--r--  1 root     root        0 Dec 17 07:05 rpcbind.lock
srw-rw-rw-  1 root     root        0 Dec 17 07:05 rpcbind.sock
-rw-r--r--  1 root     root        5 Dec 17 07:05 rrdcached.pid
srwxr-xr-x  1 root     root        0 Dec 17 07:05 rrdcached.sock
drwxr-xr-x  4 root     root      300 Dec 17 07:05 samba
drwxr-xr-x  2 root     root       40 Dec 17 07:05 sendsigs.omit.d
lrwxrwxrwx  1 root     root        8 Dec 17 07:05 shm -> /dev/shm
drwxr-xr-x  2 root     root       40 Dec 17 07:05 sshd
-rw-r--r--  1 root     root        5 Dec 17 07:05 sshd.pid
drwx--x--x  3 root     root       60 Dec 17 07:05 sudo
drwxr-xr-x  2 root     root       60 Dec 17 07:05 sysconfig
drwxr-xr-x 24 root     root      580 Dec 17 07:06 systemd
drwxr-xr-x  2 root     root       60 Dec 17 07:05 tmpfiles.d
drwxr-xr-x  7 root     root      160 Dec 17 09:08 udev
drwxr-xr-x  2 root     root       40 Dec 17 07:05 user
-rw-rw-r--  1 root     utmp     1920 Dec 17 10:04 utmp
drwxr-xr-x  2 wsdd     wsdd       40 Dec 17 07:05 wsdd

Alles anzeigen

Code

 sudo fail2ban-client -x start
2023-12-17 10:27:57,177 fail2ban                [104851]: ERROR   Failed during configuration: While reading from '/etc/fail2ban/jail.local' [line 101]: option 'bantime' in section 'DEFAULT' already exists
root@openmediavault:~# sudo fail2ban-client status
2023-12-17 10:28:13,225 fail2ban                [105434]: ERROR   Failed to access socket path: /var/run/fail2ban/fail2ban.sock. Is fail2ban running?

Code

:~# sudo systemctl status fail2ban.service
× fail2ban.service - Fail2Ban Service
     Loaded: loaded (/lib/systemd/system/fail2ban.service; enabled; preset: enabled)
     Active: failed (Result: exit-code) since Sun 2023-12-17 10:26:11 PST; 2min 17s ago
   Duration: 35ms
       Docs: man:fail2ban(1)
   Main PID: 100055 (code=exited, status=255/EXCEPTION)
        CPU: 35ms

Nefertiti · 17. Dezember 2023

Well I think the error is because I used another way for fail2ban Omv rejected login with Fail2Ban so now I need to remove this one and use the plugin

Code

 sudo fail2ban-client -x start
2023-12-17 10:27:57,177 fail2ban                [104851]: ERROR   Failed during configuration: While reading from '/etc/fail2ban/jail.local' [line 101]: option 'bantime' in section 'DEFAULT' already exists
root@openmediavault:~# sudo fail2ban-client status
2023-12-17 10:28:13,225 fail2ban                [105434]: ERROR   Failed to access socket path: /var/run/fail2ban/fail2ban.sock. Is fail2ban running?

Nefertiti · 17. Dezember 2023

Got it working doing:

Code

    sudo systemctl stop fail2ban – Stops the Fail2Ban service.
    sudo apt-get purge fail2ban – Uninstalls Fail2Ban and its configuration files.
    sudo rm -rf /etc/fail2ban/ – Removes additional Fail2Ban configuration files.
    sudo apt-get update – Updates the package database.
    sudo systemctl status fail2ban – Checks the status of the Fail2Ban service.

And reinstalled the fail2ban plugin.

Fail2Ban doing its thing

Jetzt mitmachen!

Ähnliche Themen

NGINX Proxy Manager with fail2ban guide

Tags