Fail2ban richtig auswerten

maxi

New Member
Hallo liebe User,

ich habe hier ein merkwürdige Warnung bzw. Info, die ich ich gerne verstehen möchte:

2011-04-21 11:54:30,248 fail2ban.actions: WARNING [ssh] 114.255.196.23 already banned
2011-04-21 11:56:00,324 fail2ban.actions: WARNING [ssh] Unban 114.255.196.23
2011-04-21 11:56:00,458 fail2ban.actions.action: ERROR iptables -n -L INPUT | grep -q fail2ban-ssh returned 100
2011-04-21 11:56:00,459 fail2ban.actions.action: ERROR Invariant check failed. Trying to restore a sane environment
2011-04-21 11:56:00,466 fail2ban.actions.action: ERROR iptables -D INPUT -p tcp -m multiport --dports ssh -j fail2ban-ssh
iptables -F fail2ban-ssh
iptables -X fail2ban-ssh returned 300
2011-04-21 11:56:00,478 fail2ban.actions.action: ERROR iptables -N fail2ban-ssh
iptables -A fail2ban-ssh -j RETURN
iptables -I INPUT -p tcp -m multiport --dports ssh -j fail2ban-ssh returned 300
2011-04-21 11:56:00,482 fail2ban.actions.action: ERROR iptables -n -L INPUT | grep -q fail2ban-ssh returned 100
2011-04-21 11:56:00,482 fail2ban.actions.action: CRITICAL Unable to restore environment
2011-04-21 15:47:42,036 fail2ban.server : INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.3
2011-04-21 15:47:42,267 fail2ban.jail : INFO Creating new jail 'ssh'
2011-04-21 15:47:42,267 fail2ban.jail : INFO Jail 'ssh' uses poller
2011-04-21 15:47:42,449 fail2ban.filter : INFO Added logfile = /var/log/auth.log
2011-04-21 15:47:42,449 fail2ban.filter : INFO Set maxRetry = 6
2011-04-21 15:47:42,450 fail2ban.filter : INFO Set findtime = 600
2011-04-21 15:47:42,451 fail2ban.actions: INFO Set banTime = 600
2011-04-21 15:47:42,510 fail2ban.jail : INFO Jail 'ssh' started
2011-04-21 15:47:42,720 fail2ban.actions.action: ERROR iptables -N fail2ban-ssh
iptables -A fail2ban-ssh -j RETURN
iptables -I INPUT -p tcp -m multiport --dports ssh -j fail2ban-ssh returned 300

kann mir jemand genaureres erklären. bzw. warum failban so reagiert?

(google bringt mir wenig, da diese offenbar mit ISPConfig 3 bislang keine Probleme gab)

lg Maxi
 

Werbung

Top