[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

fail2ban on sarge.



Hi all,
I've installed fail2ban from unstable on my sarge box. Is any one using it
on sarge? If so I could yse your help. It seems as though it's not working.
I'm still getting alot of failed login attempts over SSH and never get
emailed about a rule being added?

---------Samlpe---------
Nov 10 11:02:53 spoonie sshd[21318]: Illegal user adm from
::ffff:83.211.3.125
Nov 10 11:02:53 spoonie sshd[21318]: Illegal user adm from
::ffff:83.211.3.125
Nov 10 11:02:54 spoonie sshd[21320]: Illegal user ident from
::ffff:83.211.3.125
Nov 10 11:02:54 spoonie sshd[21320]: Illegal user ident from
::ffff:83.211.3.125
Nov 10 11:02:55 spoonie sshd[21322]: Illegal user resin from
::ffff:83.211.3.125
Nov 10 11:02:55 spoonie sshd[21322]: Illegal user resin from
::ffff:83.211.3.125
Nov 10 11:02:56 spoonie sshd[21324]: Illegal user mikael from
::ffff:83.211.3.125
Nov 10 11:02:56 spoonie sshd[21324]: Illegal user mikael from
::ffff:83.211.3.125
Nov 10 11:02:57 spoonie sshd[21326]: Illegal user mike from
::ffff:83.211.3.125
Nov 10 11:02:57 spoonie sshd[21326]: Illegal user mike from
::ffff:83.211.3.125
Nov 10 11:02:58 spoonie sshd[21328]: Illegal user suva from
::ffff:83.211.3.125
Nov 10 11:02:58 spoonie sshd[21328]: Illegal user suva from
::ffff:83.211.3.125
---------End Sample-----------

I'm am also using firehol firewall. Would that cause problems for fail2ban
creating rules?

Any help would be great.

Thanks

Ralph
--
The pen is mightier than the sword, and considerably easier to write with.




Reply to: