Posts by RudyBzh

    Hi,


    My OMV server's syslog is full of messages like this (every 30sec) :

    Code
    Sep 18 10:39:41 omv monit[672]: '\omv.xxxxx.fr' mem usage of 454613336064.0% matches resource limit [mem usage > 90.0%]
    Sep 18 10:40:11 omv monit[672]: '\omv.xxxxx.fr' mem usage of 454613336064.0% matches resource limit [mem usage > 90.0%]
    Sep 18 10:40:41 omv monit[672]: '\omv.xxxxx.fr' mem usage of 454613336064.0% matches resource limit [mem usage > 90.0%]
    Sep 18 10:41:11 omv monit[672]: '\omv.xxxxx.fr' mem usage of 454613336064.0% matches resource limit [mem usage > 90.0%]

    The percentage shown is always at the exact same value.


    Nevertheless, it seems that everything is OK :

    Code
    xxxxx@omv:~$ free -h
    total used free shared buff/cache available
    Mem: 7,8Gi 209Mi 366Mi 35Mi 7,2Gi 7,2Gi
    Swap: 1,0Gi 1,0Mi 1,0Gi
    top - 10:46:12 up 2 days, 11:24, 1 user, load average: 0,00, 0,00, 0,00
    Tasks: 127 total, 1 running, 124 sleeping, 0 stopped, 2 zombie
    %Cpu(s): 0,1 us, 0,1 sy, 0,0 ni, 99,8 id, 0,0 wa, 0,0 hi, 0,0 si, 0,0 st
    MiB Mem : 7965,7 total, 363,7 free, 212,0 used, 7390,0 buff/cache
    MiB Swap: 1022,0 total, 1020,5 free, 1,5 used. 7417,5 avail Mem


    Have you got any idea of the reason ?


    Thank you.

    Thank you for your answer and sorry for my english :)

    I'm going to try to reformulate...


    My 1st question about "exclusion time" and "max retry" :

    Can the values entered in the fail2ban plugin main page (1st tab "General parameters") be used in anyway ?

    I'm telling that because I think they are overridden by the same parameters you must fill in each jail (under jail service you cannot leave it blank to inherit general values ? "This field is required" ).



    2nd point, for the "tip" below the "max retry", it's not "in seconds" :



    Finaly, for sendmail, no, unfortunately I didn't know it's part of postfix (I should have been... It would have prevented me from all the problems I had to deal with ^^)

    That's what I finally though... I didn't have /usr/sbin in my path and so missed this binary existence... So tried to install it and crashed my OMV...

    Of course, if sendmail is present by default, no need to switch to mail (the way I described or the alternative way you told).

    This part is solved... even if I think I broke some things in my installation because if I try to make the same manipulations (without going to the end...), I can't cause something seems to be broken :

    Don't know if I should try to correct this or not (also because I don't know how...). I fear to broke OMV again...


    Thanks

    Hi,


    I'm trying to play with Fail2ban plugin and I don't understand the goal of "exclusion time" and "max retry" in the main parameters tab :


    They seem to always be ignored and replaced by the same parameters under each jail service configuration which are not optional :


    With the previous values, exclusion time is set to "forever" and cannot be left empty to use general parameter (1h).

    Same for max retry... except I don't know what "-1" means. It seems it blocks account on each fail.


    Another small issue is for the text attached to max retry (in jail tab). In french, it's translated in "Essai maximum en secondes" but, as I understood it's in occurrences, not in seconds.

    And it's not a translation issue because in english, the text is the same :

    Code: /usr/share/openmediavault/locale/fr_FR/openmediavault-fail2ban.po
    msgid "Max Retry in seconds."
    msgstr "Essai maximum en secondes."


    Finally, last issue I had is the default MTA generated by OMV in /etc/fail2ban/jail.conf file.

    It's set as "mta = sendmail" (the default for fail2ban), but as I remember sendmail is not installed on OMV by default (finally, not really sure, it's not a path issue...)


    So to solve this, my 1st try was to install sendmail with "apt install sendmail" (DON'T DO THIS) without looking enough on packages impacts and, doing this, OMV is simply uninstalled... :(

    Well, I solved this by reinstalling OMV and sendmail stays installed for me.

    If sendmail is effectively not installed by default, better option would be to change OMV generated jail.conf file to use "mta = mail", no ?

    As an alternative, on the user side, it's possible to create a local file for this :

    Code
    sudo nano /etc/fail2ban/jail.d/default.conf

    and insert in this file :

    Code
    [DEFAULT]
    mta = mail

    then reload fail2ban with :

    Code
    sudo systemctl restart fail2ban.service


    Sorry for this long mail and thank you for your advices.


    Regards.