Re: Bookworm, fail2ban and sshd
On Fri, 15 Mar 2024 14:59:49 -0000 (UTC)
Curt <curty@free.fr> wrote:
> I guess it's this old bug:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770171
Yup, thank you. I added the following stanza to
/etc/fail2ban/jail.d/curley.conf:
[sshd]
backend = systemd
(The "enabled" pair is already given in defaults-debian.conf.)
And running "fail2ban-client -d | grep -i ssh" confirms both that the
server is running, and that the ssh jail is enabled.
Which lead to another problem: I got a warning:
519846]: WARNING 'allowipv6' not defined in 'Definition'. Using default
one: 'auto'
Which would have been fine, except a) I don't like warnings, and 2) I
do not use or want ipv6. So I changed that to a no in fail2ban.local.
And I had to move that stanza to under the [Definition] heading to
quiet the warning.
--
Does anybody read signatures any more?
https://charlescurley.com
https://charlescurley.com/blog/
Reply to: